Draft agenda, subject to change.
Interested parties contact [email protected]
13th Annual Summit
13th Annual Rail Cybersecurity Summit
From Cybersecurity to Operational Resilience.
Managing Cyber Risk Across Connected Infrastructure, Digital Systems & Critical Dependencies
The Cumberland Hotel, London United Kingdom | 9–10 March 2027
DAY ONE — Regulation, Safety, Connectivity & Digital Dependency
Examining how regulation, connected systems, software dependency, supply chains, data and AI are reshaping cybersecurity risk across the railway.
08:00 – 08:40
Registration, Coffee, Exhibition & Networking
08:40 – 08:50
Chair’s Welcome & Opening Remarks
08:50 – 09:30
Cybersecurity in an Age of Dependency: Protecting Critical Infrastructure When You Don’t Control the Technology
30 min keynote followed by 10 min audience Q&A.
Ciaran Martin CB
Former Founder & CEO, National Cyber Security Centre (NCSC)
NCSC / Oxford University / Paladin Capital
09:30 – 10:00
Digital Safety in Rail: Integrating Software, OT and Cyber Risk into the Safety Management System
James Walker
Head of Digital Safety, Railway Safety Directorate
Office of Rail and Road (ORR)
10:00 – 10:30
Cybersecurity in Germany’s Railway Sector: Regulatory Developments and Practical Implications
Dr Frank Werner
Cybersecurity Expert
Eisenbahn-Bundesamt (EBA)
10:30 – 11:15
Morning Coffee, Exhibition & Networking
45-minute morning refreshment and networking window across the exhibition hall.
11:15 – 11:45
Main Stage
NIS2 in Practice: First Experiences from the Rail Sector
Joseph Mager
Manager Cyber Governance
Nederlandse Spoorwegen (NS)
Syndicate
Rolling Stock Vulnerability Management: What Happens When a CVE Hits the Fleet?
Analysing fleet vulnerability workflows, operational remediation, and safety impact.
11:45 – 12:15
Main Stage
How IEC 63452 Supports Compliance with Cybersecurity Regulations
Bruno Corasolla
Global Head of Digital Train, LoB Vehicles
Hitachi Rail
Syndicate
SBOMs, Software Components & Supplier Visibility: Can Rail See Far Enough Into the Product?
Mapping deep Tier-N software dependencies and third-party code verification.
12:15 – 13:00
Panel: Regulation Meets Reality — CRA, NIS2, IEC 63452, Digital Safety and the Railway
Contributors: Eddy Thesee (Alstom), Joseph Mager (NS), Bruno Corasolla (Hitachi Rail), Invitation to DfT
13:00 – 14:00
Lunch, Exhibition & Networking
Dedicated 60-minute exhibition and networking lunch.
14:00 – 14:30
Main Stage
The Connected Train: Who Controls the Data?
Marc Silverwood & Gavin McAuley
Onboard Systems Manager & Compliance Manager
Northern Trains Limited
Syndicate
Can You Trust the Maintenance Data? Securing Diagnostics, Sensors and Digital Depot Tooling
Protecting onboard edge sensors, telematics integrity, and maintenance environments.
14:30 – 15:00
Main Stage
Cybersecurity and AI Alignment in an Age of Autonomous Acceleration
Dimitri van Zantvliet
Director Digital Resilience / CISO
Nederlandse Spoorwegen (NS)
Syndicate
Securing AI at the Edge: Trains, Stations and Trackside Systems
Adversarial ML, data tampering, and securing distributed edge models.
15:00 – 15:45
Afternoon Coffee, Exhibition & Networking
45-minute afternoon networking window across the exhibition hall.
15:45 – 16:45
Day One Roundtable Forum — 8 Tables Running Concurrently
Interactive breakout discussions on critical operational and regulatory challenges.
| Table | Topic | Discussion Lead(s) |
|---|---|---|
| RT1 | CRA Article 14: When Does the Reporting Clock Start — and Who Owns the Decision? | Eddy Thesee (Alstom) |
| RT2 | From NIS2 to IEC 63452: What Does Good Evidence of Rail Cyber Compliance Actually Look Like? | Joseph Mager (NS) & Bruno Corasolla (Hitachi Rail) |
| RT3 | Trusting Position: GPS Spoofing, PNT Resilience and Active Monitoring on the Connected Railway | Marc Silverwood & Gavin McAuley (Northern Trains) |
| RT4 | Autonomous AI Acceleration: What Should Rail Boards Be Governing Now? | Dimitri van Zantvliet (NS) |
| RT5 | Beyond Tier 1: How Far Down Your Digital Supply Chain Can You See? | Lead TBC |
| RT6 | Asset Visibility Across the Digital Railway: Do You Know What You Own & What Depends Upon It? | Lead TBC |
| RT7 | When Does Cyber Risk Become Safety Risk — and When Should It Enter the Safety Management System? | James Walker (ORR) |
| RT8 | Resilient Intelligence: What Happens When Connectivity, Data or the Application Cannot Be Trusted? | Lead TBC |
16:45 – 17:15
Roundtable Roundup & Day One Conclusions
Key findings, insights, and strategic takeaways summarized from each of the 8 discussion tables.
