Cybersecurity becomes real when the business stops. At ROCon EMEA, Andy Powell joins Richard Seiersen for a candid conversation on what it takes to build cyber resilience in the wake of one of the most disruptive cyberattacks in history. Andy shares firsthand lessons from the NotPetya attack, which brought Maersk’s global operations to a standstill in minutes—forcing a complete rebuild of the company’s IT infrastructure and redefining how leadership views cybersecurity. The discussion goes beyond the incident itself to focus on how security leaders should think. Not in terms of tools or frameworks, but in terms of business impact. At Maersk, where global logistics operates on tight margins and constant motion, even small disruptions can cost millions. That reality forces a different approach to risk—one grounded in context, trade-offs, and real-world consequences. A key theme throughout the session is prioritization. Not every vulnerability should be fixed immediately. Not every system can be taken offline. The challenge is understanding which risks matter most to the business, and making decisions that balance security with operational continuity. Andy also shares how his military background shaped his approach to cybersecurity—treating it as a continuous contest between defenders and adversaries, where success depends on thinking ahead, understanding intent, and acting with speed and clarity. The takeaway: cybersecurity isn’t about eliminating risk. It’s about making better decisions under pressure—and being prepared when failure actually happens. Recorded live at ROCon EMEA. Start building your Risk Operations Center today: https://www.qualys.com/apps/enterprise-trurisk-management Stay up to date on upcoming events: https://www.qualys.com/company/events Watch more sessions from ROCon EMEA: https://www.qualys.com/rocon/2026/emea

 78      1