Connective Community Events · November 2026

After the
Breach

Recovery, continuity, and the conversation you have with the board at 2am

19 November 2026 11:00 – 14:00 Cape Town Cyber Resilience & Ransomware Recovery Invitation-Only · Complimentary for end users
Request an Invitation Sponsor This Event
After the Breach · 19 November 2026 · Cape Town · Cyber Resilience · Invitation-Only · Cyber Resilience & Ransomware Recovery · 19 November 2026 · Cape Town · Cyber Resilience · Invitation-Only · After the Breach · 19 November 2026 · Cape Town · Cyber Resilience · Invitation-Only ·
R23m

is the average cost for a South African organisation to recover from a ransomware attack — before any ransom is paid.

Source: Sophos, State of Ransomware in South Africa, 2025

About this event

Everyone plans to prevent it. Almost nobody plans to recover.

South Africa is among the most heavily targeted markets in the world for ransomware and data extortion. Most organisations have invested seriously in prevention. Far fewer can answer the harder question with any confidence: when it happens, how long until we are trading again?

This is a room for the people who will be asked that question. Not a vendor briefing and not a threat-intelligence update — an honest conversation between senior technology leaders about recovery time, board expectations, and what actually held up the last time something went wrong.

End-user delegates personally invited by the CCE team · Never open registration · Always complimentary for end-user delegates

The event

A morning built for candour

No slideware. Two practitioner voices, a full-room discussion under the Chatham House Rule, and the kind of exchange that only happens when nobody is selling anything.

11:00
Arrival & welcome
Guests arrive and connect over a relaxed welcome. Informal introductions encouraged.
11:30
Setting the scene
Host welcome and framing: why recovery time, not prevention spend, is now the number the board asks about.
11:45
The first 72 hours
A practitioner's account of what actually happens when the alert is real — decision-making under pressure, communications, and the gap between the plan and the day.
Talk · 20 min · open discussion follows
12:10
What the board will ask you
Translating technical recovery capability into the language of business continuity, regulatory obligation, and material risk.
Talk · 20 min · open discussion follows
12:35
Group discussion
A full-room facilitated conversation. What is your real recovery time objective, and would it survive contact with a live incident?
13:15
Host close
Closing remarks, community context, and next steps from the CCE team.
13:30
Private partner lunch
Invited delegates and event partners continue the conversation over a relaxed lunch. By invitation.

How we handle what is said in the room

The discussion runs under the Chatham House Rule. You are free to use what you hear — nothing is attributed to a person or an organisation. CCE publishes an anonymised summary after each event and may quote a delegate by name only with their written permission. Sponsors are named; delegates are not.

Who attends

Invitation-only. End-user delegates only.

Every delegate is personally invited by the CCE team. There is no open registration. Attendance is complimentary for end-user delegates.

CIOs & IT Directors
Senior technology leaders accountable for continuity, recovery, and the infrastructure decisions that determine how quickly the organisation gets back up.
CISOs & Heads of Security
Security leaders carrying the risk conversation into the boardroom and answering for resilience posture.
Heads of Infrastructure
The practitioners who own backup, recovery, and the systems that have to work on the worst day.
Risk & Continuity Leaders
Business continuity and operational risk executives at organisations where downtime is measured in revenue.

The CCE calendar

A room every quarter.

CCE runs curated, invitation-only gatherings on a quarterly cadence. Every event is complimentary for end-user delegates and funded entirely by category-exclusive partners — one brand per sector, no competitors in the room.

21 Aug 2026
Connected & Seen
CCE Women's Month Edition · Blaauwklippen, Stellenbosch
Categories open
19 Nov 2026
After the Breach
Cyber resilience, ransomware recovery and the 2am board conversation · Cape Town
Categories open
25 Feb 2027
Data Foundations for AI →
Why your AI pilot failed, and what has to happen underneath it · Cape Town
Categories open
20 May 2027
Data Sovereignty & Residency
Where your data actually lives, and who can reach it · Cape Town
Categories open
19 Aug 2027
CCE Women's Month Edition
The anchor event returns for its second year · Cape Town
Categories open
18 Nov 2027
Identity & Access for AI Agents
When software acts on its own, who authorised it? · Cape Town
Categories open

Categories are allocated on a first-committed basis. Partners hold first right of refusal on their category for the following year. Enquire about a category →

"The right room changes everything — so I built one."

Vineshia Petersen · Founder, Connective Community Events

For delegates

Request an invitation

This event is complimentary for end-user delegates and invitation-only. Tell us about yourself and we will be in touch.

Complimentary for end users · By invitation