Black Hat 2026 CISO Summit: What Security Leaders Need to Know

The Black Hat CISO Summit is a curated executive program that Informa Tech runs concurrently with Black Hat Briefings. It has its own separate registration process, eligibility requirements (typically CISO or equivalent senior security leadership title), and dedicated space within the Mandalay Bay Convention Center. The Summit format combines two types of sessions. Keynote and panel sessions bring in speakers addressing the strategic security topics most relevant to executive leadership: regulatory developments, board dynamics, AI strategy, and market trends. These sessions are more prescriptive and less technical than Briefings talks. Roundtable sessions are peer discussion groups where participants with similar organizational contexts (by sector, company size, or specific challenge) work through shared problems without a formal presenter. Roundtables are the most valued component of the Summit for most attendees: structured peer conversation with other CISOs facing the same pressures is difficult to replicate outside of a curated setting like this. The smaller attendee count and invitation-based format means the CISO Summit conversation is typically more candid than what happens in large open conference environments.

The most important difference between the CISO Summit and the main Briefings conference is the audience and conversation format. Briefings is open registration (with a paid pass) and attracts tens of thousands of attendees across the full spectrum of security roles: practitioners, researchers, students, vendors, and executives. Sessions are lecture-format with limited Q&A, and the content is research-driven, often covering specific vulnerabilities, attack techniques, and defensive methodologies at a technical depth appropriate for practitioners. The CISO Summit is invitation-based and designed for a smaller, more senior audience. Content is strategic rather than technical: the Summit does not cover exploitation techniques or tool demonstrations. It covers the organizational, regulatory, and business dimensions of running an enterprise security program. Format-wise, roundtables and panel discussions replace lecture-format talks, creating more interactive discussion. A CISO attending Briefings will see the same content as their security engineers. A CISO attending the CISO Summit will see content calibrated to the decisions only they can make: board reporting frameworks, regulatory response strategy, budget justification approaches, and peer consensus on AI security governance.

The CISO Summit targets CISOs, VPs of Information Security, Directors of Security, and equivalent senior security leadership roles at organizations of significant size. The invitation-based format is intended to maintain a peer environment: the Summit is more useful when every attendee faces similar organizational challenges, which means keeping the audience homogeneous by seniority and scope. To request an invitation, visit the Black Hat USA 2026 CISO Summit registration page and submit your registration request with your title, organization, and relevant context about your security leadership role. Informa Tech reviews requests and confirms eligibility. Submission timing matters: the CISO Summit typically fills to capacity well before the conference date, and late requests may be waitlisted. Plan to submit your invitation request at the same time you register for the main conference if you intend to attend both. Practitioners who do not hold a qualifying senior leadership title are not eligible for the CISO Summit and should focus on the main Briefings, which provides full access to the technical research content.

The CISO Summit spans both Briefings days (August 5-6) and runs for most of each day. The agenda format combines keynote sessions in the morning with themed roundtable discussions throughout the day, with breaks structured for peer networking. Morning keynotes typically run 30-45 minutes and address high-level strategic topics, often featuring security executives from major enterprises, government officials (CISA Director appearances have historically been a component of Black Hat programming), or technology leaders addressing the CISO's organizational challenges. Roundtables are the core format: groups of 8-15 CISOs convene around specific topics moderated by a facilitator. Common roundtable structures include sector-specific discussions (financial services, healthcare, critical infrastructure), challenge-specific discussions (AI security strategy, board communication, vendor consolidation), and size-specific discussions (enterprise, mid-market). Roundtable discussions are typically under Chatham House rules: what is said stays in the room, which enables candor that is rare in public conference settings. Networking sessions at the Summit are deliberately structured to maximize introductions across organizations and sectors.

