Ilias Chantzos leads Broadcom’s global privacy and data governance programme across the company’s business units and regions. In this role, he provides legal advice, supports governance and regulatory compliance processes, and engages with government bodies, national authorities and international organisations.

Before joining Broadcom, Ilias spent almost 16 years in legal and government affairs roles at Symantec. In his final role, he led Government Affairs across EMEA and the Asia Pacific Japan region and served as Global Advisor for Critical Infrastructure Protection and Privacy. Earlier in his career, he worked as a Legal and Policy Officer in the European Commission’s Directorate-General for Information Society. His work covered European information security policy, the Council of Europe Convention on Cybercrime and several EU legislative initiatives relating to cybersecurity and privacy.

Today, Ilias co-chairs ITI’s European Policy Committee and serves on the Advisory Board of Europol’s European Cybercrime Centre. Between 2006 and 2025, he also served in various capacities on ENISA’s Advisory Board. In 2014, the World Economic Forum named him a Young Global Leader.

Ilias holds a law degree from the Aristotle University of Thessaloniki, a Master's degree in Computers and Communications Law from the University of London, and an MBA from the Solvay Business School. He is a member of the Athens Bar Association.

Data sovereignty is becoming an increasingly important part of regulatory risk assessments. Ilias Chantzos will explain how the legal concept of risk has evolved and to what extent it now encompasses sovereignty-related risks, with a particular focus on GDPR and DORA. He will then assess the proposed CADA framework, highlighting its strengths and the areas that may require further negotiation. Finally, Ilias will outline Broadcom’s approach to data sovereignty and share the company’s broader perspective on the current debate.

Data sovereignty is gaining increasing importance, both regulatory and technologically. But what does sovereignty actually mean for companies—and is it sufficient to focus solely on data, data protection, and compliance? A company can meet regulatory requirements, protect its data well, and still remain in critical technological dependencies that restrict its ability to act.

The roundtable takes this tension as its starting point and expands the discussion on data sovereignty to include the challenges brought about by technological and strategic dependencies. At the center are questions such as: Can a company be compliant and well-protected while still having critical dependencies? When does a technological dependency become a matter of sovereignty? How much sovereignty does a company actually need – and at what points can dependencies be consciously accepted? And what additional dynamics does the increasing use of AI bring to this discussion?

Also up for discussion is the thesis behind the e3 Enterprise Sovereignty Index (ESI): Sovereignty is perhaps less a question of «sovereign or not sovereign,» and is rather about understanding existing dependencies, dealing with them consciously, and maintaining one's own ability to make decisions and take action.

At the center are the perspectives of the participants: their experiences, their challenges, and also different viewpoints on what sovereignty actually means for their own company.

Clive Finlay is Business Leader and Field CTO for Europe at Broadcom’s Enterprise Security Group. He leads the group’s European field operations, including the Symantec and Carbon Black partner business, engagement with CISOs, regulators and standards bodies, and the representation of strategic customer requirements to R&D. With more than 30 years of cybersecurity experience, he specialises in information governance, data security and privacy. Clive also chairs the Symantec User Group community across the UK and Europe and is a member of techUK’s National Security Committee.

As Large Language Models and embedded AI are adopted at pace, sensitive data is being processed, exposed and targeted in new ways. Clive Finlay explores how Broadcom’s AI-enhanced security portfolio is evolving traditional defences from endpoint to edge. He will examine how organisations can secure data within AI models, apply adaptive, risk-based policies and defend against AI-driven attacks. Drawing on practical frameworks, Clive will show how security teams can maintain visibility and control and keep enterprise data protected as the AI landscape continues to evolve.

Artificial intelligence is rapidly evolving into a new consumer of corporate data. But does this also create a new channel for data leakage?

With the increasing use of large language models, RAG, AI agents, and MCP-based integrations, traditional approaches to information security and data protection are coming under pressure. Companies must redefine which data the AI is allowed to access. Is excluding prompts from model training sufficient as a security measure? What happens when AI agents access company data on behalf of an employee and independently execute actions?.

