Rail Cybersecurity Conference London United Kingdom hosted by Cyber Senate

The Cumberland Hotel - Arena, London United Kingdom

Contact: [email protected]

Days

Hrs

Min

Sec

13th Annual Summit

13th Annual Rail Cybersecurity Summit

From Cybersecurity to Operational Resilience.

Managing Cyber Risk Across Connected Infrastructure, Digital Systems & Critical Dependencies

The Cumberland Hotel, London United Kingdom | 9–10 March 2027

DAY ONE — Regulation, Safety, Connectivity & Digital Dependency

Examining how regulation, connected systems, software dependency, supply chains, data and AI are reshaping cybersecurity risk across the railway.

08:00 – 08:40

Registration, Coffee, Exhibition & Networking

Welcome refreshments and exhibition area open.

08:40 – 08:50

Chair’s Welcome & Opening Remarks

Setting the context, core themes, and objectives for the 13th Annual Summit.

08:50 – 09:30

Main Stage Plenary

Cybersecurity in an Age of Dependency: Protecting Critical Infrastructure When You Don’t Control the Technology

30 min keynote followed by 10 min audience Q&A. Examining sovereign dependency, systemic software risk, cloud infrastructure, and operational autonomy across essential national transport networks.

Ciaran Martin CB

Former Founder & CEO, National Cyber Security Centre (NCSC)

NCSC / Oxford University / Paladin Capital

09:30 – 10:00

Main Stage

Digital Safety in Rail: Integrating Software, OT and Cyber Risk into the Safety Management System

James Walker

Head of Digital Safety, Railway Safety Directorate

Office of Rail and Road (ORR)

10:00 – 10:35

Featured Presentation

Stop Buying Cybersecurity. Start Buying Uptime.

A 35-minute presentation examining how cybersecurity investment translates into availability, reliability, incident containment, and faster operational recovery.

Eddy Thesee

VP Group Products & Solutions Cybersecurity

Alstom

10:35 – 11:15

Morning Coffee, Exhibition & Networking

40-minute morning refreshment and networking window across the exhibition hall.

11:15 – 11:45

Main Stage

NIS2 in Practice: First Experiences from the Rail Sector

Joseph Mager

Manager Cyber Governance

Nederlandse Spoorwegen (NS)

Syndicate

Rolling Stock Vulnerability Management: What Happens When a CVE Hits the Fleet?

Analysing fleet vulnerability workflows, operational remediation, and safety impact Speaker TBC.

11:45 – 12:15

Main Stage

How IEC 63452 Supports Compliance with Cybersecurity Regulations

Bruno Corasolla

Global Head of Digital Train, LoB Vehicles

Hitachi Rail

Syndicate

SBOMs, Software Components & Supplier Visibility: Can Rail See Far Enough Into the Product?

Mapping deep Tier-N software dependencies and third-party code verification Speaker TBC.

12:15 – 13:00

Main Stage Panel

Panel: Regulation Meets Reality — CRA, NIS2, IEC 63452, Digital Safety and the Railway

Bridging European legislative frameworks with real-world engineering and railway operations.

Contributors: Eddy Thesee (Alstom), Joseph Mager (NS), Bruno Corasolla (Hitachi Rail), Invitation to DfT.

13:00 – 14:00

Lunch, Exhibition & Networking

Dedicated 60-minute exhibition and networking lunch.

14:00 – 14:30

Main Stage

The Connected Train: Who Controls the Data?

Satellite communications, onboard telemetry, and GPS spoofing resilience.

Marc Silverwood & Gavin McAuley

Onboard Systems Manager & Onboard Systems Compliance Manager

Northern Trains Limited

Syndicate

Can You Trust the Maintenance Data? Securing Diagnostics, Sensors and Digital Depot Tooling

Protecting onboard edge sensors, telematics integrity, and maintenance environments Speaker TBC.

