Cyber risk has stopped behaving like a technical problem and started behaving like an operating condition. Ransomware, supply chain compromise, credential theft and state-linked disruption all look different on the surface - but inside the business, they create the same problem: the trusted systems, vendors and identities that organizations rely on become the attack path. Traditional controls, static risk registers and compliance checklists are not built for a threat environment where exploits arrive months before disclosures are even published.

This session, led by Jacob Combs of Tandem Diabetes Care, will cover:

• Why the security question has shifted from "do we have the right controls?" to "what still works when trusted systems fail?";
• How failure mode analysis across ransomware, supply chain, credential theft and state disruption scenarios builds a testable resilience model;
• Why resilience must be proven - not planned - and what recovering while still under attack actually requires.