The Cumberland Hotel - Arena, London United Kingdom
Contact: [email protected]
0
0
0
0
Days
0
0
Hrs
0
0
Min
0
0
Sec
13th Annual Summit
13th Annual Rail Cybersecurity Summit
From Cybersecurity to Operational Resilience.
Managing Cyber Risk Across Connected Infrastructure, Digital Systems & Critical Dependencies
The Cumberland Hotel, London United Kingdom | 9–10 March 2027
DAY ONE — Regulation, Safety, Connectivity & Digital Dependency
Examining how regulation, connected systems, software dependency, supply chains, data and AI are reshaping cybersecurity risk across the railway.
08:00 – 08:40
Registration, Coffee, Exhibition & Networking
Welcome refreshments and exhibition area open.
08:40 – 08:50
Chair’s Welcome & Opening Remarks
Setting the context, core themes, and objectives for the 13th Annual Summit.
08:50 – 09:30
Main Stage Plenary
Cybersecurity in an Age of Dependency: Protecting Critical Infrastructure When You Don’t Control the Technology
30 min keynote followed by 10 min audience Q&A. Examining sovereign dependency, systemic software risk, cloud infrastructure, and operational autonomy across essential national transport networks.
Ciaran Martin CB
Former Founder & CEO, National Cyber Security Centre (NCSC)
NCSC / Oxford University / Paladin Capital
09:30 – 10:00
Main Stage
Digital Safety in Rail: Integrating Software, OT and Cyber Risk into the Safety Management System
James Walker
Head of Digital Safety, Railway Safety Directorate
Office of Rail and Road (ORR)
10:00 – 10:35
Featured Presentation
Stop Buying Cybersecurity. Start Buying Uptime.
A 35-minute presentation examining how cybersecurity investment translates into availability, reliability, incident containment, and faster operational recovery.
Eddy Thesee
VP Group Products & Solutions Cybersecurity
Alstom
10:35 – 11:15
Morning Coffee, Exhibition & Networking
40-minute morning refreshment and networking window across the exhibition hall.
11:15 – 11:45
Main Stage
NIS2 in Practice: First Experiences from the Rail Sector
Joseph Mager
Manager Cyber Governance
Nederlandse Spoorwegen (NS)
Syndicate
Rolling Stock Vulnerability Management: What Happens When a CVE Hits the Fleet?
Analysing fleet vulnerability workflows, operational remediation, and safety impact Speaker TBC.
11:45 – 12:15
Main Stage
How IEC 63452 Supports Compliance with Cybersecurity Regulations
Bruno Corasolla
Global Head of Digital Train, LoB Vehicles
Hitachi Rail
Syndicate
SBOMs, Software Components & Supplier Visibility: Can Rail See Far Enough Into the Product?
Mapping deep Tier-N software dependencies and third-party code verification Speaker TBC.
12:15 – 13:00
Main Stage Panel
Panel: Regulation Meets Reality — CRA, NIS2, IEC 63452, Digital Safety and the Railway
Bridging European legislative frameworks with real-world engineering and railway operations.
Contributors: Eddy Thesee (Alstom), Joseph Mager (NS), Bruno Corasolla (Hitachi Rail), Invitation to DfT.
13:00 – 14:00
Lunch, Exhibition & Networking
Dedicated 60-minute exhibition and networking lunch.
14:00 – 14:30
Main Stage
The Connected Train: Who Controls the Data?
Satellite communications, onboard telemetry, and GPS spoofing resilience.
Marc Silverwood & Gavin McAuley
Onboard Systems Manager & Onboard Systems Compliance Manager
Northern Trains Limited
Syndicate
Can You Trust the Maintenance Data? Securing Diagnostics, Sensors and Digital Depot Tooling
Protecting onboard edge sensors, telematics integrity, and maintenance environments Speaker TBC.
14:30 – 15:00
Main Stage
Cybersecurity and AI Alignment in an Age of Autonomous Acceleration
Dimitri van Zantvliet
Director Digital Resilience / CISO
Nederlandse Spoorwegen (NS)
Syndicate
Securing AI at the Edge: Trains, Stations and Trackside Systems
Adversarial ML, data tampering, and securing distributed edge models Speaker TBC.
15:00 – 15:50
Afternoon Coffee, Exhibition & Networking
50-minute afternoon networking window across the exhibition hall.
