IT Security Events 2026/2027: The DACH Calendar
Which conference is worth the travel budget, which the team ticket? This calendar lists the most important IT security events in the DACH region from fall 2026 to spring 2027, chronologically, with focus and official link. All dates were verified at the editorial deadline so that planning is based on reliable data.
Key Facts at a Glance
- The Period: The key DACH dates from October 2026 to March 2027, sorted chronologically with official links.
- The Flagship Events: it-sa Nuremberg, DeepSec Vienna, Swiss Cyber Security Days Bern and secIT by heise Hanover as established mainstays.
- The Benefit: An overview of which event suits which need instead of scattered individual research.
Which IT Security Events Are Taking Place in the DACH Region in 2026 and 2027?
The key dates are the it-sa in Nuremberg (October 27 to 29, 2026) as the largest trade fair, DeepSec in Vienna (November 17 to 20, 2026) for technical depth, the Swiss Cyber Security Days in Bern (February 23 to 24, 2027) as well as secIT by heise in Hanover (March 10 to 11, 2027). They are complemented by the ISACA Europe Conference in Munich, hack.lu in Luxembourg, BSides Munich and IT-Defense in Frankfurt.
The Calendar: Fall 2026 to Spring 2027
October 2026
October 1 to 2 – ECSO CISO Meetup 2026, Berlin
Closed-door practitioner forum of the European Cyber Security Organisation for CISOs and deputy CISOs, fifth edition after Brussels, Florence, Vienna and Valencia. Case studies, board communication and EU regulation under the Chatham House Rule; free to attend after curation. SecurityToday is a media partner. b2match.com
October 1 – Cybersecurity Oktoberfest, Stuttgart
A curated one-day conference at Schloss Solitude for around 150 participants, run as a community format rather than a trade show. Three themes: AI in security, human-centric cybersecurity and an operations lab drawn from practice. schoenbrunn-tasc.de
October 7 to 9 – ISACA Europe Conference, Munich
Governance, Risk, Audit and Digital Trust for auditors and security officers. isaca.org
October 20 to 23 – hack.lu (20th Edition), Luxembourg
Offensive Security and security research with a strong audience from Germany and the Greater Region. 2026.hack.lu
October 27 to 29 – it-sa Expo & Congress, Nuremberg
The largest trade fair in the DACH region: Enterprise Security, KRITIS and compliance on one floor. itsa365.de
November 2026
November 7 and 9 – BSides Munich (0xA), Munich
Community-driven Offensive and Defensive Security. Workshop on November 7, conference on November 9. 2026.bsidesmunich.org
November 17 to 20 – DeepSec IDSC, Vienna
Technical depth and exploit research, including the sister event DeepINTEL. deepsec.net
January 2027
January 27 to 29 – IT-Defense, Frankfurt
Deep-technical and management security in a closed circle, deliberately without exhibition hall operations. it-defense.de
February 2027
February 23 to 24 – Swiss Cyber Security Days, Bern
The Swiss flagship event with a focus on digital sovereignty and KRITIS. scsd.ch
March 2027
March 10 to 11 – secIT by heise, Hanover
Congress trade fair for security professionals with a clear Mittelstand focus. Workshops already on March 9. secit-heise.de
Which Event Suits Which Need?
The selection depends on the goal. Those seeking a broad market overview and many vendor conversations will find it-sa the right fit, the largest exhibition space in the DACH region. By contrast, those wanting technical depth and research proximity will find it at DeepSec in Vienna or at hack.lu in Luxembourg, where offensive security and current attack research take center stage.
| Event | Focus | Best for |
|---|---|---|
| ISACA Europe (Munich) | Governance, Risk, Audit | Auditors and officers |
| hack.lu (Luxembourg) | Offensive Security, Research | technical audiences |
| it-sa (Nuremberg) | Enterprise Security, KRITIS | broad market overview |
| DeepSec (Vienna) | technical depth, exploits | research proximity |
| IT-Defense (Frankfurt) | Deep Technical, Management | confidential exchange |
| secIT by heise (Hanover) | Mittelstand, Workshops | Mittelstand |
For governance, audit and compliance the ISACA Europe Conference is worth considering, while IT-Defense deliberately offers a small, closed format for confidential exchange at a high level. The Mittelstand finds a suitable format at secIT in Hanover. Those seeking the Swiss perspective and the topic of digital sovereignty should plan for the Swiss Cyber Security Days in Bern.
Note on Timeliness
Some dates for 2027 are typically only officially confirmed a few months in advance, such as BSides Vienna and the Internet Security Days. We continuously update this calendar. Is a relevant event missing? A note to the editorial team is sufficient.
Frequently Asked Questions
Each question is locked. Tap to unlock the answer.
Which is the largest IT security trade fair in the DACH region?
The it-sa Expo&Congress in Nuremberg, 2026 from October 27 to 29. It offers the broadest exhibition space and the largest vendor field in the region.
Which event offers the most technical depth?
DeepSec in Vienna and hack.lu in Luxembourg target a technical audience with a focus on offensive security and current attack research.
Is there an event specifically for governance and audit?
Yes, the ISACA Europe Conference in Munich covers governance, risk, audit and digital trust and is aimed at auditors and security officers.
Which format suits the Mittelstand?
secIT by heise in Hanover has a clear Mittelstand focus and combines congress and trade fair with practical workshops.
Are all dates already firmly confirmed?
The listed dates were confirmed at the editorial deadline. Some events for 2027 are typically only finally scheduled a few months in advance, so checking the official page before booking is worthwhile.
Editor’s Picks
Editor’s Pickit-sa 2026: The Roadmap for Security Decision-MakersEditor’s PickWhat Is NIS2? Definition, Obligations, and LiabilityEditor’s PickThe AI Act Is Actually a Security Law
More from the MBF Media Network
cloudmagazinKRITIS in the Cloud: What Secures the MigrationMyBusinessFutureThe AI oversight in Germany now has an addressDigital ChiefsThe AI writes the code. Who is liable for it?
