SURF Security & Privacy Conference 2026

Version 0.27 June 26, 2026

We released a new schedule version!

We had to move some sessions, so if you were planning on seeing them, check their new dates or locations:

• “Kwetsbaarheden in infrastructuur opsporen met eduC2” by Mick Deben (June 26, 2026, 2:20 p.m. → June 26, 2026, 2 p.m.)
• “Keynote Technical Implications of Digital Sovereignty: Towards European Architectural Autonomy” by Niels ten Oever (June 26, 2026, 3:35 p.m. → June 26, 2026, 3:15 p.m.)
• “De synergiën van risico-management en security-architectuur: een geïntegreerd aanpak” by Christian-Alexander Bunge (June 26, 2026, 2:20 p.m. → June 26, 2026, 2 p.m.)
• “Dark web monitoring” by Martin Romijn (June 26, 2026, 2:20 p.m. → June 26, 2026, 2 p.m.)
• “DPIA = leveranciers in de weerstand” by Debby Kappetijn (June 26, 2026, 1:40 p.m. → June 26, 2026, 1:20 p.m.)
• “Terugblik op recente Cyberincidenten” (June 26, 2026, 4:05 p.m. → June 26, 2026, 3:45 p.m.)
• “Van risico naar weerbaarheid: ervaringen met het mbo testplan technische weerbaarheid” by Mick Deben (June 26, 2026, 1:55 p.m. → June 26, 2026, 1:35 p.m.)
• “Cyberweerbaarheidspool: aanjager voor samenwerken aan cyberweerbaarheid” by Martijn Bijleveld (June 26, 2026, 1:45 p.m. → June 26, 2026, 1:25 p.m.)
• “Roadmap naar de Cyberweerbaarheidspool” by Edo Meinema (June 26, 2026, 1:50 p.m. → June 26, 2026, 1:30 p.m.)

Version 0.26 June 26, 2026

We released a new schedule version!

Version 0.25 June 26, 2026

We released a new schedule version!

We have moved a session around: “De synergiën van risico-management en security-architectuur: een geïntegreerd aanpak” by Christian-Alexander Bunge (Session room 3 (3B.38) → Plenary room (1B.10))

Version 0.24 June 26, 2026

We released a new schedule version!

Sadly, we had to cancel sessions:

• “Camera's aan? Actie!” by Teklenburg, Inge
• “Een cyberbrein, je zult het maar hebben - jonge hackers herkennen en begeleiden” by Henk van Ee

Version 0.23 June 23, 2026

We released a new schedule version!

Version 0.22 June 23, 2026

We released a new schedule version!

We have a new session: “SCION: The Next-Generation Internet?” by Bram van Kempen.

Version 0.21 June 23, 2026

We released a new schedule version!

Version 0.20 June 22, 2026

We released a new schedule version!

Sadly, we had to cancel a session: “Nextcloud talk” by Maarten Veldhuis

Version 0.19 June 16, 2026

We released a new schedule version!

Version 0.18 June 16, 2026

We released a new schedule version!

Version 0.17 June 11, 2026

We released a new schedule version!

We had to move some sessions, so if you were planning on seeing them, check their new dates or locations:

• “Van risico naar weerbaarheid: ervaringen met het mbo testplan technische weerbaarheid” by Mick Deben (June 26, 2026, 1:45 p.m. → June 26, 2026, 1:55 p.m.)
• “Roadmap naar de Cyberweerbaarheidspool” by Edo Meinema (June 26, 2026, 1:55 p.m. → June 26, 2026, 1:50 p.m.)
• “Cyberweerbaarheidspool: aanjager voor samenwerken aan cyberweerbaarheid” by Martijn Bijleveld (June 26, 2026, 1:50 p.m. → June 26, 2026, 1:45 p.m.)

Version 0.16 June 1, 2026

We released a new schedule version!

We have a new session: “De Privacy Chatbot” by Max van Arnhem.

Version 0.15 May 26, 2026

We released a new schedule version!

We have a new session: “Networking dinner & city walk”.

Version 0.14 May 22, 2026

We released a new schedule version!

Version 0.13 May 22, 2026

We released a new schedule version!

We have a new session: “Keynote Niet onze AI - Voorbij de beloften van Big Tech” by Gabriella Obispa, Laurens Vreekamp.

Version 0.12 May 22, 2026

We released a new schedule version!

We have new sessions!

• “Terugblik op recente Cyberincidenten”
• “Ervaringen met AI whitebox pentesting” by Stijn Pleumeekers

Version 0.11 May 6, 2026

We released a new schedule version!

We have moved a session around: “Awareness in de praktijk: privacy en security met een visuele aanpak” by Carola Veenstra-Jager, Rosa Kremer (June 26, 2026, 10:45 a.m. → June 26, 2026, 10:50 a.m.)