15:50 – 16:50
Day One Roundtable Forum — 8 Tables Running Concurrently
Interactive breakout discussions on critical operational and regulatory challenges.
| Table | Topic | Discussion Lead(s) |
|---|---|---|
| RT1 | Resilient Rail: Keeping Mobility Moving in an Uncertain World Examining the shared responsibilities of manufacturers and operators for system-wide resilience. |
Eddy Thesee (Alstom) |
| RT2 | From NIS2 to IEC 63452: What Does Good Evidence of Rail Cyber Compliance Actually Look Like? | Joseph Mager (NS) & Bruno Corasolla (Hitachi Rail) |
| RT3 | Trusting Position: GPS Spoofing, PNT Resilience and Active Monitoring on the Connected Railway | Marc Silverwood & Gavin McAuley (Northern Trains) |
| RT4 | Autonomous AI Acceleration: What Should Rail Boards Be Governing Now? | Dimitri van Zantvliet (NS) |
| RT5 | Beyond Tier 1: How Far Down Your Digital Supply Chain Can You See? | Lead TBC |
| RT6 | Asset Visibility Across the Digital Railway: Do You Know What You Own & What Depends Upon It? | Lead TBC |
| RT7 | When Does Cyber Risk Become Safety Risk — and When Should It Enter the Safety Management System? | James Walker (ORR) |
| RT8 | Resilient Intelligence: What Happens When Connectivity, Data or the Application Cannot Be Trusted? | Lead TBC |
16:50 – 17:20
Roundtable Roundup & Day One Conclusions
Key findings, insights, and strategic takeaways summarized from each of the 8 discussion tables.
DAY TWO — Operations, Long-Lived Assets, Fleets & Signalling
Moving from policy into the operational railway: fleet cybersecurity, signalling, engineering assurance, incident response and maintaining resilience across 25–40-year system lifecycles.
08:00 – 08:40
Registration, Coffee, Exhibition & Networking
Morning exhibition area open.
08:40 – 08:50
Chair’s Day Two Welcome & Opening Remarks
08:50 – 09:20
Main Stage
Defining the Minimum Viable Company: Building a Defendable, Resilient Railway Organisation
Tom Remberg & Trond Eskild Tingstad-Stav
CISO & Service Owner Traffic Operations
Bane NOR
09:20 – 09:50
Main Stage
Cybersecurity Across the Operational Fleet Lifecycle: Maintaining Assurance, Managing Vulnerabilities and Sustaining Security Over Decades
Joshua Edgley
Global Head of Fleet Security
Hitachi Rail
Syndicate
Cybersecurity by Design for New Rolling Stock
Procurement gates, security baselines, and design assurance Speaker TBC.
09:50 – 10:30
Main Stage Keynote
Cyber Resilience in Wartime: Building a Railway That Can Operate Through Disruption
30 min presentation followed by 10 min audience Q&A. Examining cyber threats, operational continuity, incident response under fire, and practical techniques to keep rail infrastructure running under continuous systemic disruption.
Anatolii Protsiuk
Deputy Director for Corporate Security – Head of the Information Security and Personal Data Protection Division
JSC Ukrainian Railways (Ukrzaliznytsia)
Syndicate
Remote Access to Rolling Stock: Maintenance Tool or Attack Path?
40 min session. Assessing bidirectional telematics, conditional maintenance tunnels, zero trust architecture for depot operations, and supplier access controls Speaker TBC.
10:30 – 11:15
Morning Coffee, Exhibition & Networking
45-minute morning refreshment and networking window across the exhibition hall.
11:15 – 11:45
Main Stage
After Handover: Keeping Railway Signalling Secure for the Next 30 Years
Damanjit Singh
Cyber Security Engineer – Signal Operations & Maintenance
Transport for London (TfL)
Syndicate Track
Bridging the IT/OT Divide: Practical Coordination, Governance and Operational Security in Railway Environments
Exploring practical coordination mechanisms between IT and OT security, resolving operational silos, and managing unified cyber posture across trackside, fleet and corporate railway networks.
Dmitri Ivanov
Chief Information Security Officer
Eesti Raudtee (Estonian Railways)
11:45 – 12:15
Main Stage
Bridging the Gap Between Cybersecurity and Railway Safety: Are Our Assurance Models Keeping Pace with the Connected Railway?
Jon Torode
Head of Engineering and Asset Performance
RKH Qitarat
Syndicate
AI-Enabled Cyber Defence: What Is Actually Working?
Automated detection, real-time response, and anomaly detection in rail OT networks Speaker TBC.
12:15 – 13:00
International Panel
International Panel: Information Sharing Between Railway Operators: Strengthening Collective Security and Resilience
How railway operators share cyber threat intelligence, physical security information, operational incident experiences and lessons learned across organisations and national borders. Addressing trust, information-sharing barriers, practical collaboration, security sensitivities and how stronger international operational relationships improve collective railway resilience.
