On November 16, 2022, the annual ISACA Risk Event was held at Spant! Congrescentrum in Bussum the Netherlands.
Jump directly to: About Speakers Aftermovie Programme & Downloads Location Gallery
Risk Event 2022
The GREAT 'Risk' Reset
The past 2-3 years have been marked by many impactful events or themes that will continue to receive more attention in the coming period, such as corona, further digitalization and climate change. In addition, there are also various themes that are expected to come to the fore in the coming years and will have more impact on our work and our lives, such as the increasingly widespread availability of attack techniques, robotization and deepfakes.
These events and themes also have a (strong) link with information security and thus with the importance of mitigating the risks that come with it and arise from it as much as possible. Think of risks regarding remote working, more complex ransomware attacks, increased dependence on cloud services and more shortages of cybersecurity specialists or resources due to raw material shortages. At the same time, we see that governments and supervisors are further tightening the laws and regulations (including NIS2) to protect society against these risks. All in all, the time is ripe for the third IT Risk Event!
This congress focuses on the contemporary risks that organizations are confronted with.
The program starts with a number of keynotes, and is then divided into the following four main streams:
- IT Risk
- Supplier Risk
- Corporate Risk
- Emerging Risk
Each of the main streams contains various seminars by top speakers and you decide which one you attend! You can find all the names of speakers on the program page.
During the day there is sufficient time to speak to speakers and other participants during the breaks, lunch, drinks and dinner.
The ISACA Risk Event is aimed at (IT) Risk Managers and Risk Consultants, Security/Privacy and Cyber specialists, IT Auditors, CIOs, (Senior) Management, Thought leaders in organizations, Business information managers, Application managers, Project and service managers and Consultants in the IT sector.
Aftermovie
Programme Risk Event 2022
The GREAT IT Risk
The GREAT Emerging Risk
The GREAT Corporate Risk
The GREAT Supplier Risk
Piet is Senior External Relations Manager in the Security Office and is building and managing the relationships with external stakeholders in Government, Law Enforcement, Peers and the Semiconductor Ecosystem. He is the founder of the Security Circles of Trust initiative and can draw upon 35+ years of experience in the ICT/Cyber Industry and as Rapporteur for the European Commission Horizon 2020/EU program.
He will explain the Business & ESG rationale behind the strategy, why ASML is implementing this strategy and elaborate upon what other organizations can do follow ASML’ lead to work together with external stakeholders to raise the security of the entire ecosystem.
Etay Maor is the Sr. Director Security Strategy at Cato Networks and an industry recognized cyber security researcher and keynote speaker.
Previously, Etay was the Chief Security Officer for IntSights Before that Etay held numerous leadership and research positions as an Executive Security Advisor at IBM and as Head of RSA Security’s Cyber Threats Research Labs.
Etay is an adjunct professor at Boston College and holds a BA in Computer Science and a MA in Counter Terrorism and Cyber Terrorism. Etay is a frequent featured speaker at major industry conferences.
Irfaan is a Thought Leader on secure DevOps. It is his mission to close the gap between the world of Application Development, IT Operations and Security. He fulfilled several information security leadership roles for listed & global enterprises like Wolters Kluwer, ABN AMRO bank and helped numerous multinationals in solving complex information security challenges as Deloitte. At ABN AMRO Irfaan lead the security implementation for DevOps, as part of a transformation program to uplift 500+ Dev-teams to become DevOps. Irfaan is also writing a book on how to scale security in DevOps which will be released in Q1 2023. He is a Master in Computer Science (a programmer by heart) and is fascinated by the Inner Science of Yoga & Meditation.
Having a background Deepfakes as a corporate risk in Technology, Policy and Management, Ellen has always been focused on the impact that technology can make. While technology is a great enabler for organizations, there are many risk involved as well. Ellen always seeks to find simple and actionable solutions to tackle (emerging) complex problems.
Dina Boonstra heeft gewerkt aan grote maatschappelijke transities. Digitalisering van grote administratieve processen bij AEGON (binnenkort ASR), liberalisering van de energiemarkt bij NUON (nu Vattenfall) en de omslag van papieren media naar een multi-mediaal bedrijf bij o.a. NDC Mediagroep (nu Mediahuis Noord). Sinds 2019 is ze eindverantwoordelijk voor de NV NOM, de ontwikkelings- en investeringsmaatschappij voor de drie noordelijke provincies.