14:30 – 15:00

Main Stage

Cybersecurity and AI Alignment in an Age of Autonomous Acceleration

Dimitri van Zantvliet

Director Digital Resilience / CISO

Nederlandse Spoorwegen (NS)

Syndicate

Securing AI at the Edge: Trains, Stations and Trackside Systems

Adversarial ML, data tampering, and securing distributed edge models Speaker TBC.

15:00 – 15:50

Afternoon Coffee, Exhibition & Networking

50-minute afternoon networking window across the exhibition hall.

15:50 – 16:50

Day One Roundtable Forum — 8 Tables Running Concurrently

Interactive breakout discussions on critical operational and regulatory challenges.

Table	Topic	Discussion Lead(s)
RT1	Resilient Rail: Keeping Mobility Moving in an Uncertain World Examining the shared responsibilities of manufacturers and operators for system-wide resilience.	Eddy Thesee (Alstom)
RT2	From NIS2 to IEC 63452: What Does Good Evidence of Rail Cyber Compliance Actually Look Like?	Joseph Mager (NS) & Bruno Corasolla (Hitachi Rail)
RT3	Trusting Position: GPS Spoofing, PNT Resilience and Active Monitoring on the Connected Railway	Marc Silverwood & Gavin McAuley (Northern Trains)
RT4	Autonomous AI Acceleration: What Should Rail Boards Be Governing Now?	Dimitri van Zantvliet (NS)
RT5	Beyond Tier 1: How Far Down Your Digital Supply Chain Can You See?	Lead TBC
RT6	Asset Visibility Across the Digital Railway: Do You Know What You Own & What Depends Upon It?	Lead TBC
RT7	When Does Cyber Risk Become Safety Risk — and When Should It Enter the Safety Management System?	James Walker (ORR)
RT8	Resilient Intelligence: What Happens When Connectivity, Data or the Application Cannot Be Trusted?	Lead TBC

16:50 – 17:20

Roundtable Roundup & Day One Conclusions

Key findings, insights, and strategic takeaways summarized from each of the 8 discussion tables.

DAY TWO — Operations, Long-Lived Assets, Fleets & Signalling

Moving from policy into the operational railway: fleet cybersecurity, signalling, engineering assurance, incident response and maintaining resilience across 25–40-year system lifecycles.

08:00 – 08:40

Registration, Coffee, Exhibition & Networking

Morning exhibition area open.

08:40 – 08:50

Chair’s Day Two Welcome & Opening Remarks

08:50 – 09:20

Main Stage

Defining the Minimum Viable Company: Building a Defendable, Resilient Railway Organisation

Tom Remberg & Trond Eskild Tingstad-Stav

CISO & Service Owner Traffic Operations

Bane NOR

09:20 – 09:50

Main Stage

Cybersecurity Across the Operational Fleet Lifecycle: Maintaining Assurance, Managing Vulnerabilities and Sustaining Security Over Decades

Joshua Edgley

Global Head of Fleet Security

Hitachi Rail

Syndicate

Cybersecurity by Design for New Rolling Stock

Procurement gates, security baselines, and design assurance Speaker TBC.

09:50 – 10:30

Main Stage Keynote

Cyber Resilience in Wartime: Building a Railway That Can Operate Through Disruption

30 min presentation followed by 10 min audience Q&A. Examining cyber threats, operational continuity, incident response under fire, and practical techniques to keep rail infrastructure running under continuous systemic disruption.

Anatolii Protsiuk

Deputy Director for Corporate Security – Head of the Information Security and Personal Data Protection Division

JSC Ukrainian Railways (Ukrzaliznytsia)

Syndicate

Remote Access to Rolling Stock: Maintenance Tool or Attack Path?

40 min session. Assessing bidirectional telematics, conditional maintenance tunnels, zero trust architecture for depot operations, and supplier access controls Speaker TBC.

10:30 – 11:15

Morning Coffee, Exhibition & Networking

45-minute morning refreshment and networking window across the exhibition hall.

