Our recap of the SicherheitsExpo Alpe Adria 2026 in Klagenfurt highlights current developments in AI, regulatory requirements, and resilience, as well as the growing importance of physical identity management for modern security strategies.
Two days at SicherheitsExpo Alpe Adria in Klagenfurt have come to an end. Together with our partner LEGIC, we participated as co-exhibitors in the first edition of the event.
Beyond the conversations at our stand, the conference presentations gave us plenty to think about. How is the understanding of security changing? What do new regulatory requirements mean for organizations? And why is it becoming increasingly important to consider physical and digital security together?
The exhibition was a relatively small gathering; nevertheless, it provided an opportunity for personal discussions and a closer look at the topics currently shaping the security industry.
One of the clearest recurring themes throughout the presentations was the need for a more comprehensive approach to security. Cameras, alarm systems, and physical protection measures remain important components of any security strategy. But they cannot operate in isolation. Organizations must also consider their digital dependencies, internal processes, and personnel. What happens during a power or network outage? Which critical operations can continue? Who is responsible when systems fail or a security incident occurs?
A common message emerged: effective security requires the cooperation of people, processes, and technology. Qualified personnel, clear responsibilities, regular training and collaboration between security disciplines are just as important as the systems organizations invest in.
Another recurring topic was the growing regulatory landscape. Austria's NISG 2026, the Resilience of Critical Entities Act framework, and the European Cyber Resilience Act (CRA) were discussed from different perspectives, highlighting how cybersecurity, physical protection, and organizational responsibility are becoming increasingly interconnected.
An important takeaway was that cybersecurity requirements extend beyond protecting networks and information systems. The physical environments in which these systems operate, the people who can access them, and the processes governing that access also need attention.
For physical identity and access management, this brings several practical questions into focus:
• Who has access to specific areas, and why?
• How are access permissions managed when employees change roles or leave an organization?
• How are contractors and external personnel managed?
• Can access approvals and changes be traced and verified afterwards?
The emphasis on accountability and documentation was particularly noticeable throughout the presentations. It is no longer enough to have security measures in place. Organizations increasingly need to demonstrate how those measures are implemented, maintained, and monitored.
Artificial intelligence featured prominently in discussions about the future of security. On the one hand, AI offers opportunities to identify anomalies, analyze large amounts of information, and support security operations. On the other, it introduces new risks. AI-assisted attacks, the exposure of sensitive business information, and the question of how automated decisions are controlled create additional challenges for organizations.
One question kept returning in different forms: Where should AI be used, and how can organizations ensure that its use remains secure and controlled?
These discussions were particularly relevant to our own research at evolutionID. We have been exploring how AI systems can operate within clearly defined permissions and security boundaries, particularly when interacting with systems that manage physical security.
Hearing similar concerns discussed across the industry reinforced our conviction that the future of AI in security is not simply about introducing more intelligent functions. It is about ensuring that these functions can be used responsibly, with appropriate controls over what AI is permitted to access and do.
Across the exhibition floor, traditional physical security solutions were particularly prominent. Video surveillance, security hardware, and physical protection technologies formed a significant part of what was on display. Physical identity management, digital access governance, and automated check-in processes received considerably less attention. In fact, our check-in terminal appeared to be the only one demonstrated at the exhibition. This was interesting given how frequently the conference presentations highlighted the importance of interconnected security processes, accountability, and regulatory compliance.
Together with LEGIC, we brought the identity management perspective to the exhibition, combining secure credentials and reader technologies with the management of physical identities and access rights throughout their lifecycle. Our demonstrations included automated check-in and identity verification, alongside the technologies and processes involved in managing credentials and physical access.
Physical access control and identity management have traditionally been approached as separate disciplines. Yet the connection between them is becoming increasingly important. Access control systems manage entry to physical spaces. Identity management provides the processes needed to manage the people, credentials, and permissions associated with that access, from onboarding through to offboarding.
The gap between these disciplines is closing. What we would like to see is more frequent discussion about how they work together, not just at the technical level, but across the wider security strategy.
SicherheitsExpo Alpe Adria reinforced several developments we have been observing across the industry. Security is becoming more interconnected. Regulatory requirements are placing greater emphasis on accountability and documented processes. AI is creating opportunities but also raising important questions about control and responsibility. And resilience increasingly depends on how effectively people, processes, and technologies work together.
At the same time, the exhibition highlighted that physical identity management is not yet as prominent in industry discussions as other aspects of physical security. That is a conversation we believe deserves more attention, particularly as the boundaries between physical and digital security continue to narrow.
We would like to thank our partner LEGIC for exhibiting alongside us and everyone who took the time to exchange ideas with us in Klagenfurt.
