Cybersecurity programmes often rely on periodic risk assessments, control reviews, and incident-driven improvements, while adversaries continuously adapt their techniques, infrastructure, and decision-making.

In this session, Dionysis Karamitopoulos introduces Continuous Adversarial Readiness, a governance-led security operating model that connects threat intelligence, controlled adversarial emulation, AI-assisted analysis, and continuous validation of defensive controls.

The session explores how current threat intelligence can trigger targeted security validation, how AI can support analysis and prioritisation, and how the resulting evidence can feed back into security architecture and risk decisions. It also addresses a critical question as security technology becomes increasingly autonomous: where should automation stop, and where should human decision-making remain mandatory?

Rather than proposing autonomous retaliation or “hack back” approaches, the model focuses entirely on defensive readiness. The objective is to continuously understand how relevant adversaries may approach an organisation, test whether existing controls remain effective, and adapt security decisions before weaknesses become incidents.

Attendees will leave with a practical framework for connecting adversarial thinking, AI-assisted security, continuous control validation, and governance within an enterprise security programme.