11:15 – 11:45

Main Stage

After Handover: Keeping Railway Signalling Secure for the Next 30 Years

Damanjit Singh

Cyber Security Engineer – Signal Operations & Maintenance

Transport for London (TfL)

Syndicate Track

Bridging the IT/OT Divide: Practical Coordination, Governance and Operational Security in Railway Environments

Exploring practical coordination mechanisms between IT and OT security, resolving operational silos, and managing unified cyber posture across trackside, fleet and corporate railway networks.

Dmitri Ivanov

Chief Information Security Officer

Eesti Raudtee (Estonian Railways)

11:45 – 12:15

Main Stage

Bridging the Gap Between Cybersecurity and Railway Safety: Are Our Assurance Models Keeping Pace with the Connected Railway?

Jon Torode

Head of Engineering and Asset Performance

RKH Qitarat

Syndicate

AI-Enabled Cyber Defence: What Is Actually Working?

Automated detection, real-time response, and anomaly detection in rail OT networks Speaker TBC.

12:15 – 13:00

International Panel

International Panel: Information Sharing Between Railway Operators: Strengthening Collective Security and Resilience

How railway operators share cyber threat intelligence, physical security information, operational incident experiences and lessons learned across organisations and national borders. Addressing trust, information-sharing barriers, practical collaboration, security sensitivities and how stronger international operational relationships improve collective railway resilience.

Panel Contributors:
• Anatolii Protsiuk — Deputy Director for Corporate Security – Head of the Information Security and Personal Data Protection Division, JSC Ukrainian Railways (Ukrzaliznytsia)
• Oleksandr Rykovtsev — Director of Corporate Security, JSC Ukrainian Railways (Ukrzaliznytsia)
• Dimitri van Zantvliet — Director Digital Resilience / CISO, Nederlandse Spoorwegen (NS Rail)
• Dmitri Ivanov — Chief Information Security Officer, Eesti Raudtee (Estonian Railways)
• Independent Industry Moderator — TBC

13:00 – 14:00

Lunch, Exhibition & Networking

Dedicated 60-minute exhibition and networking lunch.

14:00 – 14:40

Main Stage Keynote

Securing Railway Operations Under Martial Law: Protecting People, Infrastructure and Critical Operations

30 min presentation followed by 10 min audience Q&A. Examining physical and corporate security, personnel protection, critical infrastructure defence, coordination between security functions, and maintaining essential passenger/freight transport under active martial law.

Oleksandr Rykovtsev

Director of Corporate Security

JSC Ukrainian Railways (Ukrzaliznytsia)

Syndicate

Vulnerability Management Across Legacy & Modern Rail Systems

40 min session. Practical methodologies for coordinating security patching, firmware testing, and compensating controls across mixed-generation fleets and legacy interlocking Speaker TBC.

14:40 – 15:10

Main Stage

Strengthening Cybersecurity Across a National Railway: Lessons Learned from the Irish Rail Experience

Exploring the practical challenges of implementing cybersecurity programmes, managing operational risk, working across departments and suppliers, and translating security requirements into meaningful operational improvements.

Salman Munir

OT Cyber Security Manager

Iarnród Éireann (Irish Rail)

Syndicate

Securing Software, Updates & Third-Party Components Across the Rail Lifecycle

Managing software integrity, cryptographically verified updates, and third-party code Speaker TBC.

15:10 – 15:55

Afternoon Coffee, Exhibition & Networking

45-minute afternoon networking window across the exhibition hall.

15:55 – 16:55

Day Two Roundtable Forum — 8 Tables Running Concurrently

Focused small-group sessions addressing long-term asset management, OT breakdown points, and operational resilience.

