Cybersecure 2026: The Convenzis NHS Cyber Security Conference

Digital Infrastructure & Security

08:30 am
25 Feb, 2026
etc.venues, Prospero House, 241 Borough High St, London SE1 1GA

Cybersecure 2026: The Convenzis NHS Cyber Security Conference

Digital Infrastructure & Security

08:30 am
25 Feb, 2026
etc.venues, Prospero House, 241 Borough High St, London SE1 1GA

A Strategic Summit on Cybersecurity, Continuity, and Clinical Safety - All Convenzis Events Provide 8 CPD Points Per Delegate

Cybersecurity has become integral to patient safety and operational continuity. The 2024 Synnovis ransomware incident exposed how digital disruption can rapidly cascade through clinical services, forcing manual workarounds and delaying care. As digital maturity accelerates across the NHS, the system faces new, complex risks, from AI-driven attacks to the growing exposure of medical devices, IoT systems, and cloud-based data environments.

The NHS Cyber Strategy and Data Security and Protection Toolkit (DSPT) call for a unified, resilient, and security-aware health service. Delivering that vision requires more than compliance, it demands embedded culture, technical confidence, and governance that links cyber readiness to patient outcomes. The Cybersecure 2026 Summit convenes NHS leaders, cyber professionals, and system partners to translate strategic ambition into measurable, organisation-wide resilience.

Summit Focus:

The Cybersecure Summit is a skills-led, applied learning event designed to help NHS leaders strengthen digital assurance and clinical safety through robust cyber capability. Delegates will engage with tested frameworks, peer learning, and scenario-driven exercises aligned with the NHS Cyber Strategy and national resilience priorities.

Dedicated Skill Clinics will focus on practical tools for ransomware prevention, identity and access management (IAM), and cloud data protection, providing ready-to-use artefacts for assurance and continuity.

Lessons Learned Sessions will explore real incidents and AI-powered threat scenarios, with NHS and industry leaders sharing how systems recovered, adapted, and strengthened resilience.

This is not a showcase of what to achieve, but a skills exchange on how to achieve it, translating national ambition into measurable improvement.

This year’s event is structured around clear outcomes. Delegates will leave understanding:

  • Approaches for mitigating ransomware and AI-driven cyber threats through layered defence and intelligence sharing.
  • Methods for securing medical devices, clinical IoT systems, and connected diagnostic equipment.
  • Frameworks for cloud and data storage protection aligned with DSPT, ICO, and NCSC best practice.
  • Strategies for managing supplier and third-party risk through structured assurance and collaboration.
  • Practical models for strengthening IAM through multi-factor authentication, role-based controls, and network segmentation.
  • System-wide approaches to embedding cyber awareness and security culture across clinical and non-clinical teams.

What’s New for 2026:

  • Morning & Afternoon Skill Clinics: Scenario-based sessions exploring ransomware readiness, AI threat response, and identity management frameworks.
  • Lessons Learned Sessions: Candid reflections on major cyber incidents, what failed, what adapted, and what sustained continuity.
  • Supplier Engagement Forum: Dedicated discussions on supply-chain assurance, contractual accountability, and shared risk visibility.
  • Action-Driven Case Studies: Examples of trusts strengthening cloud security, IAM, and medical device protection through collaborative design.

Why Attend:

  • Earn 8 CPD Points by attending.
  • Build capability in ransomware defence, cloud assurance, and supplier risk management.
  • Access frameworks and templates aligned to DSPT, NCSC, and NHS Cyber Strategy guidance.
  • Translate national policy into operational resilience and board-level assurance.
  • Strengthen IAM, workforce readiness, and cyber culture across all levels of your organisation.
  • Join a national community focused on securing the digital foundations of NHS care delivery.

Who Would Benefit:

This summit is designed for NHS leaders and technical specialists driving cybersecurity, resilience, and data protection, including Board Members, SIROs, CIOs, CISOs, CCIOs, and CNIOs. It will also benefit ICB digital and resilience leads, Heads of Cyber, IG and DPO teams, as well as Business Continuity, Procurement, and Supplier Assurance managers.

Suppliers, technology partners, and academic collaborators will gain valuable insight into NHS cybersecurity priorities, implementation expectations, and the collaborative frameworks shaping the next generation of secure, data-driven health and care systems.

