Event Agenda
23rd – 24th September 2026 // London, UK
Building Intelligence-Driven IT/ OT Resilience in an Era of Increasing Risk
Track A: Strategies For Overcoming The Biggest Cyber Issues of Today
Track B: Proactive Roadmaps for Overcoming Common OT Challenges
| Day 1 // 23rd September 2026 08:15 – 05:30 (BST) | |
 | 08:00Registration & Coffee |
| 08:35Chairman’s Opening Address by Thomas Mortsell, CSO, Aneo |
| 08:45 Keynote Address given by Senior NCSC Representative |
| 09:00 • What should be our first steps in the scenario of a cyber attack impacting our OT systems? What should be our priorities in both protection and response? • How can we best prevent panic in such a scenario? What can we do to ensure that downtime is limited and that impact is minimised? • When should we escalate to communicate with our boards in the event of an attack? • What strategies should we have prepared for a disaster? How can threat hunting support in the event of an incident? • What can we do so we are best prepared to respond to a cyber attack? . – Moderator: Claudio Sangaletti, Corporate Head of Infrastructure & Communication, PERSÁN – Thomas Mortsell, CSO, Aneo – Trish McGill, Sr. SME Cyber Security – Deputy CISO, De Heus Voeders B.V – Adam Paturej, Cyber Security Director, International Centre for Chemical Safety and Security (ICCSS) . |
| 09:40 . • Why business continuity is central to our IT and OT strategy • How continuity planning shaped our response to a cyber incident affecting operations and the supply chain • How we strengthened disaster preparedness through risk assessment and continuity planning • Lessons learned from incident response and recovery, from initial handling through to restoration . – Ramon Serres, CISO, Almirall . |
| 10:10 Cyber physical systems and OT security is sitting in a precarious halfway house between isolation and connection. In many cases the air gaps that secured the systems that sit at the very heart of industry and CNI have been eroded one use case at a time. How is this happening? Taking a step back for a moment, how should we be balancing risk and competitive advantage? We’ll look at some practical steps to take control of IT/OT convergence, how to get started and how to build the team you need to succeed. . – Alex Holben, Strategy and Technology Officer, Fortinet . |
| 10:50Break & Networking |
| TRACK A Strategies For Overcoming The Biggest Cyber Issues of Today Chaired by Thomas Mortsell, CSO, Aneo | |
| 11:30 .
. |
| 12:00 . This spotlight session will describe challenges faced by a Critical Infrastructure Utility to meet compliance and security mandates, while reducing impacts on utility operations. This Utility implemented an enterprise multi-vendor OT device management system covering Generation, Transmission, and Distribution and now Gas infrastructure to improve reliability, security, and worker efficiency. . – Kelly Stich, Chief Cyber Security Architect, SUBNET Solutions Inc . |
| 12:10
. |
| TRACK B Proactive Roadmaps for Overcoming Common OT Challenges Chaired by Nuno Teodoro, Global Cybersecurity Director, Hovione | |
| 11:30 • How we identified and prioritised vulnerabilities across complex OT environments to build an effective roadmap for OT vulnerability management • How moving from static asset inventories to dynamic, real-time visibility helped us • The importance of integrating IT and OT perspectives to create a unified risk picture • How we can overcome challenges with our legacy systems, vendor patching, and resource constraints and where we can utilise automation and threat intelligence to strengthen our OT vulnerability management . – Janine Oosthuizen, Director of OT Cybersecurity, CHEP . |
| 12:00 As IT and OT environments continue to converge, cyber risk increasingly extends beyond the factory floor to the business systems that support critical operations. This session explores how SAP security contributes to operational resilience by improving visibility, strengthening access controls, supporting vulnerability management, and enhancing monitoring. Attendees will gain practical insights into securing the SAP landscape as part of a broader OT cybersecurity strategy. . – Brian Rosenberger, VP EMEA, SecurityBridge . |
| 12:10
– Julian Smith, Principal Solutions Engineer, Claroty |
| LUNCH | |
| 12:40Lunch hosted by Fortinet & Indurex |
| TRACK A Developing Comprehensive & Human-Led Strategies To Mitigate Risk Chaired by Thomas Mortsell, CSO, Aneo | |
| 13:40 . While attackers continue to exploit weaknesses in on-premises networks, they are increasingly leveraging misconfigurations in identity and access management to move laterally towards operational technology assets. Drawing on real-world engagements across Critical National Infrastructure and Operators of Essential Services, this session will examine how these attack paths develop, the techniques adversaries use to cross IT and OT boundaries, and the risks they create for critical operations. Attendees will gain practical insight into how defenders can identify potential routes into OT environments, strengthen controls around identities and network access, and detect and disrupt lateral movement before attackers reach critical assets. . – Luiz Simpson, Head of Offensive Security, Bridewell . |