Table	Topic	Discussion Lead(s)
RT1	Minimum Viable Company: What Absolutely Must Continue to Function After a Major Cyber Compromise?	Tom Remberg & Trond Eskild Tingstad-Stav (Bane NOR)
RT2	Who Owns Cyber Risk After Fleet Handover?	Joshua Edgley (Hitachi Rail)
RT3	Where OT Cybersecurity Breaks Down in Practice	Damanjit Singh (TfL)
RT4	Keeping Safety Cases True Under Dynamic Cyber Risk	Jon Torode (RKH Qitarat)
RT5	Cybersecurity by Design in Procurement: Setting Baseline Requirements Before the Contract Is Signed	Lead TBC
RT6	Remote Access After Handover: Who Can Still Connect to the Train or Operational System?	Lead TBC
RT7	Railway Security Information Sharing: Building Trusted Relationships Before a Crisis	Anatolii Protsiuk & Oleksandr Rykovtsev (Ukrainian Railways)
RT8	From Cybersecurity Strategy to Delivery: What Works, What Doesn’t and What Have We Learned?	Salman Munir (Irish Rail)

16:55 – 17:25

Roundtable Roundup & Summit Conclusions

5 minutes of key takeaways and actionable insights reported from each table, followed by final closing remarks from the summit chair.

Featured Industry Leaders & Speakers

Confirmed experts speaking across the 13th Annual Rail Cybersecurity Summit.

Ciaran Martin CB

Former Founder & CEO, National Cyber Security Centre (NCSC)

NCSC / Oxford University / Paladin Capital

Eddy Thesee

VP Group Products & Solutions Cybersecurity

Alstom

Anatolii Protsiuk

Deputy Director for Corporate Security – Head of InfoSec Division

JSC Ukrainian Railways

Oleksandr Rykovtsev

Director of Corporate Security

JSC Ukrainian Railways

Dimitri van Zantvliet

Director Digital Resilience / CISO

Nederlandse Spoorwegen (NS)

James Walker

Head of Digital Safety, Railway Safety Directorate

Office of Rail and Road (ORR)

Bruno Corasolla

Global Head of Digital Train, LoB Vehicles

Hitachi Rail

Joseph Mager

Manager Cyber Governance

Nederlandse Spoorwegen (NS)

Joshua Edgley

Global Head of Fleet Security

Hitachi Rail

Dmitri Ivanov

Chief Information Security Officer

Eesti Raudtee (Estonian Railways)

Salman Munir

OT Cyber Security Manager

Iarnród Éireann (Irish Rail)

Marc Silverwood

Onboard Systems Manager

Northern Trains Limited

Gavin McAuley

Onboard Systems Compliance Manager

Northern Trains Limited

Tom Remberg

CISO

Bane NOR

Trond Eskild Tingstad-Stav

Service Owner Traffic Operations

Bane NOR

Damanjit Singh

Cyber Security Engineer – Signal Operations & Maintenance

Transport for London (TfL)

Jon Torode

Head of Engineering and Asset Performance

RKH Qitarat

2027 Speakers

🇬🇧 James Walker
Head of Digital Safety, Railway Safety Directorate
Office of Rail and Road

🇫🇷 Eddy Thésée
Vice President, Products Cybersecurity
Alstom

🇩🇪 Dr. Frank Werner
Cybersecurity Expert
Eisenbahn-Bundesamt (NSA Germany)

🇳🇱 Joseph Mager
Manager Cyber Governance
Nederlandse Spoorwegen

🇳🇱 Dimitri van Zantvliet
Director Digital Resilience / CISO
Nederlandse Spoorwegen

🇬🇧 Marc Silverwood
Onboard Systems Manager
Northern Trains Limited

🇬🇧 Gavin McAuley
Onboard Systems Compliance Manager
Northern Trains Limited

🇳🇴 Tom Remberg
CISO
Bane NOR

🇳🇴 Trond Eskild Tingstad-Stav
Service Owner Traffic Operations
Bane NOR

🇬🇧 Joshua Edgley
Global Head of Fleet Security
Hitachi Rail

🇬🇧 Bruno Corasolla
Global Head of Digital Trains
Hitachi Rail

🇶🇦 Jon Torode
Head of Engineering and Asset Performance
RKH Qitarat

🇬🇧 Damanjit Singh
Cyber Security Engineer (Signal Operations & Maintenance)
Transport for London