The roundtable explores how AI is transforming existing data and security architectures as well as traditional DLP approaches – ranging from prompts and context to RAG and agents, permissions, and data access. Based on concrete practical experience, the discussion will also address the actual everyday impact that regulatory requirements such as the GDPR, DORA, NIS2, and the EU AI Act have on businesses.

The focus is less on theoretical models and more on concrete questions and practical experience. Participants are invited to bring in their own challenges, discuss different perspectives, and jointly explore how the protection of sensitive corporate data will evolve in an increasingly AI-driven IT landscape.

Data protection is a leadership responsibility. Thomas Fürling has championed this principle for more than 25 years. As the founder of e3 AG and an early specialist in Data Loss Prevention, he combines technological expertise with a clear focus on processes, accountability and leadership. Thomas supports organisations in developing and implementing holistic information protection strategies, spanning DLP, data classification, automation and Bring Your Own Encryption. His goal is to prevent data loss systematically, make security processes scalable and ensure organisations retain control over their data and encryption keys at all times.

Artificial intelligence is changing not only how organisations use data, but also how unintended data leakage can occur. At the same time, expectations around data sovereignty continue to rise. Harnessing the value of AI while preventing data leakage and maintaining control over sensitive information can initially appear contradictory. Thomas Fürling will explain why the traditional logic of “detection or prevention” must evolve and how a holistic approach to information protection can bring these objectives together. His keynote will put current developments into perspective and outline the safeguards organisations need across technology, operations and governance to use AI securely while retaining control over their data.

Matt Jones is the Technical Director for Information Security products, including Symantec DLP and CloudSoc. He has been with Symantec for 7 years, having previously working for Partners covering the same product line since 2010, leading consultancy and building DLP Managed Service teams. He has a solid foundation in content inspection software technologies since working at Content Technologies/Clearswift working with MimeSweeper product range from 2000. Now, his core focus is helping catalyst partners and in turn, their partners, across Europe and the APAC regions to navigate all areas of the Symantec Information protection suite.

As technologies evolve, data volumes grow and work environments become more distributed, DLP programmes must continuously adapt. Matt Jones will provide an overview of the latest developments in Symantec DLP and explain how organisations can integrate them into their existing information protection strategies. Alongside new capabilities, he will share proven best practices for architecture, policy design, tuning and day-to-day operations. Participants will gain practical guidance on how to evolve their DLP deployment, improve visibility, reduce unnecessary alerts and protect sensitive information more effectively across endpoint, network and cloud environments.

Knowing where sensitive company data is stored is becoming more important than ever. With growing data volumes, distributed storage locations, and an increasing number of cloud services, it is no longer sufficient to view individual systems in isolation. Traditional DLP scans for «data at rest,» modern cloud storage scans, and Data Security Posture Management (DSPM) are increasingly intertwining to jointly create transparency regarding where information worthy of protection is located and what risks it is exposed to.

The increasing volume of stored data significantly raises the demands on analysis, control, and protection. This requires specialized analytical procedures that can process large volumes of data efficiently, recognize content worthy of protection, and specifically classify risks.

At the same time, the boundaries between traditional storage locations and modern collaboration platforms are blurring. Solutions like Bloomberg and other communication and collaboration systems also contain large amounts of permanently stored information that can ultimately be analyzed and protected using the same «data at rest» technologies.

The roundtable addresses these developments and discusses which approaches are proving effective in practice to create transparency regarding distributed data assets and to derive appropriate protection measures. The focus is on the experiences and challenges of the participants. You are invited to contribute your own questions and discuss together how «data at rest» can be effectively implemented as a central building block of holistic information protection.

Chris Martin is a distinguished security strategist and technology expert with over two decades of experience in the cybersecurity industry. He currently serves as a Security Strategist and Technical Director Network Security within Broadcom's Enterprise Security Group. Prior to his current role, he has a wide range of experience from various vendors in the industry. Among others from Blue Coat, Symantec, VMRay and Zscaler.

