Program Sikkerhetsfestivalen 2026

Identity

At the DNA of every company: Identity and Access Management

Tirsdag – 5 · Kulturhuset Banken, Expedisjon

EnglishDetailed 40 min

Foredragsholder

Ramsés Gallego

Ramsés Gallego

Chief Technologist Cybersecurity, DXC Technology

With a background education in Business Administration (MBA) and Law, Ramsés is a +25-year security professional with deep expertise in the Risk Management and Governance areas. Ramsés is Chief Technologist Cybersecurity with DXC Technology, where he defines the vision and mission, purpose, and promise of the company in that area. He has been Chief Technology Officer for OpenText Cybersecurity and has also been Strategist & Evangelist at the Office of the CTO in Symantec. Before, he was at Dell Security and CA Technologies for 5 and 8 years, respectively. He was Regional Manager for SurfControl in Spain and Portugal and also Chief Strategy Officer of the Security and Risk Management practice at Entelgy. Ramsés served for three years in ISACA’s CISM and CGEIT Certification Committees and also in the Guidance & Practices Committee for three years, from where deliverables are created for the community. He is honored to have been the Chair for ISACA’s ISRM Conference and part of the Program Committee for the events SecureCloud 2010 and 2012. He is now Immediate Past President at the ISACA Barcelona Chapter and played an instrumental role in the Planning Committee that prepared the first-ever ISACA's World Congress in Washington, June 2011. He has also been part of the ISACA's CISM PATF Task Force. Ramsés believes that a revolution (rather than an evolution) is needed when considering the move from technology to enterprise risk, and that the cloud dimension offers incredible opportunities for businesses today. Ramsés thinks that governance is essential to facilitate innovation in this changing business environment and holds many certifications that combine different knowledge areas and broaden his vision on technology within the marketplace. Ramsés is a CISM (Certified Information Security Manager), CGEIT (Certified in the Governance of the Enterprise IT), and a CISSP (Certified Information Systems Security Professional). He is the proud owner of the SCPM (Stanford Certified Project Manager) from Stanford University, California, one of the first experts with the CCSK (Certificate of Cloud Security Knowledge), and also an ITIL and COBIT Foundations certified professional. He develops results-oriented, business-focused, people-driven projects due to his Six Sigma Black Belt accreditation. An internationally recognized public speaker, he has visited +25 different countries in the past 12 months and has been awarded 'Best Speaker' many times. He received the John Kuyers Award for Best Speaker/Conference Contributor in June 2013. He has been named 'Privacy by Design Ambassador' by the Government of Ontario, Canada, and is proud of being Past International VP for ISACA's Board of Directors. He teaches in different universities on Digital Transformation, Change, and is a visiting professor in the Master of Cybersecurity for IE Business School. Ramsés is also Executive Vice President of the Quantum World Association and feels honored of having had the US flag flown on his honor in the Capitol on November the 1st, 2013. Ramsés has been inducted into the ISACA Hall of Fame in 2024. He lives in Barcelona, Spain, with his wonderful wife and his two loved kids.

Om sesjonen

There is one discipline that connects customers and products; one technology that build bridges between users and data; one IT angle that links employers and employees. This very dimension sits at the core of every organization and it is critical to understand who has access to what, how the access was granted, for how long, from where to where. There is one business need that is covered by the approach of providing full control and visibility on who is touching sensitive data and it is instrumental for the success of the risk management function. This is Identity Management and Access Governance and it should be the foundations for any Security program and has to do with design, architecture and even beauty. This is the opportunity for righting a wrong and providing answers to the business. This should be how we govern our an Enterprise IT. The DNA of company that connects and builds.

Samtidig i programmet

  1. Claude, Make Me a Security Engineer. Make No Mistakes. 1 · Frimurerlosjen, rom 1
  2. Key Challenges in API Security 1 · Frimurerlosjen, rom 2
  3. The Quantum Countdown: Procrastinate or Migrate? 10 · HeartBox ,Teatersalen
  4. Sitter vi fast i skyen? 10 · HeartBox, Byscenen
  5. Krav til cybersikkerhet i en usikker tid – NIS2, digitalsikkerhetsloven og personlig ansvar 11- Breiseth, Storlon
  6. Fra compliance til testet robusthet. Reell sikring av kontrollsystem demonstrert live 2 · Home hotel Hammer, moen nede
  7. Lås, kort, alarm og kode –Hvorfor fysiske systemer ikke er så sikre som vi tror 2 · Home hotel Hammer, moen oppe
  8. Fallgruver og suksessfaktorer i personellsikkerhetsarbeidet - hva du bør vite før du setter i gang? 3 · Hvelvet, Gullsalen
  9. Når mat blir geopolitikk: Slik sikrer vi Norges matfat sammen 4 · Kommunestyresalen, Lillehammer rådhus
  10. Ground Control to Major Tom: your circuit's dead! - Space Cybersecurity 5 · Kulturhuset Banken, Festsalen
  11. Forretningskontinuitet i to perspektiver - styring og beskyttelse 5 · Kulturhuset Banken, Holbøsalen
  12. Emerging Cyber Forensics Challenges: What the C‑Suite Must Know Before the Next Incident 5 · Kulturhuset Banken, Kafeen
  13. EU-regelverk er egentlig bare sunn fornuft (om du gjør det rett) 6 · Lillehammer kino, sal 2
  14. Sikkerhet som den ideelle lagspiller - Teamforskning som viser vei til sterk sikkerhetskultur 6 · Lillehammer kino, sal 4
  15. Podcast O3C 7 · Microbryggeriet
  16. Zero-Infrastructure Intelligence: Building Serverless CTI Pipelines with GitHub Actions 9 · Victoria Scandic, sal 1+2
  17. Vi må ha fabrikken opp igjen innen søndag! 9 · Victoria Scandic, sal 3