De NOM richt zich op het innovatieve MKB dat een bijdrage wil leveren aan circulaire en duurzame processen, een gezondere samenleving en digitalisering van het MKB.
Defensie is een super organisatie om voor te mogen werken. Jan Marko Silvius doet dat in een prachtig team van doorzetters en karakters. Hij werkt als hoofd van de afdeling Inkoop IT nauw samen met de Defensie IT organisatie (JIVC).
Niels Hatzmann werkt als zelfstandig projectleider en documentatiespecialist in de non-profit sector. Het Ministerie van VWS huurde hem in om mee te helpen bij het bouwen van de systemen die nodig waren voor de bestrijding van de pandemie.
Josina is an advisor & consultant and the first holder of a blockchain Ph.D. in Portugal. Before starting as a technology-based investigator, she worked for 20+ years as a Marketing & Finance Director. She is currently a consultant at various companies and start-ups, a blockchain trainer, as well as a lecturer.
Floor Terra is Senior Adviseur bij Privacy Company waar hij de risico’s van het gebruik van producten en diensten van grote techbedrijven onderzoekt zoals de publiek beschikbare DPIAs over Microsoft-, Google- en Zoom-producten.
Marcel is werkzaam als Senior Manager bij KPMG Advisory Nederland. Marcel heeft overheid en private organisaties geholpen hun gevoelige informatie, assets en werkprocessen, alsmede sleutelfiguren van een organisatie, te beschermen tegen persistente actoren met een offensief cyber programma.
Peter is sinds 2018 als partner werkzaam bij EY betreffende Cyber assurance. Daarvoor heeft Peter 24 jaar gewerkt bij KPMG (Security & Technology), en 4 jaar bij Booking.com (Risk & Compliance). Ook is peter al meer dan 20 jaren betrokken bij de opleiding IT-auditing van TIAS, waaronder als hoofddocent voor de specialisatie Auditing Cybersecurity.
Alex de Vries is de oprichter van Digiconomist, wat vooral bekend is voor het leveren van informatie met betrekking tot de duurzaamheid van Bitcoin en andere digitale valuta via o.a. de Bitcoin Energy Consumption Index. Alex is ook op dit onderwerp aan het promoveren aan de VU Amsterdam.
Karen zijn beide werkzaam in het Data Governance team van de Data, AI & Analytics afdeling van Royal Schiphol Group. Als Data Consultants houden zij zich o.a. bezig met het beheer van data(producten), opstellen van guidelines en werken aan datakwaliteitsissues.
Karen, opgeleid als architect, heeft eerder bij KPN kennis ontwikkeld over procesontwerp, L6S trajecten, en BIM Modelling, waarin data al een grote rol spelen. Ze is bij Royal Schiphol Group gaan werken vanwege haar radiotechnische kennis, maar heeft met de interne overgang naar het Data Governance team definitief de stap gemaakt naar het datawerkveld.
Eline zijn werkzaam in het Data Governance team van de Data, AI & Analytics afdeling van Royal Schiphol Group. Als Data Consultants houden zij zich o.a. bezig met het beheer van data(producten), opstellen van guidelines en werken aan datakwaliteitsissues.
Eline, consultant van CRANIUM NV, heeft ervaring opgedaan als privacyconsultant binnen verschillende Belgische organisaties, vooraleer de overstap te maken naar het bredere datawerkveld.
Vincent Thiele is the Deputy Chief Information Security Officer (CISO) at Darktrace and former CISO of Cybersprint. He is responsible for Darktrace ’s security strategy, external cooperation and information sharing. Next to his day job is active as a volunteer at CSIRT.Global helping make the internet safer.
Former roles of Vincent were In his former role, Vincent was head of the Cyber Crime Expertise and Response Team (CCERT) at ING bank, Architect at DoD and incident responder at GOVCERT.NL
Stefan Simenon is an IT professional passionate about topics such as Continuous Integration Continuous Delivery, Software Quality, Tooling, DevSecOps, Cloud Native, Security and Public Cloud technology and the management of the cultural, organizational, team and technological changes associated with these approaches.