His areas of expertise are security intelligence and cloud-native network security. As a consultant, Chris has supported private and public sector organizations worldwide, helping them sustainably strengthen their security strategies and processes with his technical Chris Martin is a distinguished security strategist and technology expert with over two decades of experience in the cybersecurity industry. He currently serves as a Security Strategist and Technical Director Network Security within Broadcom's Enterprise Security Group. Prior to his current role, he has a wide range of experience from various vendors in the industry. Among others from Blue Coat, Symantec, VMRay and Zscaler. Known for his deep technical expertise in security intelligence and cloud-native network security technologies, Chris has provided consultancy services to private and public sector organizations globally. With a long-standing career dedicated to enhancing organizational security posture, Chris has a verifiable history of helping customers strengthen their security operations by applying his strategic and technical knowledge..

What’s New in Network Security and Best Practices

Hybrid working models, cloud services and new AI-driven applications are changing network traffic and secure access requirements. Stas Elenkrich and Chris Martin will provide an overview of the latest developments across the Symantec Network Security portfolio and show how organisations can use them effectively. The session will focus on visibility, consistent policy enforcement and protecting users and applications across hybrid environments. Drawing on proven best practices, Stas and Chris will explain what matters when deploying, configuring and operating the solutions and how unnecessary complexity can be avoided. Participants will gain practical recommendations for strengthening network security and getting greater value from their existing Symantec environment.

From ZTNA to Agentic AI: Building Resilient Access for MCP-Driven Workflows

As autonomous AI agents and Model Context Protocol (MCP) workflows become more prevalent, they create new challenges for network security, traffic visibility, and policy enforcement. This session explores how Symantec Network Protection is evolving to deliver resilient, context-aware security that addresses these emerging risks and helps protect the future of agentic AI.

Symantec Network Security Roadmap

Stas Elenkrich and Chris Martin will provide a strategic and technical outlook on the Symantec Network Security roadmap. They will show how the portfolio is evolving in response to dynamic hybrid and cloud environments, new access patterns and autonomous AI agents. Key areas include context-aware access controls, greater network traffic visibility and resilient policy enforcement. Participants will learn what to expect from upcoming releases.

With the increasing adoption of AI, the security perimeter of enterprises is expanding significantly beyond traditional applications, infrastructures, and cloud workloads. New components such as «skills,» agents, and integrations can create additional attack surfaces or serve as access paths into sensitive environments themselves. At the same time, standards like the Model Context Protocol (MCP) are connecting AI systems more closely with enterprise data and internal tools—thereby creating new trust boundaries, attack vectors, and risks for data exfiltration.

The roundtable examines how protection concepts must evolve in hybrid cloud and on-premises environments. The focus is, among other things, on AI proxies and AI gateways, where encrypted or dynamically generated AI traffic, tool calls, prompts, and model interactions present new challenges for traditional security controls.

«Shadow AI» as well as internally operated LLMs and AI platforms also increase complexity. Together with the participants, this roundtable will discuss new attack scenarios, gaps in existing security architectures, and practical approaches to create transparency, enforce policies, detect suspicious behavior, and protect sensitive data. Participants are invited to contribute their own experiences, challenges, and questions, and to discuss together how hybrid AI environments can be effectively secured without unnecessarily restricting their use.

Peter Severa is a member of the Executive Management team and a Software Engineer at e3 AG. Combining strategic responsibility with technical expertise, he helps shape the evolution of e3’s software solutions. His work focuses on secure software architecture, sustainable development processes and the automation of complex information protection workflows. As a Software Engineer, Peter understands the operational requirements of DLP and incident management from a product and development perspective. This experience directly informs the e3 DLP / IDR roadmap and its continuous alignment with the needs of security teams.

How can the management of DLP incidents become simpler, more automated and better suited to different operating models? Peter Severa will provide an overview of the current e3 DLP / IDR roadmap and its planned developments. The session will focus on the modernised user interface, more flexible case views and the continued expansion of workflow automation and integrations. Peter will explain what users can expect from upcoming releases and how these enhancements will support faster and more consistent incident handling. Participants will gain an outlook on the solution’s next development steps and what they mean for day-to-day DLP operations.

Stanislav (Stas) Elenkrich is the Director of Product Management for Network Protection at Broadcom Software Group. Stas joined Broadcom seven years ago through the acquisition of the cybersecurity startup Luminate Security. He specializes in network protection, AI-driven security strategies, and leading ZTNA product innovations to secure modern hybrid environments.