The programme

08:30

Registration & Networking

Registration - Open from 8:30 am - Closes at 11:00 am

All delegates must complete their registration process before the 11:00 AM cut-off time. Please arrive in a timely manner to allow for registration and to avoid any inconvenience. Delegates who arrive after the registration deadline will be refused entry to the event.

We appreciate your cooperation in helping us maintain the event's schedule and ensuring that everyone can fully participate in the Conference. If you have any questions or require assistance, our event staff will be available to assist you with the registration process.

Thank you for your understanding, and we look forward to an insightful and productive event together!

09:30

Chair Opening Address (Confirmed)

Dr Avi Mehra
Associate Partner & Clinical Safety Officer
IBM

Chair Opening Address

Setting the tone for a skills-first day on cyber resilience.

09:40

Keynote Presentation - From Compliance to Resilience: Cyber Security as Patient Safety (Speaker TBC)

Session Overview:

This keynote will set the tone for the day, unpacking how the DHSC’s Cyber Security Strategy for Health and Social Care 2023–2030 and the NHS 10-Year Plan converge around a simple truth: digital safety is patient safety.

The session will outline the government’s trajectory towards cyber-resilient organisations by 2030, highlight why ransomware readiness is no longer optional, and explore how cyber underpins delivery of digital-first, integrated care.

10:00

Morning Skill Clinic - The Ransomware Dilemma: Payment Bans, Reporting, and Real-World Response

Barry Richardson
Head of Cyber Security and Information Security
NHS Blood and Transplant

Session Overview:

With government proposals to outlaw ransom payments across the public sector, NHS leaders face a critical shift in how they prepare for attacks. This panel brings together voices from NHS England, the NCSC, and provider trusts to explore the operational, legal and ethical implications. Expect candid debate on mandatory reporting, board duties, and how to run exercises that simulate “no-payment” decisions while still safeguarding critical services.

Pannelists:

  • Carol Mitchell, Head of Corporate IG & DPO, NHS England (Invited)
  • Andrew Wright, Joint Head of Cyber Security, Hillingdon & LNWH NHS Trusts (Invited
  • Barry Richardson, Head of Cyber Security and Information Security, NHS Blood and Transplant (Confirmed)

10:30

Main Sponsor

Main Sponsor

10:50

Morning Break & Networking

Morning Break & Networking

11:50

Chair Morning Reflection (Confirmed)

Dr Avi Mehra
Associate Partner & Clinical Safety Officer
IBM

Chair Morning Reflection (Confirmed)

11:55

Case Study - Rapid7

Case Study - Rapid7

12:15

Case Study - IntaForensics

Case Study - IntaForensics

Turning forensic insights into prevention, detection and reporting capability.

12:35

Leadership Lessons from the Front Line - Cross-Sector Lessons in Identity and Access Management (Speaker Provisionally Confirmed)

Session Overview:

Speaker: Danu Sivapalan, 2025 Most Inspiring Woman in Cyber Award Winner, Identity and Access Management Specalist, Sainsbury's (Provisionally Confirmed)

A relaxed, conversational discussion with our event chair, exploring:

  • How large commercial organisations like Sainsbury’s approach IAM, governance, and workforce engagement.
  • Lessons NHS teams can adapt for secure, user-friendly access.
  • Practical insight on balancing security, compliance, and usability at scale.

12:55

Case Study - CrowdStrike

Case Study - CrowdStrike

Applying advanced detection and IAM at NHS scale.

13:15

Lunch & Networking

Lunch & Networking

14:15

Chair Afternoon Address (Confirmed)

Dr Avi Mehra
Associate Partner & Clinical Safety Officer
IBM

Chair Afternoon Address (Confirmed)

14:20

Case Study - BlueFort

Case Study - BlueFort

About us:

BlueFort is the UK’s only Full-Service Security Integrator, specialising in identity and cloud security. As the security team for security teams, we combine expert knowledge with cutting-edge technology to help organisations secure their digital identities and cloud environments while navigating the complexities of compliance and regulatory requirements(NCSC CAF, NIS2, ISO 27001, and GDPR to name a few). With a curated suite of tools, products, and skills, BlueFort partners with CISOs and Security Operations teams to consolidate, optimise, and transform their security landscape—ensuring seamless protection against evolving threats in an increasingly cloud-driven world.

