The 2026 Threatscape

AI is accelerating attacker speed, scale, and creativity. The result isn’t just “more threats,” it’s more inefficient security; overlapping controls, blind spots in identity and SaaS, and testing that lags behind change. The answer isn't in implementing another tool. Instead, it’s about operationalizing control optimization; measuring how each control actually reduces risk in the face of AI-aided techniques and reallocating investment accordingly.

In this talk, Evgeniy Kharam shares a practical, vendor-neutral way to quantify effectiveness: define adversary-centric objectives (ATT&CK-mapped), set baselines, continuously validate controls across identity, endpoint, SaaS, and cloud, and translate outcomes into ROI the business understands. He’ll cover quick wins (days, not months), common pitfalls, and how to use these metrics to justify roadmap and spend for 2026.

Key takeaways:

• A simple model to measure real control effectiveness against AI-driven tactics
• How to find and fix “control drift” created by digital transformation
• What to automate in continuous validation—and what not to
• A board-ready ROI narrative that ties security outcomes to business risk