When working in complex multi-stakeholder environments, I use my social and communication skills combined with in depth IT knowledge and a sense of humor, to manage and overcome challenge.
I like to share and have shared this passion by speaking at several seminars and conferences.
Erwin Maas werkt als manager CERT bij Northwave. In zijn rol als manager zorgt hij dat de incident respons teams ingezet kunnen worden bij cyberaanvallen in de BeNeLux, DACH en de Nordics. Daarnaast is Erwin crisismanager bij grote cyberaanvallen. Als crisismanager structureert hij de crisis voor een directie en/of raad van bestuur van getroffen bedrijven. Voordat Erwin begon bij Northwave heeft hij ruim 20 jaar voor de Koninklijke Marine aan boord van onderzeeboten gevaren en meerdere uitzendingen gedaan.
Sam Huibers is sinds 1 juli 2022 manager Vaktechniek bij het IIA Nederland. Hiervoor werkt hij onder andere bij Upfield en Heineken in diverse audit management rollen. Hij is zijn loopbaan gestart bij DSM.
Robbert Kramer studied business information technology and started working for EY as an IT Auditor. He performed IT audits and was also involved in Legal Hack activities. After EY he started working for Van Lanschot in ‘s-Hertogenbosch. Joined the Internal Audit department and afterwards moved to Security Management. In 2016 Robbert became Security Risk Manager for ASML performing Supplier Security. Main pillars for supplier security are protecting ASML Information and Cyber Security.
Robbert Kramer is also lecturer at the TIAS for the IT audit program. As senior lecturer he is responsible for the module that deals with Trust and Control of technologies.
Pepijn heeft ruim twintig jaar cybersecurityervaring bij toonaangevende Nederlandse private en publieke organisaties. In 2000 begonnen als forensisch onderzoeker, ethisch hacker en docent, in 2008 overgestapt naar de rijksoverheid om Nederland digitaal weerbaarder te maken en in 2015 naar een van de veiligheidsdiensten, totdat hij in 2020 voor zichzelf begon.
Ir. Andre (A.C.M.) Smulders CISSP werkt meer dan 20 jaar op het gebied van informatiebeveiliging, cybersecurity en risico management. Hij is de co-auteur van het boek “Foundations of Information Security – based on the ISO27001 and 27002“ en de TNO-publicatie “Networked Risk Management”. Daarnaast is hij een van de Digitaal Ambasadeurs in zijn woonwijk in Den Haag.
Céline Christensen joined ING in 2020 as Lead Behavioural Risk Management. Prior to ING she worked for the Dutch Authority for the Financial Markets (AFM) as the Head of the Culture & Behaviour supervision team. Céline studied Economics and Change Management at the VU in Amsterdam.
Former Director General of Israel national cyber directorate, Israel leading national cyber security agency, for 4 years until 2022. Overall 33 years in national security data warfare and cyber duties in Israel. Today private Cyber business man, and advisor to Rescana.
Sunette Runhaar is the Insider Threat Awareness Lead at Uber, helping to build the company’s first dedicated Insider Threat program. She has over eight years’ experience in risk consulting, investigations, and information security.
Before joining Uber, Sunette built and managed the InfoSec Education and Awareness Program at Tesla. She also spent four years working at a UK-headquartered risk consultancy, advising clients on anything from reputational risk, to pirates, and chemical warfare.
Sunette holds an MSc in Biochemistry from the University of Stellenbosch.
Melike Ozunlu is a risk management professional with 11+ years of experience in the industry. She has held key roles in model risk in various organizations in US and EU including EY, The World Bank, Citizens Bank, and currently at ING as the Head of Model Risk Oversight as interim. Melike holds MS and Bachelor’s degrees in Financial Engineering and Physics.
Magdalena Chociej is a Model Risk expert at ING Group, with over six years’ experience in modelling and Data Science and two years’ experience in Model Risk Management. Magda has a background in Mathematics and Computer Science. As Model Risk expert she ensures Model Risk oversight for Analytics & Business Support models.