14:40

Interactive Workshop - What Would a Hacker Do? Practical Cyber Habits for Everyday NHS Life (Confirmed)

Nasser Arif
Award Winning Cyber Security Manager
London Northwest Healthcare NHS Trust and The Hillingdon Hospitals NHS Foundation Trust

Session Overview:

This hands-on cyber workshop will take delegates inside the mindset of a cybercriminal, exploring the simple, everyday vulnerabilities that can lead to major incidents and how you can protect against them.

Focusing on social media awareness, personal device security, and internal skill-building, attendees will leave with tangible actions they can apply immediately to their own digital lives and teams.

Rather than discussing past incidents, this interactive session will empower staff to recognise risk patterns, identify internal cyber champions, and embed a culture of proactive security across their organisations and homes.

15:00

Case Study - Heimdal

Case Study - Heimdal

15:20

Afternoon Skill Clinic - Cyber-Ready by 2030: What Will It Take? (Speakers TBC)

Barry Richardson
Head of Cyber Security and Information Security
NHS Blood and Transplant

Session Overview:

  • Culture and workforce awareness.
  • Technical enablers (IAM, zero trust, resilience).
  • Financial and governance priorities.

Training outcome: A practical roadmap of next steps toward genuine resilience.

15:40

Panel Discussion - Shared Care, Shared Risk: Strengthening Cyber Resilience Across Health and Social Care (Speakers TBC)

Michelle Corrigan
Chief Executive Officer
Digital Care Hub

Session Overview:

As health and social care services continue to integrate, the security of shared systems and data has become increasingly critical. This session brings together leaders working across the care ecosystem to explore practical approaches to strengthening cyber resilience.

We will discuss lessons learned from recent cyber incidents, the shared impact of system outages, and the importance of consistent standards, clear communication, and collaboration between NHS organisations, local authorities and social care providers.

The panel will highlight what good looks like in real-world settings and how to build a culture of security that supports safe, joined-up care.

Pannelists:

  • Michelle Corrigan, CEO, Digital Care Hub (Confirmed)
  • Additional Digital Care Hub Representative (TBC) (Invited)
  • NHS representative (TBC) (Invited)
  • Industry representative (TBC) (Invited)

15:40

Afternoon Breakout Clinic - Strengthening NHS Cyber Resilience Through Identity & Access Management (IAM) (Speakers TBC)

Session Overview:

As health and care systems become more interconnected, robust identity and access management has become central to cybersecurity, data integrity, and patient safety.

This practical session will focus on building capability across NHS organisations to implement IAM frameworks that support “secure by design” digital transformation.

Delegates will explore:

  • How to adopt NHS England’s IAM principles across trusts and ICS digital estates.
  • Implementing modern authentication protocols (MFA, RBAC, and conditional access).
  • Managing clinical and non-clinical user access across shared systems like the Federated Data Platform and EPRs.
  • Aligning IAM initiatives with cyber maturity assessments, DSPT compliance, and zero trust models.
  • Practical examples from NHS digital infrastructure programmes showing how IAM reduces operational and clinical risk.

This clinic will provide templates, reference models, and governance checklists to help NHS digital, IT, and clinical safety teams strengthen.

16:10

Food, Drinks & Networking

Food, Drinks & Networking

17:00

End of Day

End of Day

Convenzisvents

Your Pass Includes....

  • This conference is CPD accredited. Attendees will be eligible to gain 8 CPD points upon completion of the event.
  • Access to a leading conference speaker programme
  • Interactive Q&A sessions
  • Leadership Lessons from the Front Line
  • Cross-sector best practice
  • Meet the supplier opportunities
  • Hot breakfast & Lunch included
  • Access to post event drinks reception and Street food

Tickets For NHS Senior Managers

We have an invite only option for NHS Senior Managers for our conference, to see if you qualify for a complimentary place please click the button below.

Register your place

Book tickets

Ticket
Price
Quantity
Charity, Not for Profit and University (In-Person)
£203.99 excl VAT
Limited places
0
Private Sector (In-Person)
£500.00 excl VAT
Limited places
0
Free NHS Ticket
£0.00 No VAT
Limited places
0

Our accreditations

abpco 2021
Manchester Bee
CPD Member
Living Wage Member
Good Employment - Sponsor
Good Employment - Member
Armed Forces Covenant
Tech UK
IHSCM
FSB
Ban The Box
Stockport County
cpdgroup