In-Person

Toronto CISO Community

Executive Summit

December 3, 2025 | Marriott Downtown at CF Toronto Eaton Centre

December 3, 2025
Marriott Downtown at CF Toronto Eaton Centre

Collaborate with your peers

Get together with Toronto's top CISOs to tackle shared business challenges and critical priorities facing your role today. Participate in this one-day, local program with peer-driven topics and interactive discussions with your true C-level peers.

Join your peers to discuss the most critical issues impacting CISOs today:

Recalculating risk appetites across the C-suite and strengthening relationships accordingly

Streamlining user access through intelligent technologies

Balancing security best practices with business needs to drive innovation and resilience

Toronto CISO Governing Body

The Governing Body Co-Chairs shape the summit agenda, ensuring that all content is driven By CISOs, For CISOs®.

Governing Body Co-Chairs

What to Expect

Interactive Sessions

Hear from CISO practitioners and thought leaders on how they're solving critical challenges impacting your role today in Keynote sessions, and join smaller, interactive discussions with your peers in Breakout and Boardroom sessions.

Community Networking

Make new connections and catch up with old friends in casual conversations during dedicated time for networking designed to better acquaint you with your Toronto CISO community.

Peer-to-Peer Meetings

Connect with like-minded peers in a private, one-on-one setting through Peer-to-Peer Meetings. You will be matched with peers in your community based on your shared interests and priorities.

Agenda

Executive Boardroom Sessions

AppSec Revolution—Driving Efficiency with Context and Culture

Traditional security practices are struggling worldwide against modern threats and the rapid pace of software development. The solution lies in leveraging production data, which enables effective Application Detection and Response (ADR) by integrating real-time insights into code behavior, vulnerabilities, and attacks. This approach empowers development and operations teams across borders to collaboratively enhance security.

Join this roundtable to discuss:

  • Identifying what’s wrong with the current approach to protecting Apps and APIs
  • Enhancing vulnerability scanning with real production insights
  • Strengthening attack protection with contextual awareness

Achieving Maximum Impact with Minimal Resources

Security functions are being tasked with achieving greater outcomes with the same or fewer resources — from budgets to headcount. How can CISOs and CIOs ensure security posture isn’t impacted by a lack of resources?

Join this session to discuss:

  • Challenges in scaling at the pace of the business
  • Strategies to allocate tools and resources effectively
  • Methods to communicate the business value of security investment

Building a Secure Foundation for Data-Driven Digital Transformation

Establishing a secure data governance and protection program that successfully aligns with business priorities is paramount — especially as organizations race to identify as many use cases as possible to leverage GenAI. How can security leaders support and enable the digital processes, interactions and transactions that drive their business? By establishing a secure, modern governance framework that protects high quality data throughout its lifecycle.

Join this session to discuss:

  • How to align security objectives with data governance principles
  • Strategies to ensure availability, integrity and confidentiality in data while mitigating risks for the long term
  • The importance of complying with data-focused regulations while creating value from a data governance framework

User Access—Leveraging the Right Technologies

The path to a stronger IAM strategy lies within an agile digital system. CISOs are often challenged with keeping an entire company up to date, as well as identity-related breaches and core business operations being interrupted - but easy to use technology (when leveraged correctly) can be a game changer.

Join this boardroom to discuss:

  • What the essentials are for building an efficient IAM system
  • The challenges faced when protecting remote workers’ environments
  • Optimizing user experience when adopting a user access program

Communicating and Measuring Cyber Risk More Effectively

In today’s environment, it is even more challenging for security leaders to communicate and measure their cyber risk and program to their executive board. Being fully transparent about an organization’s weaknesses, strengths, and investments as it relates to cyber risk can be an uncomfortable conversation to have, but it is essential to the overall health of the business. 

Join this session to learn:

  • Metrics that quantify challenges & risks
  • How to create trust with dialogue delivery and engage leadership with non-security terms
  • Using data to communicate and explain the risks and how to best leverage this data

From Technologist to Trusted Business Leader

As the role evolves, CISOs no longer want to be seen as technologists but as essential business leaders who happen to be tech savvy. In this newly defined role, how are you demonstrating your understanding of business priorities and gaining trust and support from stakeholders as you outline an infosec strategy that enables the enterprise?

Join your peers to discuss:

  • Balancing a sense of urgency with due diligence
  • Building a team with the right blend of technology and business skills
  • Cultivating persuasive leadership

Should CISOs be Responsible for Business Continuity?

 While incident response, business continuity, and disaster recovery are unquestionably linked, each is a separate initiative with its own distinct objectives. While it makes sense for CISOs to own IR, business continuity is increasingly also finding its way onto CISOs' already overloaded plates -- but is that where it should be? Since so much of BCP is tied to the service impacts on the organization such as financial, reputation, etc. as CISO do you feel you have sufficient qualifications/expertise to address?

Join your peers for a thought-provoking discussion about:

  • Where business continuity should optimally sit in the organization
  • What CISOs with BCP under their purview are doing to manage it
  • How CISOs are navigating BCP challenges whether they're responsible for it or not

Paving a Path for Tomorrow’s CISOs

Complex, high-pressure and stressful -- three words many CISOs use to describe their roles. In this environment, it's vital to question the sustainability of the role of the modern CISO. How do we make such a demanding role appealing to the next generation of security talent? Can you remain productive at this level of pressure for the next 5, 10, or even 20 years? 

