Session 3.1 Breakfast Product Brief: Who's Watching the Intern? Secure AI Adoption in Defence
Tracks
ㅤ
| Thursday, November 19, 2026 |
| 7:30 AM - 8:30 AM |
| Royal Theatre |
Sponsored by
Presentation Outline
Every agency has already hired an AI agent it has never met. It works around the clock, holds credentials to more systems than most staff, never takes leave, and the only record of what it did is the diary it writes itself.
ASD has now published the rules for supervising it, and in 2026 those rules became controls in the Information Security Manual. Most agencies have not yet worked out how they will show an assessor that the controls are being met, or what evidence they will reach for when an agent does something nobody asked it to.
This session takes a plain-language look at what ASD is asking for, why the obvious answer of more logging falls short, and where the independent evidence actually lives. Attendees leave with a short, practical checklist to take back to the office.
Speaker
Mr Chris Thomas
Field CISO - APJ
ExtraHop
ㅤ
Biography
Chris Thomas is Field CISO - APJ, at ExtraHop. In this role, Chris helps customers and partners across the region realise the power of network intelligence as they work to identify, investigate and stop advanced threats.
Chris has more than 20 years of experience in the cybersecurity industry and has held roles across various enterprise security organisations from practitioner to consultant including frontline incident response, technical sales engineering, professional services and architecture and implementation consulting. As an incident response expert, Chris actively utilised network forensics and endpoint detection and response (EDR) tools to perform investigations into sophisticated threats facing enterprises today such as ransomware and APT-based intrusions.
Born and raised in Australia, Chris currently resides in Singapore with his wife.
Chris has more than 20 years of experience in the cybersecurity industry and has held roles across various enterprise security organisations from practitioner to consultant including frontline incident response, technical sales engineering, professional services and architecture and implementation consulting. As an incident response expert, Chris actively utilised network forensics and endpoint detection and response (EDR) tools to perform investigations into sophisticated threats facing enterprises today such as ransomware and APT-based intrusions.
Born and raised in Australia, Chris currently resides in Singapore with his wife.