The 2026 CISO Summit agenda will reflect the most pressing challenges facing security leaders this year. Four topic areas are expected to dominate. AI security strategy is the top-of-agenda topic for most CISOs in 2026. The AI vulnerability discovery demonstrated by Project Glasswing, which found 10,000+ vulnerabilities in 90 days across 200+ organizations, has changed the strategic calculus for security programs. CISOs are grappling with how to adapt patch management processes, threat models, and detection strategies to account for AI-powered adversaries. Roundtable discussions on AI security governance, AI-era board communication, and AI security tool procurement are expected to be heavily subscribed. SEC cybersecurity disclosure rules continue to generate operational challenges. The requirement to disclose material cybersecurity incidents within four business days of determining materiality, and the annual disclosure of cybersecurity risk management and governance programs, affects public company CISOs directly. The CISO Summit typically includes sessions helping executives understand the practical implications of regulatory developments for their programs. Cyber insurance market dynamics are a perennial CISO Summit topic. Premium increases, coverage restrictions, and underwriter requirements for specific security controls create procurement and compliance challenges that roundtable discussions address well. AI-era patch management is an emerging topic that follows directly from the Glasswing findings: when AI can discover vulnerabilities in weeks that conventional scanning missed for years, the organizational capacity to patch faster becomes a strategic security investment.

The choice between the CISO Summit and the main Briefings conference depends on your current priorities as a security leader. The CISO Summit is the right choice when your most pressing challenges are board-facing, regulatory, or organizational: you need frameworks for explaining AI security risk to the board, guidance on implementing SEC disclosure procedures, or peer benchmarking on budget and headcount decisions. It is also the right choice when you value peer network investment and want structured opportunities to build relationships with CISOs at peer organizations. The main Briefings conference is the right choice when your most pressing challenges are threat intelligence and technical strategy: you want to understand the AI vulnerability discovery landscape firsthand, you want to see what tools your practitioners will be using, or you want to engage directly with the researchers whose work is shaping the field. Many senior security leaders do both, splitting their time between Summit sessions in the morning and Briefings sessions in the afternoon. If you are deciding between the two for your full conference time, the answer usually comes down to whether your current work is primarily internal and organizational or primarily external-facing and threat-driven.

One of the primary reasons CISOs prioritize the Black Hat CISO Summit over other security conferences is the peer networking quality. The invitation-based, senior-audience-only format creates a concentration of security executives that is difficult to find elsewhere. Peer CISO relationships provide value that no conference session can match: direct experience-sharing on vendor evaluations, regulatory response approaches, incident experiences, and organizational challenges. A CISO who built a relationship at a previous Summit roundtable has a trusted peer they can call when facing a board presentation on AI security risk or a ransomware incident response decision. The Summit is one of the few places where those relationships form in a structured setting. The most productive Summit networking is deliberate: identify the CISOs whose organizational context most closely resembles yours before arriving, seek out roundtable sessions that will put you in the same room as peer executives from your sector or with your specific challenge set, and follow up within a week of the conference while the conversations are fresh.

Arriving at the CISO Summit prepared makes the experience significantly more valuable. Before attending, review the published agenda once it is released and identify the roundtable sessions most relevant to your current challenges. Prepare two or three specific questions or challenges you want to bring to roundtable discussions: the best roundtables are driven by participant contributions, and specific challenges generate more useful discussion than general interest. For the AI security strategy sessions, review the Project Glasswing findings before arriving. Understanding what AI-powered vulnerability discovery has already demonstrated changes the quality of the strategic discussion you can participate in. The Mythos Brief at decryptiondigest.com/mythos-brief provides a practitioner-accessible summary of the Glasswing findings and their implications for enterprise security programs, calibrated for exactly the kind of briefing material that is useful before an AI security roundtable. Bring business cards or a digital contact exchange method: the Summit is a high-value networking environment and most attendees actively exchange contact information.

The complete CISO Summit preparation guide, including AI security briefing materials for the Summit's AI strategy sessions, a roundtable discussion framework, SEC disclosure implementation guidance, and a peer CISO networking plan template, is available in the Mythos Brief for Decryption Digest subscribers.