Cyber Security Risk Conference 2026 ran at NZICC in August, not September at the Grand Millennium

The Cyber Security Risk Conference 2026 has already been held, and not on the date or at the venue still carried in New Zealand event listings. Brightstar staged the one-day conference at the New Zealand International Convention Centre in Auckland on 4 August 2026, as one strand of New Zealand CIO Innovation Summit & Awards week, rather than on 9 September at the Grand Millennium Auckland. The organiser's site has since rolled forward: the Cyber Security Risk Conference page now carries a 2027 date of 10 August, again at NZICC.

The 2026 programme remains published in full on the official event page. It opened with registration and coffee at 8.30am and closed at 5.00pm with closing remarks and a networking function. Ryan Ko, Centre Director of the UQ Cyber Research Centre, gave the opening keynote on the state of cyber risk in 2026 — AI-enabled attacks and autonomous threat actors, the convergence of cyber, financial and operational risk, and what boards and executives now expect from cyber leaders. Melissa Crawford of Tech with Heart closed the day on leadership and accountability. Senior information security consultant Esther Wafula was MC, and Andy Prow, a board member of CyberTech New Zealand, delivered both the welcome and a late-afternoon session on adapting risk models to faster, higher-volume attack vectors.

Two panels anchored the middle of the day. The first dealt with quantifying cyber exposure in terms boards and regulators understand, with in-house leaders from Restaurant Brands, Fletcher Building, Fertility Associates and the University of Waikato. The second covered securing cloud, SaaS and hybrid environments and governing AI use without slowing innovation, pairing Auckland Council's chief information security officer with Foodstuffs South Island, SkyCity Entertainment Group and Southern Cross Health Society. The afternoon ran two rounds of interactive roundtables, followed by a session on the first 24 to 72 hours of a major incident.

Who runs it

Brightstar is the trading name of Conferenz Ltd — stated in the copyright line on Brightstar's own website — and operates from B:Hive at Smales Farm in Takapuna. It runs conferences, training courses and audience-marketing programmes across seven sectors. Its Technology, Cyber, Data & CX portfolio rests on three properties: the New Zealand CIO Innovation Summit & Awards, which Brightstar describes as New Zealand's leading event for CIOs and tech leaders for 18 years, connecting 450-plus senior ICT peers; the National Cyber Security Summit, held in Wellington and next scheduled for 22-23 March 2027; and this conference.

Notably, Brightstar's own sector page routes the Cyber Security Risk Conference to ciosummit.co.nz rather than to a Brightstar-hosted event page, and brightstar.co.nz/events/cyberrisk redirects there. The event effectively lives inside the CIO Summit's web presence, which is also why it does not appear in Brightstar's own upcoming-events feed. The 2026 conference was supported by CyberTech New Zealand and carried its own sponsor tiers, separate from the summit's.

Who it's for

Brightstar pitches the conference at enterprise-based senior cyber security and risk management practitioners — the people expected to translate technical vulnerabilities into financial and operational terms for a board. The organiser enforces that composition commercially rather than aspirationally: standard registration is restricted to enterprise and public-sector end users, while technology vendors, IT solution providers, consultants and recruiters must either sponsor or buy a designated vendor pass, with end-user tickets bought by vendors automatically cancelled. The 2026 line-up reflected the intent, weighting in-house security, risk and data-governance leaders from large New Zealand employers and confining vendor-side speakers to a small number of technical slots from Huntress, Veeam, KnowBe4, Bastion Security and SOCRadar.

The venue

The confirmed 2026 venue was the New Zealand International Convention Centre. The organiser's own site records that the 2026 CIO Innovation Awards Gala Dinner was held at NZICC, and the 2027 edition is billed for the same building. The operative venue fact is co-location: the conference was one component of a single-precinct week that also carried summit sessions, the awards gala dinner, networking drinks on 4 August, and a free CIO Innovation Expo plus TechTalks on 5 August. A conference-only delegate also received expo and TechTalks access, so the ticket bought access to a much larger footprint than a one-day programme would normally imply.

The Grand Millennium Auckland on Mayoral Drive, named in the listing, is a CBD conference hotel with in-house accommodation. Nothing on the organiser's current website places the 2026 conference there.

Why it matters for New Zealand business events

This is a clean example of a specialist one-day commercial conference being absorbed into a larger anchor week at the convention centre rather than run standalone in a hotel ballroom. For NZICC it means a mid-size technical audience arriving on the back of an established 18-year property; for the organiser it is a delegate-acquisition play, using bundled expo and networking access to lift the value of a single-day pass.

It is also a listing-hygiene case study. A conference that ran on 4 August at NZICC was still being carried as a 9 September fixture at a different venue nearly a fortnight after it finished — a reminder that aggregator records age badly when an organiser moves a date or venue mid-cycle. The forward dates are already public: 10 August 2027 for the Cyber Security Risk Conference and the CIO Innovation Awards, 10-11 August for the summit, and 11 August for the Emerging Leaders' Forum, all at NZICC.