Dionysis Karamitopoulos
GRC Security Architect | Cybersecurity Governance, Risk, Architecture and Resilience
Actions
Dionysis Karamitopoulos is a GRC Security Architect focused on cybersecurity governance, risk management, security architecture, identity and access management, regulatory alignment and operational resilience.
His work focuses on translating governance and compliance requirements into practical security capabilities, connecting frameworks such as ISO 27001 and NIS2 with risk ownership, security controls, evidence and operational decision-making.
His broader professional and research interests include AI governance, continuous cyber risk management, adversarial readiness, third-party risk and the evolution of GRC from periodic compliance towards continuous assurance.
He develops practical approaches for organizations seeking to strengthen security while maintaining clear accountability, measurable risk management and sustainable governance.
From Passive Defence to Adversarial Readiness
Attackers continuously adapt their techniques, infrastructure and decision-making, while defensive security often relies on periodic assessments, static controls and lessons learned after incidents.
This session introduces Continuous Adversarial Readiness, an operating model that connects threat intelligence, controlled adversarial emulation, AI-assisted analysis and continuous security control validation.
Rather than using AI as an autonomous decision-maker, the model uses it to accelerate analysis, prioritisation and scenario development while maintaining explicit human oversight and decision boundaries.
We will explore how intelligence can trigger targeted validation, how control effectiveness can be continuously challenged, and how the resulting evidence can feed back into security architecture and risk decisions.
This is not about hack-back. It is about building defensive capabilities that learn and adapt at a pace closer to the adversaries they are designed to withstand.
Attendees will leave with a practical operating model for connecting adversarial thinking, AI-assisted security and governance without sacrificing accountability or control.
From Passive Defence to Adversarial Readiness
Cybersecurity programmes are still largely built around prevention, detection and response, while adversaries continuously adapt their techniques, infrastructure and decision-making.
This session introduces the concept of Continuous Adversarial Readiness - an operating model that connects threat intelligence, controlled adversarial emulation, AI-assisted analysis, continuous security validation and governance oversight.
The objective is not autonomous retaliation or uncontrolled offensive activity. It is to enable organisations to continuously understand how adversaries operate, assess whether existing controls remain effective and adapt security decisions before weaknesses become incidents.
The session will examine how AI can support this operating model while maintaining human oversight, accountability, risk ownership and clearly defined governance boundaries.
Attendees will leave with a practical framework for moving from static cyber defence towards continuously adaptive and governable security operations.
Please note that Sessionize is not responsible for the accuracy or validity of the data provided by speakers. If you suspect this profile to be fake or spam, please let us know.
Jump to top