Speakers
Session
Artificial Intelligence (AI) is transforming how organisations operate, make decisions and deliver services, creating significant opportunities for innovation, efficiency and improved outcomes. However, as organisations, employees and suppliers increasingly adopt AI, the risk landscape is becoming more complex. Sensitive data is being shared across growing digital ecosystems, while threat actors are using AI to enhance phishing, social engineering and supply chain attacks. This raises an important question for risk professionals: are we unlocking new value, or creating a governance nightmare? This session will explore the opportunities and risks of AI through a practical risk management lens, providing real-world insights into AI governance, cyber resilience, third-party risk and organisational accountability. Attendees will leave with practical actions to help harness the rewards of AI while maintaining trust, compliance and resilience.
Arunava (Arun) Banerjee is the Cyber Risk Consulting Lead for Zurich Resilience Solutions at Zurich Insurance UK, where he leads the Zurich's cyber risk and resilience consulting services across the UK. He works with organisations to strengthen cyber resilience, manage emerging technology risks and improve their preparedness for an increasingly complex threat landscape. Arun also provides Cyber Risk Engineering support and underwriting assurance for large and complex risks, working closely with underwriters across Zurich's global business.
With about 20 years of experience in cybersecurity, risk management and operational resilience, Arun specialises in cyber risk quantification, cyber strategy, governance, third-party risk management and incident response preparedness.
Prior to joining Zurich, Arun was Cyber Security Manager at NHS Greater Glasgow and Clyde, one of the largest health boards in Europe. This experience provided him with extensive expertise in public sector and healthcare cybersecurity, together with a deep understanding of the resilience challenges faced by critical service providers and essential public services.
Arun holds a Master's degree in Business and Management and is certified in CISM, ISO 27001 Lead Implementer, PRINCE2 Practitioner and ITIL. A recognised cyber risk thought leader, he regularly speaks at major industry events including AIRMIC, CIPFA, ALARM and the e-Crime & Cybersecurity Congress, and contributes articles and insights to leading industry publications, including ISACA.
In 2025, Arun was named a finalist in the Scottish Cyber Awards' Cyber Evangelist of the Year category in recognition of his contribution to advancing cyber resilience and cyber risk awareness across industry sectors.