Version 0.10 May 4, 2026

We released a new schedule version!

We have a new session: “Keynote Technical Implications of Digital Sovereignty: Towards European Architectural Autonomy” by Niels ten Oever.

We have moved a session around: “Awareness in de praktijk: privacy en security met een visuele aanpak” by Carola Veenstra-Jager, Rosa Kremer (June 26, 2026, 10:50 a.m. → June 26, 2026, 10:45 a.m.)

Version 0.9 April 24, 2026

We released a new schedule version!

We have moved a session around: “De digitale omnibus: risico's, gevolgen en wat we er samen aan kunnen doen” by Sophia Gelpke (Spare room (3B.60) → Session room 5 (3B.46))

Version 0.8 April 21, 2026

We released a new schedule version!

We have new sessions!

• “Kwetsbaarheden in infrastructuur opsporen met eduC2” by Mick Deben
• “Van risico naar weerbaarheid: ervaringen met het mbo testplan technische weerbaarheid” by Mick Deben

We had to move some sessions, so if you were planning on seeing them, check their new dates or locations:

• “SURF's Advanced Red Teaming in practice: experiences from Erasmus University Rotterdam” by Rory O'Connor (Plenary room (1B.10) → Session room 4 (3B.56))
• “Cyber Warfare and Weapons of Mass Disruption” by Hans-Dieter Hiep (Session room 2 (1B.12) → Plenary room (1B.10))
• “De digitale omnibus: risico's, gevolgen en wat we er samen aan kunnen doen” by Sophia Gelpke (Plenary room (1B.10) → Spare room (3B.60))
• “De Cyberbeveiligingswet - dit kun je verwachten van SURFcert” by Thijs Kinkhorst (Session room 4 (3B.56) → Plenary room (1B.10))
• “Five Years of Managing Privacy Compliance with the Privacy Scan Framework – Insights and Practical Lessons” by Francisco Romero Pastrana (Plenary room (1B.10) → Session room 2 (1B.12))
• “De Cyberbeveiligingswet” by Brenda Kester, Margo van Oosterhout (Spare room (3B.60) → Plenary room (1B.10))
• “Een cyberbrein, je zult het maar hebben - jonge hackers herkennen en begeleiden” by Henk van Ee (Session room 4 (3B.56) → Plenary room (1B.10))

Version 0.7 April 20, 2026

We released a new schedule version!

We have new sessions!

• “Nextcloud talk” by Maarten Veldhuis
• “De Cyberbeveiligingswet” by Brenda Kester, Margo van Oosterhout
• “SURF's Advanced Red Teaming in practice: experiences from Erasmus University Rotterdam” by Rory O'Connor
• “Cyber Warfare and Weapons of Mass Disruption” by Hans-Dieter Hiep
• “AI inzetten bij de privacytoetsing van onderzoeksvoorstellen” by Michel Paardekooper, Arjan Bakker
• “Een cyberbrein, je zult het maar hebben - jonge hackers herkennen en begeleiden” by Henk van Ee

We had to move some sessions, so if you were planning on seeing them, check their new dates or locations:

• “Setting Expectations for Security Awareness in Organizations” by Simon Parkin (June 26, 2026, 11:40 a.m. → June 26, 2026, 11:45 a.m.)
• “De synergiën van risico-management en security-architectuur: een geïntegreerd aanpak” by Christian-Alexander Bunge (June 26, 2026, 2:45 p.m. → June 26, 2026, 2:20 p.m.)
• “SURFsoc Nieuwe Generatie - eerste ervaringen en inzichten” by Maarten Veldhuis, Alexander Wisse, Erik van der Leek (June 25, 2026, 12:05 p.m., Plenary room (1B.10) → June 25, 2026, 2:35 p.m., Session room 3 (3B.38))
• “Cyberweerbaarheidspool: aanjager voor samenwerken aan cyberweerbaarheid” by Martijn Bijleveld (June 26, 2026, 1:45 p.m. → June 26, 2026, 1:50 p.m.)
• “Voor of tegen: Omstreden voorgestelde maatregelen in SURF DPIA's” by Julian Rill, Daisy Brugman, Shiyona Keenakkottil (June 26, 2026, 11:40 a.m. → June 26, 2026, 11:45 a.m.)
• “Slim, Snel, Goedkoop: De Magie van een Security Incident Response Platform in het SOC” by Roy Kokkelkoren (June 26, 2026, 11:40 a.m. → June 26, 2026, 11:45 a.m.)
• “Soeverein, schaalbaar en betaalbaar: ons on prem SOC” by Sander van de Geijn (June 25, 2026, 2:35 p.m. → June 25, 2026, 12:05 p.m.)
• “DPIA = leveranciers in de weerstand” by Debby Kappetijn (June 26, 2026, 1:35 p.m. → June 26, 2026, 1:40 p.m.)
• “AI Compliance Workshop: beoordelen, afwegen en kiezen in de onderwijspraktijk” by Patrick van de Wetering, Saskia Stout (June 26, 2026, 10:45 a.m. → June 26, 2026, 10:50 a.m.)
• “Awareness in de praktijk: privacy en security met een visuele aanpak” by Carola Veenstra-Jager, Rosa Kremer (June 26, 2026, 10:45 a.m. → June 26, 2026, 10:50 a.m.)
• “Five Years of Managing Privacy Compliance with the Privacy Scan Framework – Insights and Practical Lessons” by Francisco Romero Pastrana (Session room 4 (3B.56) → Plenary room (1B.10))
• “De Cyberbeveiligingswet - dit kun je verwachten van SURFcert” by Thijs Kinkhorst (June 26, 2026, 2:45 p.m. → June 26, 2026, 10:50 a.m.)
• “Camera's aan? Actie!” by Teklenburg, Inge (June 26, 2026, 10:45 a.m., Session room 3 (3B.38) → June 26, 2026, 10:50 a.m., Session room 2 (1B.12))
• “Privacy Governance: Groei en Samenwerking Ondersteunen” by Laura Hooijen - de Vries, Litjens, Ineke (June 26, 2026, 10:45 a.m., Session room 2 (1B.12) → June 26, 2026, 10:50 a.m., Session room 3 (3B.38))
• “Roadmap naar de Cyberweerbaarheidspool” by Edo Meinema (June 26, 2026, 1:50 p.m. → June 26, 2026, 1:55 p.m.)
• “Dark web monitoring” by Martin Romijn (June 26, 2026, 2:45 p.m. → June 26, 2026, 2:20 p.m.)
• “Inzageverzoek - wat mag er geheim blijven?” by Gisa de Jonge (June 26, 2026, 11:40 a.m. → June 26, 2026, 11:45 a.m.)
• “Loskomen van big tech: praktische stappen die je vandaag al kunt zetten” by Paul Deimann, Eelco Mulder (Spare room (3B.60) → Session room 4 (3B.56))

Version 0.6 April 13, 2026

We released a new schedule version!

We have new sessions!

• “Scherp je awarenessplan aan!” by Pascal van de Kaa
• “Cyberweerbaarheidspool: aanjager voor samenwerken aan cyberweerbaarheid” by Martijn Bijleveld
• “Alles wat je moet weten over bewaartermijnen en vernietigen” by Imelda van Hooijdonk-Pereira

We had to move some sessions, so if you were planning on seeing them, check their new dates or locations:

• “De digitale omnibus: risico's, gevolgen en wat we er samen aan kunnen doen” by Sophia Gelpke (June 25, 2026, 2:35 p.m. → June 25, 2026, 1:55 p.m.)
• “Soeverein, schaalbaar en betaalbaar: ons on prem SOC” by Sander van de Geijn (June 25, 2026, 1:55 p.m. → June 25, 2026, 2:35 p.m.)

Version 0.5 April 13, 2026

We released a new schedule version!

We have new sessions!

• “De Cyberbeveiligingswet - dit kun je verwachten van SURFcert” by Thijs Kinkhorst
• “SURFsoc Nieuwe Generatie - eerste ervaringen en inzichten” by Maarten Veldhuis, Alexander Wisse, Erik van der Leek
• “Voor of tegen: Omstreden voorgestelde maatregelen in SURF DPIA's” by Julian Rill, Daisy Brugman, Shiyona Keenakkottil

Version 0.4 April 13, 2026

We released a new schedule version!

We have a new session: “Roadmap naar de Cyberweerbaarheidspool” by Edo Meinema.

Version 0.3 April 10, 2026

We released a new schedule version!

We have new sessions!

• “Keynote Protecting your Data from Quantum Threats” by Giacomo Carrara
• “Inzageverzoek - wat mag er geheim blijven?” by Gisa de Jonge
• “Loskomen van big tech: praktische stappen die je vandaag al kunt zetten” by Paul Deimann, Eelco Mulder

Version 0.2 March 26, 2026

We released a new schedule version!

We have a new session: “Keynote Soevereiniteit 2.0 - en nu echt” by Bert Hubert.

Sadly, we had to cancel a session: “Roadmap naar de Cyberweerbaarheidspool” by Edo Meinema

We have moved a session around: “De synergiën van risico-management en security-architectuur: een geïntegreerd aanpak” by Christian-Alexander Bunge (June 25, 2026, 2:35 p.m. → June 26, 2026, 2:45 p.m.)

Version 0.1 March 18, 2026

Initial draft