DAY TWO — Operations, Long-Lived Assets, Fleets & Signalling
Moving from policy into the operational railway: fleet cybersecurity, signalling, engineering assurance, incident response and maintaining resilience across 25–40-year system lifecycles.
08:00 – 08:40
Registration, Coffee, Exhibition & Networking
08:40 – 08:50
Chair’s Day Two Welcome & Opening Remarks
08:50 – 09:20
Defining the Minimum Viable Company: Building a Defendable, Resilient Railway Organisation
Tom Remberg & Trond Eskild Tingstad-Stav
CISO & Service Owner Traffic Operations
Bane NOR
09:20 – 09:50
Main Stage
Cybersecurity Across the Operational Fleet Lifecycle: Maintaining Assurance, Managing Vulnerabilities and Sustaining Security Over Decades
Joshua Edgley
Global Head of Fleet Security
Hitachi Rail
Syndicate
Cybersecurity by Design for New Rolling Stock
Establishing baseline security architectures, procurement gates, and acceptance criteria for modern fleets.
09:50 – 10:30
Main Stage Keynote
Cyber Resilience in Wartime: Building a Railway That Can Operate Through Disruption
30 min presentation followed by 10 min audience Q&A. Examining cyber threats, operational continuity, incident response under fire, and practical techniques to keep rail infrastructure running under continuous systemic disruption.
Anatolii Protsiuk
Deputy Director for Corporate Security – Head of the Information Security and Personal Data Protection Division
JSC Ukrainian Railways (Ukrzaliznytsia)
Syndicate
Remote Access to Rolling Stock: Maintenance Tool or Attack Path?
40 min session. Assessing bidirectional telematics, conditional maintenance tunnels, zero trust architecture for depot operations, and supplier access controls.
10:30 – 11:15
Morning Coffee, Exhibition & Networking
45-minute morning refreshment and networking window across the exhibition hall.
11:15 – 11:45
Main Stage
After Handover: Keeping Railway Signalling Secure for the Next 30 Years
Operate-and-maintain cybersecurity across signalling assets with 25–40-year lives: legacy environments, maintaining safety cases alongside security, and managing change friction.
Damanjit Singh
Cyber Security Engineer – Signal Operations & Maintenance
Transport for London (TfL)
Syndicate
Detecting the Attack in Railway OT Without Disrupting Safety-Critical Operations
Non-intrusive anomaly detection, passive OT monitoring, and real-time incident alerting inside safety boundaries.
Representative Confirmed
Technical Rail Security Specialist
RazorSecure
11:45 – 12:15
Main Stage
Bridging the Gap Between Cybersecurity and Railway Safety: Are Our Assurance Models Keeping Pace with the Connected Railway?
Jon Torode
Head of Engineering and Asset Performance
RKH Qitarat
Syndicate
AI-Enabled Cyber Defence: What Is Actually Working?
Practical rail deployments of autonomous network telemetry analysis, automated containment, and threat triage.
12:15 – 13:00
International Panel: Information Sharing Between Railway Operators: Strengthening Collective Security and Resilience
How railway operators share cyber threat intelligence, physical security information, operational incident experiences and lessons learned across organisations and national borders. Addressing trust, information-sharing barriers, practical collaboration, security sensitivities and how stronger international operational relationships improve collective railway resilience.
Panel Contributors:
• Anatolii Protsiuk — Deputy Director for Corporate Security, JSC Ukrainian Railways (Ukrzaliznytsia)
• Dimitri van Zantvliet — Director Digital Resilience / CISO, Nederlandse Spoorwegen (NS Rail)
• Anatolii Protsiuk — Deputy Director for Corporate Security, JSC Ukrainian Railways (Ukrzaliznytsia)
• Dimitri van Zantvliet — Director Digital Resilience / CISO, Nederlandse Spoorwegen (NS Rail)
13:00 – 14:00
Lunch, Exhibition & Networking
Dedicated 60-minute exhibition and networking lunch.
