Attackers now target the decisions and data driving the business, and they're increasingly autonomous and AI-driven, faster than human-speed defenses can match. That makes cyber resilience a board-level growth question, not just an IT line item. This keynote lays out Agentic Cyber Resilience: preemptive, identity-aware recovery built into SaaS, AI, and core infrastructure so the business can contain and recover from AI-driven threats as fast as they strike. We'll set the stakes for scaling AI adoption without betting the company on it.

Enterprises now need one operational fabric across hybrid data, identity, SaaS, and AI agent activity, and the bar for resilience keeps moving. This session previews the roadmap and where the Rubrik platform is headed for CXOs: agentic operations across Rubrik Security Cloud and Rubrik Agent Cloud, orchestrated recovery workflows that compress weeks of manual work into minutes, and governance guardrails that keep autonomous actions auditable and reversible.

The Rubrik Security Cloud (RSC) is a SaaS platform that combines backup, recovery, and data security into a single solution. This helps users detect threats faster, minimize risk, and recover with confidence. Built on zero trust principles, RSC protects data across enterprise, cloud, and SaaS environments.

Step into a realistic AI cyber crisis simulation for CXOs, where an AI-enabled attack tears through your critical business operations. As the situation escalates, you'll face calls that can't be walked back - where to focus recovery first, what to tell stakeholders, and how much continuity you're willing to trade for speed. Every executive team believes it can recover. Few have proven it under fire. This session tests whether your recovery priorities are truly aligned - before a real crisis does it for you.

M365 is the central nervous center for collaboration at many organizations, making it truly a Tier 0/1 app. As AI agents proliferate, the blast radius of a single identity compromise expands exponentially, with the possibility to lead to data exfiltration or ransomware.This session examines practical workflows for protecting identities, mailboxes, and collaboration data; rapid restoration during account takeover; and containment across Entra ID and M365. To become resilient, organizations must be confident in their ability to recover across their entire IT estate and quickly.

CXOs are on the front lines of data protection and resilience, and the strategies that work aren't always the ones in the playbook. This session digs into what IT and security leaders are actually doing inside their organizations: the tactics that held up under pressure, the ones that didn't, and what they'd do differently. 

Most AI agent pilots never reach production because there's no way to monitor, govern, or control them at scale. This session covers Rubrik Agent Cloud: how it gives leaders visibility into what AI agents are doing, keeps them compliant and secure, and provides the controls needed to move from pilot to production with confidence.

Most CISOs and CIOs can articulate technical risk. Fewer can translate that risk into numbers a CFO will fund. Across the business value assessments we've run with organizations worldwide, the same gap shows up: strong technical justification, weak financial justification. This session shares those findings alongside a financial model that links RTO/RPO to revenue protection, downtime cost, and regulatory exposure, giving operating leaders a way to build the budget case, not just the risk case.

When identity systems fail, business stops. Recovering Microsoft AD Forests can take days and involve manual, error-prone processes. Entra ID applications are rarely backed up, making rebuilds even more complex. Okta does not offer native tenant-level recovery, and organizations often miss critical configurations, attributes, and metadata during restoration.

Cloud-native applications are critical revenue and productivity drivers, but their distributed nature makes it harder to ensure their resilience. Attackers know this, and are increasing cloud attacks in response. Organizations struggle to understand what data is exposed, how long recovery would take, and how to demonstrate resilience to stakeholders like boards and regulators.

Many organizations are asked to invest in cyber resilience without a clear, board-level way to show where they actually stand. As former CISOs and heads of cyber resilience, we've seen that gap firsthand - and we want to hear how you see it too. Join us for a candid, executive-level discussion on what "resilience readiness" really means and how it should be measured: what a good board-endorsed blueprint looks like, whether recovery is assumed or proven, where identity resilience blind spots hide, and how minimum viable operations should be defined. We'll also share how gaps translate into quantified financial exposure to support your business case. We will get you signed up for our Cyber Resilience Readiness Assessment (CRRA) and get a credible starting point in an hour, not a quarter.

In this breakout session, we’ll unpack the latest Zero Labs findings to help leaders benchmark their risk, understand modern attack patterns, and translate those insights into practical resilience strategies. 

This panel brings together GSI leaders to discuss where resilience gaps show up in real client engagements, how AI is changing what clients ask for, and how to plan for recovery before an incident, not after it.