| 14:10 • Security-First Culture starts at the top • Detecting Early Signs of Insider Threats without compromising Privacy and Dignity of individuals involved • Safety = Security – Safety and Security of Individuals embedded across the business • Important Link between, IT, OT, HR and Cyber • External Assurance to Internal Knowledge – relevance of checks and intelligence . – Marcin Szczepanik, Head of Information Security, SP Electricity North West . |
| 14:40 As AI empowers attackers to discover vulnerabilities faster than organisations can patch them, the rules of OT cybersecurity are changing. This session explores why resilience, not perfect knowledge, is the foundation of effective risk reduction in industrial environments. Drawing on seven years of OT-focused innovation, TXOne Networks outlines a layered architecture spanning asset visibility, contextual risk prioritisation, virtual patching, and behavioural threat detection, showing how organisations can stay protected even when the threat landscape moves faster than the patch cycle. . – Ivan Zhekov, Senior Director, TXOne Networks . |
| TRACK B Bridging Strategy and Execution in OT Security Operations Chaired by Nuno Teodoro, Global Cybersecurity Director, Hovione | |
| 13:40 This presentation explores how automated collection into GRC can transform OT cybersecurity audits from a reactive, annual burden into a proactive, continuous process. We will discuss the integration of GRC platforms with OT-specific assets to enable:
– Marty Knopert, Europe Cybersecurity Director, Honeywell |
| 14:10 When OT endpoints pass end‑of‑support, patching is no longer a control but a risk decision. This session shares a practical, experience‑based lifecycle approach for keeping legacy endpoints in service without pretending they are patchable. We’ll cover triage by consequence and exposure, “safe‑to‑run” baselines, and layered compensating controls—segmentation, constrained remote access, allow‑listing, and monitoring—to reduce attack paths. Governance keeps exceptions explicit, reviewable, and aligned to operational realities. . – Michel Harthoorn, OT Programme Manager, bp – Rudolph Louw, Industrial Control System Security Specialist, bp . |
| 14:40 This session explores how an OT Intrusion Detection System (OT IDS) can actively support compliance with key IEC 62443 sections by integrating multiple cybersecurity functions—protocol-aware intrusion detection, continuous asset discovery, vulnerability management, and incident reporting—within a single solution. . – Markus Westphal, Cyber Security for the Power Grid Specialist, OMICRON . |
| – | |
| 15:10 In critical infrastructure environments, every file that crosses a boundary – from a vendor’s USB drive, a remote engineer’s laptop, or an email attachment – carries an implicit assumption: that it is what it claims to be. That assumption is increasingly the weakest link in otherwise well-defended OT and IT networks. We don’t rely on single controls at any other point in our security architecture, yet we routinely accept single AV scan results for files entering critical systems. This session challenges the idea that file trust should ever be implicit. Drawing on real-world incidents where seemingly benign files (firmware updates, PDFs, engineering drawings) became attack vectors, we’ll explore how organizations can extend Zero Trust thinking down to the file level – verifying content, not just credentials or network position. Attendees will leave with a practical framework for asking the right question of every file entering their environment: not “do we trust the source?” but “have we verified the content?” . – Steven Broadwell, Director of Solutions Engineering, OPSWAT & Stefan Liversidge, Solution Engineer, OPSWAT. . |
| 15:40Break & Networking |
| 16:10 T1: Has OT Security Become Too Cyber? – Ric Derbyshire, Principal Security Researcher, Orange Cyberdefense . T2: Practical Cybersecurity Baseline: Balancing Protection, Availability and Compliance – Jochen Füllgraf, Product Manager, Security Software, Belden . T3: Common Challenges and Solutions in Remote Access for Critical Environments – Jake Leonard-Walters, Sales Director EMEA, XONA Systems . T4: Shielding OT Vulnerabilities from AI Attacks with Frontier Virtual Patching – Anurag Thantharate, Global Director of Product GTM, Palo Alto Networks . T5: From Pilot to Production: Operating OT Security at Scale in Critical Infrastructure – Dominique Jullier, OT Security Strategy & Customer Success Lead, Open Systems . T6: Turning OT Risk into Boardroom Action: Building Quantifiable Cyber Narratives – Subramani Rao, Senior Expert, Cybersecurity Solutions Strategy, Acronis . |
| 16:50
– Moderator: Thomas Mortsell, CSO, Aneo |
| 17:30 Chairman’s Closing Remarks |
| 17:35 Drinks Reception |
| 19:00 Dinner hosted by Nozomi Networks & ShieldWorkz (Invite-Only) |
