Attackers now target the decisions and data driving the business, and they're increasingly autonomous and AI-driven, faster than human-speed defenses can match. That makes cyber resilience a board-level growth question, not just an IT line item. This keynote lays out Agentic Cyber Resilience: preemptive, identity-aware recovery built into SaaS, AI, and core infrastructure so the business can contain and recover from AI-driven threats as fast as they strike. We'll set the stakes for scaling AI adoption without betting the company on it.

Analyst spotlight presenting findings from two editorially independent surveys by The Economist and The Atlantic, covering 1,300+ CXOs. Our research shows that AI agents now operate inside the enterprise with trusted access, that 98% of organisations running them have already faced a disruptive incident, and that confidence is outrunning control. It examines why boards lack proof of recovery, and previews our next phase of research, "What is resilience worth?"

Enterprises now need one operational fabric across hybrid data, identity, SaaS, and AI agent activity, and the bar for resilience keeps moving. This session previews the roadmap and where the Rubrik platform is headed for CXOs: agentic operations across Rubrik Security Cloud and Rubrik Agent Cloud, orchestrated recovery workflows that compress weeks of manual work into minutes, and governance guardrails that keep autonomous actions auditable and reversible.

The Rubrik Security Cloud (RSC) is a SaaS platform that combines backup, recovery, and data security into a single solution. This helps users detect threats faster, minimize risk, and recover with confidence. Built on zero trust principles, RSC protects data across enterprise, cloud, and SaaS environments.

In this breakout session, we’ll unpack the latest Zero Labs report findings to help leaders understand the ransomware landscape today. By corroborating public incident intelligence, backup-layer telemetry, and real-world recovery cases, Rubrik Zero Labs pieces together the main offenders, who is being targeted, and what a speedy recovery requires.

• The eight ransomware groups responsible for half of nearly 17,000 publicly reported incidents studied–and why most are present in backup data
• The hardest hit industries, mean time to recover, and most common initial access vectors among ransomware groups
• Why and how the most effective groups target the recovery path

Step into a realistic AI cyber crisis simulation for CXOs, where an AI-enabled attack tears through your critical business operations. As the situation escalates, you'll face calls that can't be walked back - where to focus recovery first, what to tell stakeholders, and how much continuity you're willing to trade for speed. Every executive team believes it can recover. Few have proven it under fire. This session tests whether your recovery priorities are truly aligned - before a real crisis does it for you.

CXOs are on the front lines of data protection and resilience, and the strategies that work aren't always the ones in the playbook. This session digs into what IT and security leaders are actually doing inside their organizations: the tactics that held up under pressure, the ones that didn't, and what they'd do differently. 

M365 is the central nervous center for collaboration at many organizations, making it truly a Tier 0/1 app. As AI agents proliferate, the blast radius of a single identity compromise expands exponentially, with the possibility to lead to data exfiltration or ransomware.This session examines practical workflows for protecting identities, mailboxes, and collaboration data; rapid restoration during account takeover; and containment across Entra ID and M365. To become resilient, organizations must be confident in their ability to recover across their entire IT estate and quickly.

When identity systems fail, business stops. Recovering Microsoft AD Forests can take days and involve manual, error-prone processes. Entra ID applications are rarely backed up, making rebuilds even more complex. Okta does not offer native tenant-level recovery, and organizations often miss critical configurations, attributes, and metadata during restoration.

Cloud-native applications are critical revenue and productivity drivers, but their distributed nature makes it harder to ensure their resilience. Attackers know this, and are increasing cloud attacks in response. Organizations struggle to understand what data is exposed, how long recovery would take, and how to demonstrate resilience to stakeholders like boards and regulators.

Most CISOs and CIOs can articulate technical risk. Fewer can translate that risk into numbers a CFO will fund. Across the business value assessments we've run with organizations worldwide, the same gap shows up: strong technical justification, weak financial justification. This session shares those findings alongside a financial model that links RTO/RPO to revenue protection, downtime cost, and regulatory exposure, giving operating leaders a way to build the budget case, not just the risk case.

This panel brings together GSI leaders to discuss where resilience gaps show up in real client engagements, how AI is changing what clients ask for, and how to plan for recovery before an incident, not after it.