April 12-15 | Marriott Downtown at CF Toronto Eaton Centre, Canada

Special Focus Day Agenda 2026

Monday April 20

Monday April 20

08:00-09:00 Registration

Foyer

Jump To: PQ Cyber Day (Mon), Crypto Infrastructure Day (Mon), ICMC (Tue-Thu)

PQ Cyber Day will help you prepare now for the threat posed by future quantum computers. Key topics include: Understanding the threat and projected timelines; assessing current encryption vulnerabilities; transitioning to standardized quantum-resistant cryptography; creating effective policies and procedures; ensuring system resilience and backups; engaging with vendors and third-party suppliers; educating team members and stakeholders; complying with regulatory requirements. This special-focus module will include important, actionable information for anyone concerned with cybersecurity in a data-dependent enterprise.


09:00-11:00 TALKS

Salon 1-3

PQ Cyber Day (Q00)

Market Status and Real-World Cryptography

Moderator: Neil Horman, Software Engineer, OpenSSL Corp., United States


09:00 Continental Drift: How the U.S. and EU Are Approaching PQC Migration (Q00a) Sameer Boray, Senior Policy Manager – Trust, Data and Technology, Information Technology Industry Council (ITI)

A look at U.S. and EU strategies for migrating to post‑quantum cryptography.


09:30 NIST PQC Standards: Final Algorithms, Open Gaps, and Timeline Reality (Q00b) Bas Westerbaan, Principal Research Engineer, Cloudflare, Netherlands

An overview of NIST approved algorithms and the status of the transition to NIST PQC standards.


10:00 Real-World PQC Considerations (Q00c) Wil Oxford, Founder and CEO, Anametric, United States

Some of the real-world pitfalls that still await us over the next decade.


10:30 Hybrid Cryptography: Surviving the Transition Period (Q00d) John Gray, Senior Principal Applications Developer, Entrust, Canada

Learn how hybrid cryptography bridges classical and quantum during the transition era.


11:00-11:30 Networking Break

Foyer


11:30-12:30 Panel Discussion

Salon 1-3

PQ Cyber Day (Q01)

Panel Discussion


11:30 Panel Discussion: the Trials and Tribulations of a PQC Transition (Q01a) Leader: Kevin Micciche, Chief Technologist, Platform Trust, HPE Networking, United States Panelists: Seema Kumar, Director, NPAT Product Management, Post-Quantum Cryptography (PQC) and UI/UX, Hewlett Packard Enterprise, United States; David Hook, VP Software Engineering, Keyfactor/Legion of the Bouncy Castle, Australia; Matt Mickelson, Lead Coordinator, Post-Quantum Cryptography Coalition (PQCC), MITRE, United States; Jeff Andersen, Senior Staff Software Engineer, Google

This panel brings together voices from various experts to discuss how they are approaching the complexities of PQC readiness. Panelists will share first-hand perspectives on balancing compliance deadlines, interoperability with existing ecosystems, and the practical engineering trade-offs required for secure and timely migration.


12:30-13:30 Lunch

Foyer/Library


13:30-15:30 Talks

Salon 1-3

PQ Cyber Day (Q02)

Implementation & Outlook

Moderator: Michele Mosca, Co-founder and CEO, evolutionQ, and Co-founder, Institute for Quantum Computing, Canada


13:30 Are You Ready? A Look at Post Quantum Cryptography‚ Readiness and Pitfalls (Q02a) Jennifer Brady, Senior Principal Security Analyst, Oracle, United States

Assess your readiness and avoid pitfalls in the quantum cryptography transition.


14:00 Crypto Inventory: You Can’t Migrate What You Can’t Find (Q02b) Basil Hess, Senior Research Engineer, IBM Research Europe, Switzerland

Discovering your crypto inventory is key to a successful PQC migration.


14:30 Architecture Resilience and Your HSM Selection (Q02c) Bruno Couillard, Co-Founder & CEO, Crypto4A, Canada

Choose the right HSM to build resilient, trustworthy architectures in a digital world.


15:00 HSM and PCI/FIPS Requirements in the Post-Quantum Era: Certification & Lifecycle (Q02d) Manish Upasani, VP of Product & Strategy, Utimaco, United States

Navigate HSM certification and lifecycle requirements in the post‑quantum era.


15:30-16:00 Networking Break

Foyer


16:00-17:00 Panel Discussion

Salon 1-3

PQ Cyber Day (Q03)

Panel Discussion


16:00 Panel Discussion: PQC Readiness by 2030? – Trust but Verify in a Diverse Technology Ecosystem (Q03a) Leader: Blair Canavan, Director Alliances, PKI and PQC Portfolio, Thales Group, Canada Panelists: Jaime Gomez, Global Head of the Santander Quantum Threat Program, Santander Digital Services, Spain; Bill Newhouse, Cybersecurity Engineer, National Cybersecurity Center of Excellence, National Institute of Standards and Technology (NIST), United States; Michele Mosca, Co-founder and CEO, evolutionQ, and Co-founder, Institute for Quantum Computing, Canda; Ted Shorter, Chief Technology Officer, Keyfactor, United States

Will we be ready for a CRQC by 2028-2030? This talk will focus on describing critical & identifiable technology areas and gaps in PQC-readiness as the world undertakes the single largest cryptographic uplift in history. This explosion of diverse trusted solutions competes with the priorities of commercial demand, as well as, the gaps in regulatory compliance. Learn how to ask the right questions and provide suitable answers for your PQC journey.