14:00 – 14:40
Main Stage
Incident Response When Cyber Becomes Operational
40 min session. Practical methodologies for coordinating security patching, firmware testing, and compensating controls across mixed-generation fleets and legacy interlocking.
Speaker TBC
Syndicate
Vulnerability Management Across Legacy & Modern Rail Systems
40 min session. Practical methodologies for coordinating security patching, firmware testing, and compensating controls across mixed-generation fleets and legacy interlocking.
14:40 – 15:10
Main Stage
Strengthening Cybersecurity Across a National Railway: Lessons Learned from the Irish Rail Experience
Exploring the practical challenges of implementing cybersecurity programmes, managing operational risk, working across departments and suppliers, and translating security requirements into meaningful operational improvements.
Salman Munir
OT Cyber Security Manager
Iarnród Éireann (Irish Rail)
Syndicate
Securing Software, Updates & Third-Party Components Across the Rail Lifecycle
Signing, distribution verification, and depot staging for ongoing rolling stock software updates.
15:10 – 15:55
Afternoon Coffee, Exhibition & Networking
45-minute afternoon networking window across the exhibition hall.
15:55 – 16:55
Day Two Roundtable Forum — 8 Tables Running Concurrently
Focused small-group sessions addressing operational resilience, long-term asset security, OT breakdown points, strategy delivery, and crisis information sharing.
| Table | Topic | Discussion Lead(s) |
|---|---|---|
| RT1 | Minimum Viable Company: What Absolutely Must Continue to Function After a Major Cyber Compromise? | Tom Remberg & Trond Eskild Tingstad-Stav (Bane NOR) |
| RT2 | Who Owns Cyber Risk After the Train Enters Service? | Joshua Edgley (Hitachi Rail) |
| RT3 | Where Does Railway OT Cybersecurity Break Down in Practice? | Damanjit Singh (Transport for London) |
| RT4 | Can the Safety Case Stay True When the Cyber Environment Keeps Changing? | Jon Torode (RKH Qitarat) |
| RT5 | Cybersecurity by Design: What Should Rail Buyers Demand Before Procurement? | Lead TBC |
| RT6 | Remote Access After Handover: Who Can Still Connect to the Train or Operational System? | RazorSecure |
| RT7 | Railway Security Information Sharing: Building Trusted Relationships Before a Crisis | Anatolii Protsiuk (JSC Ukrainian Railways) |
| RT8 | From Cybersecurity Strategy to Delivery: What Works, What Doesn’t and What Have We Learned? | Salman Munir (Iarnród Éireann / Irish Rail) |
16:55 – 17:25
Roundtable Roundup & Summit Conclusions
Spokespersons present key operational findings and recommendations back to the summit audience followed by conclusions from the conference chair.
Featured Industry Leaders & Speakers
Confirmed experts speaking across the 13th Annual Rail Cybersecurity Summit.
Anatolii Protsiuk
Deputy Director for Corporate Security – Head of the Information Security and Personal Data Protection Division
JSC Ukrainian Railways (Ukrzaliznytsia)
Dimitri van Zantvliet
Director Digital Resilience / CISO
Nederlandse Spoorwegen (NS)
Salman Munir
OT Cyber Security Manager
Iarnród Éireann (Irish Rail)
Ciaran Martin CB
Former Founder & CEO, National Cyber Security Centre (NCSC)
NCSC / Oxford University / Paladin Capital
James Walker
Head of Digital Safety, Railway Safety Directorate
Office of Rail and Road (ORR)
Dr Frank Werner
Cybersecurity Expert
Eisenbahn-Bundesamt (EBA)
Joseph Mager
Manager Cyber Governance
Nederlandse Spoorwegen (NS)
Bruno Corasolla
Global Head of Digital Train, LoB Vehicles
Hitachi Rail
Eddy Thesee
VP Group Products & Solutions Cybersecurity
Alstom
Marc Silverwood
Onboard Systems Manager
Northern Trains Limited
Gavin McAuley
Onboard Systems Compliance Manager
Northern Trains Limited
Tom Remberg
CISO
Bane NOR
Trond Eskild Tingstad-Stav
Service Owner Traffic Operations
Bane NOR
Joshua Edgley
Global Head of Fleet Security
Hitachi Rail
Damanjit Singh
Cyber Security Engineer – Signal Operations & Maintenance
Transport for London (TfL)
Jon Torode
Head of Engineering and Asset Performance
RKH Qitarat