What’s New in Network Security and Best Practices

Hybrid working models, cloud services and new AI-driven applications are changing network traffic and secure access requirements. Stas Elenkrich and Chris Martin will provide an overview of the latest developments across the Symantec Network Security portfolio and show how organisations can use them effectively. The session will focus on visibility, consistent policy enforcement and protecting users and applications across hybrid environments. Drawing on proven best practices, Stas and Chris will explain what matters when deploying, configuring and operating the solutions and how unnecessary complexity can be avoided. Participants will gain practical recommendations for strengthening network security and getting greater value from their existing Symantec environment.

From ZTNA to Agentic AI: Building Resilient Access for MCP-Driven Workflows

As autonomous AI agents and Model Context Protocol (MCP) workflows become more prevalent, they create new challenges for network security, traffic visibility, and policy enforcement. This session explores how Symantec Network Protection is evolving to deliver resilient, context-aware security that addresses these emerging risks and helps protect the future of agentic AI.

Symantec Network Security Roadmap

Stas Elenkrich and Chris Martin will provide a strategic and technical outlook on the Symantec Network Security roadmap. They will show how the portfolio is evolving in response to dynamic hybrid and cloud environments, new access patterns and autonomous AI agents. Key areas include context-aware access controls, greater network traffic visibility and resilient policy enforcement. Participants will learn what to expect from upcoming releases.

Oliver Freund has been working at the intersection of technology, business, and cybersecurity for more than 15 years. Starting his career as a software engineer at UBS, he evolved through engineering, business analysis, and IT leadership roles before specializing in information security. Today, as a Security Solutions Architect at e3 AG, he helps organizations strengthen their security posture through modern data protection, cloud security, and compliance solutions. Oliver holds a Master's degree in Cyber Security and Digital Forensics and is CISSP-certified, combining practical experience with deep security expertise.

Integrating different DLP solutions poses significant challenges for companies in practice. If platforms such as Microsoft Purview, Symantec, Trellix, or Zscaler are used in parallel, inconsistent policies, different detection logics, and a fragmented view of security events quickly emerge.

The roundtable addresses these challenges based on concrete customer projects and demonstrates what matters when multiple DLP technologies interact. A key focus is on how events from different sources can be centrally consolidated, thereby creating a consistent overview of risks, incidents, and protective measures. With e3 IDR, the focus is on an approach that integrates information from various DLP sources and makes it centrally visible.

The focus is on practical experiences, best practices, and lessons learned in operating combined DLP environments. Participants are invited to contribute their own challenges and experiences and discuss together how to reduce complexity and improve visibility across different protection solutions.

Crispin Tschirky is CTO at e3 AG and the creator of the Centraya encryption solution. With more than 20 years of experience in IT security, he combines technology strategy with deep expertise in secure software architecture. As Chief Architect, he has played a central role in developing Centraya into an enterprise-grade solution for protecting data across cloud and SaaS environments. His work focuses on encryption, key management, secure cloud access and software lifecycle security. At e3, Crispin shapes the company’s technology direction and ensures its solutions meet high standards for quality, performance and security.

Artificial intelligence is rapidly evolving into a new consumer of corporate data. But does this also create a new channel for data leakage?

With the increasing use of large language models, RAG, AI agents, and MCP-based integrations, traditional approaches to information security and data protection are coming under pressure. Companies must redefine which data the AI is allowed to access. Is excluding prompts from model training sufficient as a security measure? What happens when AI agents access company data on behalf of an employee and independently execute actions?.

The roundtable explores how AI is transforming existing data and security architectures as well as traditional DLP approaches – ranging from prompts and context to RAG and agents, permissions, and data access. Based on concrete practical experience, the discussion will also address the actual everyday impact that regulatory requirements such as the GDPR, DORA, NIS2, and the EU AI Act have on businesses.

The focus is less on theoretical models and more on concrete questions and practical experience. Participants are invited to bring in their own challenges, discuss different perspectives, and jointly explore how the protection of sensitive corporate data will evolve in an increasingly AI-driven IT landscape.