Panel Contributors:
• Anatolii Protsiuk — Deputy Director for Corporate Security – Head of the Information Security and Personal Data Protection Division, JSC Ukrainian Railways (Ukrzaliznytsia)
• Oleksandr Rykovtsev — Director of Corporate Security, JSC Ukrainian Railways (Ukrzaliznytsia)
• Dimitri van Zantvliet — Director Digital Resilience / CISO, Nederlandse Spoorwegen (NS Rail)
• Dmitri Ivanov — Chief Information Security Officer, Eesti Raudtee (Estonian Railways)
• Independent Industry Moderator — TBC
• Anatolii Protsiuk — Deputy Director for Corporate Security – Head of the Information Security and Personal Data Protection Division, JSC Ukrainian Railways (Ukrzaliznytsia)
• Oleksandr Rykovtsev — Director of Corporate Security, JSC Ukrainian Railways (Ukrzaliznytsia)
• Dimitri van Zantvliet — Director Digital Resilience / CISO, Nederlandse Spoorwegen (NS Rail)
• Dmitri Ivanov — Chief Information Security Officer, Eesti Raudtee (Estonian Railways)
• Independent Industry Moderator — TBC
13:00 – 14:00
Lunch, Exhibition & Networking
Dedicated 60-minute exhibition and networking lunch.
14:00 – 14:40
Main Stage Keynote
Securing Railway Operations Under Martial Law: Protecting People, Infrastructure and Critical Operations
30 min presentation followed by 10 min audience Q&A. Examining physical and corporate security, personnel protection, critical infrastructure defence, coordination between security functions, and maintaining essential passenger/freight transport under active martial law.
Oleksandr Rykovtsev
Director of Corporate Security
JSC Ukrainian Railways (Ukrzaliznytsia)
Syndicate
Vulnerability Management Across Legacy & Modern Rail Systems
40 min session. Practical methodologies for coordinating security patching, firmware testing, and compensating controls across mixed-generation fleets and legacy interlocking Speaker TBC.
14:40 – 15:10
Main Stage
Strengthening Cybersecurity Across a National Railway: Lessons Learned from the Irish Rail Experience
Exploring the practical challenges of implementing cybersecurity programmes, managing operational risk, working across departments and suppliers, and translating security requirements into meaningful operational improvements.
Salman Munir
OT Cyber Security Manager
Iarnród Éireann (Irish Rail)
Syndicate
Securing Software, Updates & Third-Party Components Across the Rail Lifecycle
Managing software integrity, cryptographically verified updates, and third-party code Speaker TBC.
15:10 – 15:55
Afternoon Coffee, Exhibition & Networking
45-minute afternoon networking window across the exhibition hall.
15:55 – 16:55
Day Two Roundtable Forum — 8 Tables Running Concurrently
Focused small-group sessions addressing long-term asset management, OT breakdown points, and operational resilience.
| Table | Topic | Discussion Lead(s) |
|---|---|---|
| RT1 | Minimum Viable Company: What Absolutely Must Continue to Function After a Major Cyber Compromise? | Tom Remberg & Trond Eskild Tingstad-Stav (Bane NOR) |
| RT2 | Who Owns Cyber Risk After Fleet Handover? | Joshua Edgley (Hitachi Rail) |
| RT3 | Where OT Cybersecurity Breaks Down in Practice | Damanjit Singh (TfL) |
| RT4 | Keeping Safety Cases True Under Dynamic Cyber Risk | Jon Torode (RKH Qitarat) |
| RT5 | Cybersecurity by Design in Procurement: Setting Baseline Requirements Before the Contract Is Signed | Lead TBC |
| RT6 | Remote Access After Handover: Who Can Still Connect to the Train or Operational System? | Lead TBC |
| RT7 | Railway Security Information Sharing: Building Trusted Relationships Before a Crisis | Anatolii Protsiuk & Oleksandr Rykovtsev (Ukrainian Railways) |
| RT8 | From Cybersecurity Strategy to Delivery: What Works, What Doesn’t and What Have We Learned? | Salman Munir (Irish Rail) |
16:55 – 17:25
Roundtable Roundup & Summit Conclusions
5 minutes of key takeaways and actionable insights reported from each table, followed by final closing remarks from the summit chair.
Featured Industry Leaders & Speakers
Confirmed experts speaking across the 13th Annual Rail Cybersecurity Summit.
