The CYBER STEPPE 2026 conference has kicked off in Astana.

As part of the Republican Cybersecurity Month, the two-day CYBER STEPPE 2026 conference opened on September 10 at the International Center for Artificial Intelligence Alem.ai. Organized by MSSP Global, the event brings together the state, business, and experts to discuss how to make safe behavior in the digital environment as much of a norm as safety practices in everyday life. The event is held with the support of the Ministry of Artificial Intelligence and Digital Development of the Republic of Kazakhstan.

Doszhan Musaliyev, Deputy Minister of Artificial Intelligence and Digital Development of the RK
This year, the Digital Code and the Law "On Cybersecurity" came into force, legislation on personal data protection has been improved, and for the first time, the Labor Code has enshrined the responsibilities of employers and employees regarding cybersecurity and cyber culture. A logical continuation of this work is the Month of Cyber Culture: across the country, informational and explanatory activities, cyber lessons, regional forums, and practical events are taking place — from the Cyber Steppe conference, which we are opening the month with, to KazHackStan 2026, which will conclude it. Our main goal is to teach citizens to recognize internet fraud and cyber threats, to be responsible for their personal data, and to use digital services safely.

Cyber threats, phishing, social engineering, and deepfakes have long gone beyond corporate perimeters — anyone can encounter them at home, at work, or simply while scrolling through their smartphone feed. CYBER STEPPE brought together not only cybersecurity specialists but also representatives of government agencies, business, the banking sector, startups, and educational institutions.

The program for September 10 is dedicated to the transition from formal compliance to building real cyber resilience. Within the framework of the business program, participants will discuss the development of cybersecurity culture in the public and corporate sectors, the impact of shadow AI on organizations and the associated risks. They will separately discuss the economics of the service model of information security, legislative barriers in procuring comprehensive solutions for the public sector, as well as current scenarios of cyberattacks on government agencies. Experts will also discuss the role of artificial intelligence in protection systems, including potential threats of its use, and issues of effective communication during cyber incidents.

Parallel to this, technical tracks will feature analyses of attacks on LLMs, workshops on detecting phishing using AI, and the anatomy of APT attacks.

On September 11, the conference opens its doors to families, students, and educators. The format is simple language and practice: interactive simulators and quizzes for parents and children on topics of cyberbullying and cyber threats in online games, a presentation of the Kazakhstani digital simulator in Kazakh and Russian, a lecture on the history of the confrontation between hacker groups from 2011 to 2026, and a Q&A session for parents.

Organizers expect more than 3000 participants — over 2000 in Astana and more than 1000 online connections from Almaty, Shymkent, and regions. Over two days, more than 20 speakers and experts will present.