17:00 Adjourn

Presenting Sponsor

Crypto Infrastructure Day convenes experts from government, industry, and standards bodies to examine the technologies that underpin trusted systems: Public Key Infrastructure (PKI) for digital trust, PKCS #11 for secure cryptographic operations, and KMIP for enterprise key lifecycle management. You’ll learn how these standards work together to protect sensitive data, enable regulatory compliance, and support modern architectures across cloud and hybrid environments. From certificate authorities to key management servers to hardware security modules, you’ll get a comprehensive view of how to build, manage, and modernize cryptographic infrastructure at scale.


09:00-11:00 TALKS

Studio D

Crypto Infrastructure Day (K00)

Foundations of Cryptographic Infrastructure

Moderator: Valerie Fenwick, PKCS#11 Technical Committee Co-Chair, OASIS Open, United States


09:00 Beyond PKI: Rethinking Trust in the Quantum Era (K00a) Roberta Faux, Head of Cryptography and Field CTO, Arqit, United States

Rethink digital trust models beyond PKI for a quantum‑resilient future.


09:30 Certificate Authorities, Trust Models, and the Real Risk of Misconfiguration (K00b) Timothy Hollebeek, VP, Industry Standards, DigiCert, United States

Examine how misconfigurations undermine certificate authorities and trust models.


10:00 PKCS #11 Explained: Why This 30-Year-Old Standard Still Runs Your Crypto Stack (K00c) Valerie Fenwick, PKCS#11 Technical Committee Co-Chair, OASIS Open, United States

Explore why PKCS #11 remains essential to modern cryptographic stacks decades later.


10:30 Crypto-Agile PKI in Practice: Building Reliable Trust Paths for the Post-Quantum Transition (K00d) Ganesh Mallaya, Distinguished Architect and Technical Evangelist, AppViewX, United States

Learn how to modernize PKI trust paths for a crypto‑agile, post‑quantum world.


11:00-11:30 Networking Break

Foyer


11:30-12:30 Panel Discussion

Studio D

Crypto Infrastructure Day (K01)

Panel Discussion


11:30 Panel Discussion: Operating Cryptography at Scale—Lessons from the Real World (K01a) Leader: Nick Sullivan, Co-Chair, Crypto Forum Research Group (CFRG), Co-Chair, Internet Research Task Force (IRTF) and Principal, Cryptography Consulting, United States Panelists: James Howe, Head of Cryptography, SandboxAQ, United States; Bas Westerbaan, Principal Research Engineer, Cloudflare, Netherlands; Joe Salowey, Co-Chair Transport Layer Security (TLS) Working Group, Internet Engineering Task Force (IETF) and Principal Software Security Engineer, Palo Alto Networks, United States.

Modern systems live or die by how well cryptography is deployed, managed, and maintained at scale—not in theory, but in production. This panel will be a practical, no-nonsense discussion on what actually breaks, what survives, and what organizations consistently underestimate when operating cryptographic systems across large, complex environments. Drawing on real-world experience, the panel will explore key operational challenges such as key management, crypto agility, lifecycle management, and preparing for post-quantum transitions. Expect hard lessons, concrete examples, and guidance you can apply immediately.


12:30-13:30 Lunch

Foyer


13:30-15:30 Talks

Studio D

Crypto Infrastructure Day (K02)

Key Management and Secure Operations

Moderator: Valerie Fenwick, PKCS#11 Technical Committee Co-Chair, OASIS Open, United States


13:30 X9 Financial PKI Roadmap (K02a) Jeff Stapleton, Executive Director Cybersecurity Researcher, Wells Fargo, United States

Chart the X9 Financial PKI roadmap as an alternative to traditional public PKIs.


14:00 KMIP Demystified: Centralized Key Management Without Centralized Failure (K02b) Tim Hudson, CTO & Technical Director, Cryptsoft, Astralia

Demystify KMIP and learn how centralized key management avoids single points of failure.


14:30 AI-Driven Threats in the Post-Quantum Shift: Operational Insights for Securing Cryptographic Infrastructure (K02c) Chahat Bhatia, Acumen Intertek, India

Operational guidance for defending cryptographic systems against AI-driven, post-quantum threats.


15:00 Secure Firmware Update and Software Signing in Embedded Devices (K02d) Dr. Xin Qiu, Head of Aurora Networks’ PKI Center and Security Solutions, United States

Implement robust firmware update and signing strategies anchored to secure boot.


15:30-16:00 Networking Break

Foyer


16:00-17:00 Panel Discussion

Studio D

Crypto Infrastructure Day (K03)

Panel Discussion


16:00 Panel Discussion: the Future of Cryptographic Infrastructure: What Changes, What Doesn’t (K03a) Leader: Burt Kaliski, Senior Vice President and Chief Technology Officer, VeriSign, United States Panelists: Smita Mahapatra, Senior Security Industry Specialist, Amazon Web Services (AWS), United States; Leonard Rosenthol, Chair, C2PA Technical Working Group, Senior Principal Scientist, Adobe Systems, United States;  Timothy Hollebeek, VP, Industry Standards, DigiCert, United State; Charles Clancy, Chief Technology Officer & Senior Vice President, General Manager, MITRE Labs, MITRE, United States

As cryptography evolves under pressure from quantum computing, regulatory demands, and growing system complexity, not everything is up for reinvention. Expect a forward-looking but grounded conversation rooted in decades of real-world deployment experience.


17:00 Adjourn