OK So What IS Working

This closing plenary takes a broad look at which approaches in security are actually working, rather than which ones are simply popular. The session is framed around the question of what works, pushing the audience to consider how they judge results and what they should keep doing.

The middle of the talk moves through several themes that come through clearly: the role of community and people sharing their experiences, the value of building software and tools, and how outside pressures such as cyber insurance and government-level expectations shape what organisations choose to do. The discussion stays at a high level and is aimed at a general security audience rather than a specialist one.

The closing portion returns to encouragement. Attendees are urged to act on changes they have been putting off, to tell their stories to others, and to test ideas in practice and learn from the outcome. The main takeaway is that progress comes from honest evaluation and shared learning rather than from assumptions about what should work.