Fokke Jan van der Tol is a multilingual legal counsel with a holistic view on the interaction between legal issues and organisational performance in both local, international and multi-jurisdictional environments. Key areas of his expertise include EU regulatory compliance and risk management.
Vincent is Associate Director in the Technology Consulting and Internal Audit practice of Protiviti with 15+ years of experience in Information Security & Privacy, Security & IT Governance, Information Risk management and IT Audit & Control. Next to his consulting work at Protiviti, Vincent also lectures at the University of Amsterdam with the Executive Program of Digital Auditing (EPDA) and the Executive Program of Internal Auditing (EMIA).
Egge is a beta with a touch of alpha and is an expert in the field of Data Science in healthcare. He holds a PhD in Experimental Particle Physics and a Bachelor in Philosophy. He does not easily fit into boxes and uses that ability to build bridges.
Mark is an internationally known Governance, Risk and Compliance expert specializing in information assurance, risk IT strategy and digital trust. He has held roles spanning from CIO to IT consulting and is considered a thought leader in frameworks such as COBIT, NIST, ITIL and multiple ISO standards.
My name is Dwayne Valkenburg, I work as an IT Auditor and IT Risk & Compliance Manager. Since 2006, I have been active in the Managed IT Services & IT Outsourcing sector as an IT Engineer, switching to the IT Auditing profession at a BIG4 firm in 2013 and as of 2017, I founded Cyberus, an IT Assurance, Advisory & Consultancy firm.
I am also active on a voluntary basis since November 2014 with the professional associations the NOREA, ISACA and the IIA as, Chairman and Vice-Chairman of the Young Profs committees. In recent years, I have been responsible within the ISACA Board, with all events, webinars and conferences of ISACA Netherlands, as well as the Privacy and Young Profs working groups.
As of June 2022, I could call myself chairman of ISACA Netherlands and together with an enthusiastic and, above all, fun group of fellow volunteers, we may together offer a platform where we jointly take the profession of IT Auditing, IT Governance, IT Compliance, IT Security & IT Risk Management to a higher level.
If you have any questions, or are interested in working together, please feel free to contact me.
<h1 class='my-heading'>Just some HTML</h1><?php echo 'The year is ' . date('Y'); ?>document.addEventListener("DOMContentLoaded", function () {
const container = document.querySelector(".risk-loop-container");
if (!container) return;
const kaarten = Array.from(container.querySelectorAll(".risk-card"));
const rijen = {};
// Sorteer alle kaarten eerst op starttijd
kaarten.sort((a, b) => {
const tijdA = a.getAttribute("risk-starttijd") || "";
const tijdB = b.getAttribute("risk-starttijd") || "";
return tijdA.localeCompare(tijdB);
});
// Verdeel kaarten per tijdslot
kaarten.forEach((kaart) => {
const tijd = (kaart.getAttribute("risk-starttijd") || "").trim();
if (!rijen[tijd]) {
const rij = document.createElement("div");
rij.classList.add("risk-row");
rij.setAttribute("data-starttijd", tijd);
container.appendChild(rij);
rijen[tijd] = rij;
}
rijen[tijd].appendChild(kaart);
});
// Sorteer binnen elke rij op data-podium
Object.values(rijen).forEach((rij) => {
const cards = Array.from(rij.querySelectorAll(".risk-card"));
cards.sort((a, b) => {
const pA = parseInt(a.getAttribute("data-podium")) || 999;
const pB = parseInt(b.getAttribute("data-podium")) || 999;
return pA - pB;
});
cards.forEach((kaart) => rij.appendChild(kaart));
});
});function sorteerEnGroepeerKaarten() {
const container = document.querySelector(".risk-loop-container");
if (!container) return;
// Verwijder oude rijen (voor het opnieuw opbouwen)
container.querySelectorAll(".risk-row").forEach((el) => el.remove());