🇺🇦 Anatolii Protsiuk

Deputy Director for Corporate Security – Head of the Information Security and Personal Data Protection Division, Corporate Security Department

JSC Ukrainian Railways (Ukrzaliznytsia)

🇮🇪 Salman Munir
OT Cyber Security Manager
Iarnród Éireann

🇪🇪 Dmitri Ivanov
Chief Information Security Officer
AS Eesti Raudtee / Estonian Railways Ltd

🇬🇧 Mark Robinson
Chief Information Officer
DfT Operator

🇺🇦 Oleksandr Rykovtsev
Director of Corporate Security
JSC Ukrainian Railways (Ukrzaliznytsia)

2027 Sponsors

Sponsors

Exhibitor

Rail Cybersecurity Summit - Contact & Bookings

Near Capacity for 2027. Register while places remain 📢

Sponsorship | Speaking | Workshops | Attending

Contact: [email protected]

Rail Cybersecurity Summit - Past Attendees

Past Attendees Include 👥

Rail Cybersecurity brings together the organisations that operate, own, engineer, assure and secure railway systems, alongside the specialist technology and cybersecurity companies supporting them.

120–175 delegates per event

300+ organisations represented historically

13th Annual Rail Cybersecurity Summit in 2027

Rail & Transit Operators / Infrastructure

Abellio
ADIF
Angel Trains
Arriva
ARTC
Austrian Railways
Bane NOR
Banedanmark
BLS
Calgary Transit
Central Japan Railway Company
CFL
Chiltern Railways
CN Rail
Crossrail
CSX
DB Cargo
DB Cargo UK
DB InfraGO / DB Netz
DB Regio
DB Schenker
DB Systel
DB Systemtechnik
Deutsche Bahn
Direct Rail Services
East Midlands Railway
East West Rail
Eversholt Rail
Fintraffic
Flix
GB Railfreight
Govia Thameslink Railway
Great Western Railway
Heathrow Express
HS1
HS2
Irish Rail / Iarnród Éireann
Land Transport Authority Singapore
LNER
London Northwestern Railway
Metropolitan Transportation Authority (MTA)
Metro Service Copenhagen
Network Rail
Network Rail Telecom
Northern
NS / Dutch Railways
Porterbrook
RKH Qitarat
Rock Rail
SBB Swiss Federal Railways
SNCF
SNCFL
South Western Railway
Sporveien
STIB-MIVB
Strathclyde Partnership for Transport
The Copenhagen Metro
Toronto Transit Commission
Trafikverket
TransPennine Express
Transport for London
Transport for Wales
Transport UK Group
West Midlands Trains
YPTO

Rolling Stock, Signalling & Rail Technology

Alstom
Belden
CAF
CAF Signalling
Camlin Rail
DeltaRail
duagon
Egis Rail
EKE-Electronics
ENYSE
Euro-Multitel
Frauscher Sensortechnik
HARTING
Hitachi Rail
Hit Rail
Icomera
IMH Technologies
Knorr-Bremse
Kontron Transportation
Loram
Nomad Digital
OMICRON electronics
Patentes Talgo
Perpetuum
Power Standards Lab
Resonate Group
Schweitzer Engineering Laboratories
Selectron Systems
Siemens Mobility
Stadler Rail
Telent
Televic Rail
Thales
Turntide
Westermo

