What does it really take to move from risk to resilience? At ROCon EMEA, Sarah Armstrong-Smith—Executive Cybersecurity and Crisis Leader—delivers a keynote on how organizations must rethink cybersecurity in an era shaped by geopolitics, AI, and increasingly sophisticated threat actors. Drawing on nearly three decades of frontline experience, Sarah introduces a framework for understanding risk through three critical lenses: • Microscope — what’s already happened • Periscope — what’s bearing down now • Telescope — what’s coming next But resilience isn’t just about visibility—it’s about strategy. From the rise of cyber influence operations to long-game threat actors, this session explores why traditional perimeter defenses fall short—and why organizations must shift to protecting their “crown jewels” from the inside out. Key themes include: • Why cyber risk is no longer just an IT problem—but a business and geopolitical one • How attackers plan months ahead while defenders react in cycles • Why identifying and protecting your most critical assets is central to resilience • How to cut through noise and prioritize what truly matters The takeaway: resilience isn’t about stopping every attack—it’s about adapting, prioritizing, and protecting what matters most. Recorded live at ROCon EMEA. Start building your Risk Operations Center today: https://www.qualys.com/apps/enterprise-trurisk-management Stay up to date on upcoming events: https://www.qualys.com/company/events Watch more sessions from ROCon EMEA: https://www.qualys.com/rocon/2026/emea

 76      1