// Zoek alle kaarten
const kaarten = Array.from(container.querySelectorAll(".risk-card"));
const rijen = {};
// Sorteer kaarten op starttijd
kaarten.sort((a, b) => {
const tijdA = a.getAttribute("risk-starttijd") || "";
const tijdB = b.getAttribute("risk-starttijd") || "";
return tijdA.localeCompare(tijdB);
});
// Groepeer kaarten per tijdslot
kaarten.forEach((kaart) => {
const tijd = (kaart.getAttribute("risk-starttijd") || "").trim();
if (!rijen[tijd]) {
const rij = document.createElement("div");
rij.classList.add("risk-row");
rij.setAttribute("data-starttijd", tijd);
// 🔧 Dit is waar de grid toegepast moet worden:
rij.style.display = "grid";
rij.style.gridTemplateColumns = "repeat(auto-fit, minmax(220px, 1fr))";
rij.style.gap = "1rem";
container.appendChild(rij);
rijen[tijd] = rij;
}
rijen[tijd].appendChild(kaart);
});
// Sorteer binnen elke rij op podium-nummer
Object.values(rijen).forEach((rij) => {
const cards = Array.from(rij.querySelectorAll(".risk-card"));
cards.sort((a, b) => {
const pA = parseInt(a.getAttribute("data-podium")) || 999;
const pB = parseInt(b.getAttribute("data-podium")) || 999;
return pA - pB;
});
cards.forEach((kaart) => rij.appendChild(kaart));
});
}
// Initieel en bij AJAX reload
document.addEventListener("DOMContentLoaded", sorteerEnGroepeerKaarten);
document.addEventListener("bricks/ajax/nodes_added", sorteerEnGroepeerKaarten);
function sorteerEnGroepeerKaarten() {
const container = document.querySelector(".risk-loop-container");
if (!container) return;
// Verwijder oude gegroepeerde rijen
container.querySelectorAll(".risk-row").forEach((el) => el.remove());
// Verzamel en sorteer alle kaarten op starttijd
const kaarten = Array.from(container.querySelectorAll(".risk-card"));
const rijen = {};
kaarten.sort((a, b) => {
const tijdA = a.getAttribute("risk-starttijd") || "";
const tijdB = b.getAttribute("risk-starttijd") || "";
return tijdA.localeCompare(tijdB);
});
// Groepeer kaarten per tijdslot
kaarten.forEach((kaart) => {
const tijd = (kaart.getAttribute("risk-starttijd") || "").trim();
if (!rijen[tijd]) {
const rij = document.createElement("div");
rij.classList.add("risk-row");
rij.setAttribute("data-starttijd", tijd);
rij.style.display = "grid";
rij.style.gridTemplateColumns = "repeat(auto-fit, minmax(220px, 1fr))";
rij.style.gap = "1rem";
container.appendChild(rij);
rijen[tijd] = rij;
}
rijen[tijd].appendChild(kaart);
});
// Sorteer binnen elk tijdslot op podium
Object.values(rijen).forEach((rij) => {
const cards = Array.from(rij.querySelectorAll(".risk-card"));
cards.sort((a, b) => {
const pA = parseInt(a.getAttribute("data-podium")) || 999;
const pB = parseInt(b.getAttribute("data-podium")) || 999;
return pA - pB;
});
cards.forEach((kaart) => rij.appendChild(kaart));
});
}
function initKaarten() {
sorteerEnGroepeerKaarten();
const container = document.querySelector(".risk-loop-container");
// Herinitialiseer Bricks Extras Lightbox
if (typeof doExtrasLightbox === "function" && container) {
doExtrasLightbox(container, true);
console.info("✅ Bricks Extras Lightbox opnieuw geïnitialiseerd");
} else {
console.warn("⚠️ Bricks Extras Lightbox functie niet beschikbaar of container niet gevonden");
}
}
// Init bij paginalaad
document.addEventListener("DOMContentLoaded", initKaarten);
// Init na AJAX/facet filtering
document.addEventListener("bricks/ajax/nodes_added", initKaarten);
Location
This year’s Risk Event took place at Spant!, a modern and inspiring venue in the heart of the Netherlands. Located in Bussum, just 25 minutes from Amsterdam and easily accessible by car and public transport.
Spant!
Dr. A. Kuyperlaan 3
1402 SB, Bussum
Gallery
Take a look back at Risk Event 2022. A day full of inspiring talks, lively discussions, and meaningful connections.
Scroll through the highlights and relive the atmosphere, the energy, and the people who made it unforgettable.
