Beltug Security Day: turning strategy and compliance into resilience

EY Law started the event off with insights into the evolving EU Cybersecurity Act and the impact on supply chain security. Next, Christelijke Mutualiteit shared its approach to navigating cyber risks, while Deloitte drew on a real-life case to share concrete insights. Telenet shared practical lessons on how to turn cyber ambition into daily operation, and the Centre for Cybersecurity Belgium (CCB) wrapped up the day with a national cyber resilience outlook and practical maturity tips.

From schemes to strategy: how the proposed updates to the Cybersecurity Act reshape supply chain security

Cyber threats do not stop at organisational boundaries, and the EU regulatory framework is evolving accordingly. We got a closer look at the proposed updates to the EU Cybersecurity Act, with a particular focus on supply chain risks and the increasing alignment with NIS2 obligations. This included the proposed modifications reshaping supply chain risk management, while exploring how security teams can turn compliance into an opportunity to build tighter vendor risk programmes and improve visibility into third-party exposure.

Angela Nowosad, Senior Counsel and Kelly Matthyssens, Counsel, EY Law

User story: The new security equation: Trust + Resilience + ‘AI-doption’

Cyber security strategy today must address more than cyber threats. Organisations also face increasing compliance requirements, continuous environmental change and the accelerating pace of AI. This session shared examples of real-world threats in corporate environments and outlined a cyber security strategy built on a triad of trust, resilience and ‘AI-doption’. It explored how this approach can help organisations navigate current and emerging risks, and how cyber security can support and reinforce business strategy.

Stefan Van Gansbeke, CISO and Director of Risk, Security and Legal, Christelijke Mutualiteit (Presentation not available)

NIS2: Driving holistic organisational transformation — a use case on third-party risk management

NIS2 is more than an information security regulation; it’s an organisation-wide transformation that reshapes risk management, governance and operational resilience. This session explored practical use cases and the major pitfalls organisations face under NIS2, with a deep dive into third-party risk management. We discovered how an organisation’s security posture is only as strong as its weakest link, and that real opportunity lies not in mere compliance theatre, but in turning gaps into strategic differentiators.

Laura Dolfyn, Director, and Etienne Caron, Manager, Deloitte

From cyber strategy to cyber reality: what works, what fails, and how to keep up with change

Most cyber strategies fail not because they’re wrong, but because they’re unworkable in practice. In this session, we discovered how to turn cyber ambition into daily execution, with practical lessons on what changes — and what doesn’t — when AI enters the environment.

Mark Van Tiggel, Tribe Lead Security & Cyber Resilience / CISO, Telenet Group

Why and how to increase cyber maturity

In Belgium, as in all European countries, we are actively working to tackle the ever-growing cyber threat. This session offered a clear view of the threat landscape, to better understand how cyber resilience is being strengthened at the national level and what support is available to improve the organisation’s cyber maturity.

Phédra Clouner, Deputy Director General, Centre for Cybersecurity Belgium (CCB)