Join this boardroom session to discuss:

  • Identifying emerging leaders and enabling their development
  • Cultivating a forward-thinking security culture
  • Laying a strong foundation for not only your team, but the security industry as a whole


Keynote Sessions

Brain-Driven Resilience—Neuro-Optimizing for Executive Edge

 In the high-stakes arena of billion-dollar enterprises, resilience isn't just an asset; it's a necessity. Learn how elite athletes, Navy SEALs, and top executives leverage cutting-edge neuroscience and cognitive training to elevate their relationship with adversity to yield more resilient outcomes. Cognitive training can help boost executive function and enhance decision making under pressure.

Join Megs Gelfgot, Tedx speaker and two-time founder, as she shares:

  • Hacks for gaining a competitive edge
  • Tactical resilience leadership strategies
  • Ways to mitigate symptoms of cognitive decline

Zero Trust & AI—Strengthening Security, Reducing Complexity, and Driving Innovation

Businesses stand to benefit from AI in unprecedented ways, but only if security leaders overcome transformation challenges. This includes implementing a modern zero trust architecture to protect data and users, embracing AI while managing its risks, and handling the technical and financial implications of ever-expanding environments. A risk-based approach to security ensures CISOs deliver a secure, phased transformation.

Join this session to:

  • Understand how zero trust and AI together, unlike firewalls, provide the strongest cyber defense by stopping threat actors from lateral movement within networks
  • Learn strategies for protecting AI applications developed in data centers and the cloud, while preventing data leaks from public AI applications
  • Discover how eliminating costly legacy hardware simplifies environments while cutting network and security costs

Beyond Technical Excellence—How Emotional Intelligence Transforms Cybersecurity Effectiveness

Perfectly competent technical teams falling apart under pressure. Stakeholder communications that create more problems than they solve. Incident responses where human factors turn manageable situations into organizational nightmares. Every CISO has seen or lived through each of these scenarios—and likely more than once.

As an industry, we've spent decades building amazing technical capabilities while ignoring the human elements that determine success or failure in critical moments. After 30+ years of battle-tested experience in the cybersecurity trenches, CISO Jamie Giroux realized that a new approach was needed to transform his security operations teams from merely technically competent to strategically exceptional. 

In this keynote, Giroux shares his elements of his game-changing framework specifically engineered to integrate emotional intelligence (EQ) with cybersecurity operations, including:

  • Why teams with higher emotional intelligence consistently outperform technically superior teams during actual incidents
  • What concrete steps for building EQ capabilities within existing security frameworks and operational constraints actually work
  • How organizations are achieving 15-25% improvements in key security metrics through human performance optimization


Breakout Sessions

Better Together—Internal Audit and Cybersecurity

Traditionally, the relationship between audit and cybersecurity teams has been marked by a degree of tension—each function operating with distinct objectives, priorities, and perspectives. However, as cyber threats evolve and regulatory pressures mount, CISOs have a unique opportunity to transform this dynamic into a strategic partnership.

Join this session to:

  • Learn how integrated approaches to controls testing, vulnerability management, and incident response can uncover blind spots, streamline compliance, and drive continuous improvement
  • Talk through real-world examples of successful partnerships, common challenges, and actionable strategies for fostering trust and communication between these critical functions
  • Discover how aligning audit and cybersecurity not only strengthens defenses, but also delivers greater value to the business

Navigating the Risks vs. Rewards of GenAI

As organizations continue to race to unlock business value from GenAI, information security leaders are tasked with navigating a complex landscape — balancing the promise of innovation with concerns about data integrity, trustworthiness, and operational risk. 

Join this session to hear a candid conversation between cybersecurity leaders about their experiences — and concerns — with leveraging AI’s opportunities and mitigating its risks in the context of enterprise cybersecurity, including:

  • Establishing effective governance frameworks
  • Fostering a culture of responsible AI use and adoption
  • Ensuring that the drive for business innovation doesn't compromise cybersecurity

Next-Level Security Transformation—Engaging Boards, the Business, and Beyond

In today’s complex threat landscape, transforming an enterprise into a truly security-aware organization requires more than technical solutions—it demands a shift in business mindset and culture at every level, including the ELT and board. 

Join this session to hear from your CISO peers as they share:

  • Proven methods for engaging executive leadership and the board, ensuring security is aligned with overall business objectives and decision-making
  • Practical approaches to foster security awareness beyond compliance and technical controls, emphasizing the roles of people, process, and governance
  • Real-world experiences leading a cultural transformation, making security an integral part of enterprise strategy and daily operations


We look forward to seeing you at an upcoming in-person gathering

Gartner cares about the health and safety of our community. If you are feeling unwell, please refrain from attending the conference. At this time, Gartner does not have any health-related requirements in place for attendance. Should this change, we will follow up with updated guidance.

Location

A block of rooms has been reserved at the Marriott Downtown at CF Toronto Eaton Centre at a reduced conference rate. Reservations should be made online or by calling 800-905-0667 . Please mention Toronto Executive Summit to ensure the appropriate room rate.

Deadline to book using the discounted room rate of $289 CAD (plus tax) is October 30, 2025.

Your Community Sponsors

Global Thought Leader

CISO Thought Leader

Key Sponsor

Program Sponsors

Community Program Manager

For inquiries related to this community, please reach out to your dedicated contact.

Lynn Morrow

Senior Community Program Manager

503-805-5624

lynn.morrow@gartner.com