Cybersecurity & OT Technology

4Secure
Acalvio Technologies
aDolus Technology
Airbus CyberSecurity
AM Cyber
Ampere Industrial Security
Applied Risk
Auxilium Cyber Security
Auxilium Pentest Labs
BlackBerry
Cervello
Codewerk
Comcast DataBee
Complete Cyber
Computacenter
Context Information Security
Cyber Innovation Hub
Cyber Shield
Cyberics
Cygnia Technologies
Cylance
Cylus
Cyolo
DigiTribe
Dragos
Expandium
Fortinet
GDAK Cyber Solution
Huawei Technologies
Huld
Hypasec
IBM
iHackLabs
IL7 Security
Industrial Defender
Information Security Forum
Irdeto Security
Mandiant
mnemonic
Modux
NCC Group
Nozomi Networks
OTORIO
Palo Alto Networks
Pen Test Partners
RazorSecure
Risk Ledger
SecurityScorecard
Shift5
Stoïk
WALLIX
Waterfall Security Solutions
Xage Security
XONA Systems

Engineering, Consulting & Assurance

Abbott Risk Consulting
Adelard
Amentum
Aon
Arcadis
Arup
AtkinsRéalis
Bird & Bird
Bureau Veritas
Deloitte
DNV
Egis
Expleo Group
Frazer-Nash Consultancy
HNTB
Ineco
NCB Rail Assurance
Network Certification Body
PA Consulting
PROSE
SYSTRA
TÜV Rheinland
VUZ
WSP

Government, Regulators, Standards & Academia

British Transport Police
Cyber Security Agency of Singapore
Danish Transport and Construction Agency
Department for Transport
DfTO
Eisenbahn-Bundesamt
ERTMS Users Group
European Commission – DG CONNECT
European Commission – DG MOVE
European Union Agency for Railways
Finnish Transport and Communications Agency
Human Environment and Transport Inspectorate
NCSC
NCSC Netherlands
Nuclear Decommissioning Authority
Office of Rail and Road
Rail Delivery Group
Rail Safety and Standards Board
Shift2Rail Joint Undertaking
Traficom
University of Birmingham
University of Huddersfield
University of Warwick

Additional Organisations Represented

Aspen Insurance
Hiscox
Honda
MAPNA
Mondi Group
Petroleum Development Oman
Solventum

Past attendee organisations are shown to demonstrate the breadth of the Rail Cybersecurity community and do not imply participation in the 2027 event. Company names have been consolidated where the same organisation has attended under different subsidiaries or legal entities.

I find attending Cybersenate always reinvigorates my passion for Cybersecurity. Talking to others in the Railway OT world who are passionate and can see the need to do more in this space; technically, legislatively and in terms of training and recruitment makes me want to go back to my company and shake things up again to get us back into gear. I find I take more and more people not only from my team but from across my organisation each year.

Conference Attendee

Fantastic team, fantastic speakers, fantastic event

Conference Attendee

Great event with a wide range of attendees and a great deal of expertise!

Conference Attendee

Great mix of vendors, operators, integrators and authorities that gives a great opportunity to discuss from different viewpoints.

Conference Attendee

Cookie	Duration	Description
cookielawinfo-checkbox-analytics	11 months	This cookie is set by GDPR Cookie Consent plugin. The cookie is used to store the user consent for the cookies in the category "Analytics".
cookielawinfo-checkbox-functional	11 months	The cookie is set by GDPR cookie consent to record the user consent for the cookies in the category "Functional".
cookielawinfo-checkbox-necessary	11 months	This cookie is set by GDPR Cookie Consent plugin. The cookies is used to store the user consent for the cookies in the category "Necessary".
cookielawinfo-checkbox-others	11 months	This cookie is set by GDPR Cookie Consent plugin. The cookie is used to store the user consent for the cookies in the category "Other.
cookielawinfo-checkbox-performance	11 months	This cookie is set by GDPR Cookie Consent plugin. The cookie is used to store the user consent for the cookies in the category "Performance".
viewed_cookie_policy	11 months	The cookie is set by the GDPR Cookie Consent plugin and is used to store whether or not user has consented to the use of cookies. It does not store any personal data.

13th Annual Rail Cybersecurity Summit