Ciaran Martin CB
Former Founder & CEO, National Cyber Security Centre (NCSC)
NCSC / Oxford University / Paladin Capital
Eddy Thesee
VP Group Products & Solutions Cybersecurity
Alstom
Anatolii Protsiuk
Deputy Director for Corporate Security – Head of InfoSec Division
JSC Ukrainian Railways
Oleksandr Rykovtsev
Director of Corporate Security
JSC Ukrainian Railways
Dimitri van Zantvliet
Director Digital Resilience / CISO
Nederlandse Spoorwegen (NS)
James Walker
Head of Digital Safety, Railway Safety Directorate
Office of Rail and Road (ORR)
Bruno Corasolla
Global Head of Digital Train, LoB Vehicles
Hitachi Rail
Joseph Mager
Manager Cyber Governance
Nederlandse Spoorwegen (NS)
Joshua Edgley
Global Head of Fleet Security
Hitachi Rail
Dmitri Ivanov
Chief Information Security Officer
Eesti Raudtee (Estonian Railways)
Salman Munir
OT Cyber Security Manager
Iarnród Éireann (Irish Rail)
Marc Silverwood
Onboard Systems Manager
Northern Trains Limited
Gavin McAuley
Onboard Systems Compliance Manager
Northern Trains Limited
Tom Remberg
CISO
Bane NOR
Trond Eskild Tingstad-Stav
Service Owner Traffic Operations
Bane NOR
Damanjit Singh
Cyber Security Engineer – Signal Operations & Maintenance
Transport for London (TfL)
Jon Torode
Head of Engineering and Asset Performance
RKH Qitarat
2027 Speakers
🇬🇧 James Walker
Head of Digital Safety, Railway Safety Directorate
Office of Rail and Road
🇫🇷 Eddy Thésée
Vice President, Products Cybersecurity
Alstom
🇩🇪 Dr. Frank Werner
Cybersecurity Expert
Eisenbahn-Bundesamt (NSA Germany)
🇳🇱 Joseph Mager
Manager Cyber Governance
Nederlandse Spoorwegen
🇳🇱 Dimitri van Zantvliet
Director Digital Resilience / CISO
Nederlandse Spoorwegen
🇬🇧 Marc Silverwood
Onboard Systems Manager
Northern Trains Limited
🇬🇧 Gavin McAuley
Onboard Systems Compliance Manager
Northern Trains Limited
🇳🇴 Tom Remberg
CISO
Bane NOR
🇳🇴 Trond Eskild Tingstad-Stav
Service Owner Traffic Operations
Bane NOR
🇬🇧 Joshua Edgley
Global Head of Fleet Security
Hitachi Rail
🇬🇧 Bruno Corasolla
Global Head of Digital Trains
Hitachi Rail
🇶🇦 Jon Torode
Head of Engineering and Asset Performance
RKH Qitarat
🇬🇧 Damanjit Singh
Cyber Security Engineer (Signal Operations & Maintenance)
Transport for London
🇺🇦 Anatolii Protsiuk
Deputy Director for Corporate Security – Head of the Information Security and Personal Data Protection Division, Corporate Security Department
JSC Ukrainian Railways (Ukrzaliznytsia)
🇮🇪 Salman Munir
OT Cyber Security Manager
Iarnród Éireann
🇪🇪 Dmitri Ivanov
Chief Information Security Officer
AS Eesti Raudtee / Estonian Railways Ltd
🇬🇧 Mark Robinson
Chief Information Officer
DfT Operator
🇺🇦 Oleksandr Rykovtsev
Director of Corporate Security
JSC Ukrainian Railways (Ukrzaliznytsia)
2027 Sponsors
Sponsors
Sponsors
Exhibitor
Near Capacity for 2027. Register while places remain 📢
Sponsorship | Speaking | Workshops | Attending
Contact: [email protected]
Past Attendees Include 👥
Rail Cybersecurity brings together the organisations that operate, own, engineer, assure and secure railway systems, alongside the specialist technology and cybersecurity companies supporting them.
120–175
delegates per event
300+
organisations represented historically
13th
Annual Rail Cybersecurity Summit in 2027
Rail & Transit Operators / Infrastructure
- Abellio
- ADIF
- Angel Trains
- Arriva
- ARTC
- Austrian Railways
- Bane NOR
- Banedanmark
- BLS
- Calgary Transit
- Central Japan Railway Company
- CFL
- Chiltern Railways
- CN Rail
- Crossrail
- CSX
- DB Cargo
- DB Cargo UK
- DB InfraGO / DB Netz
- DB Regio
- DB Schenker
- DB Systel
- DB Systemtechnik
- Deutsche Bahn
- Direct Rail Services
- East Midlands Railway
- East West Rail
- Eversholt Rail
- Fintraffic
- Flix
- GB Railfreight
- Govia Thameslink Railway
- Great Western Railway
- Heathrow Express
- HS1
- HS2
- Irish Rail / Iarnród Éireann
- Land Transport Authority Singapore
- LNER
- London Northwestern Railway
- Metropolitan Transportation Authority (MTA)
- Metro Service Copenhagen
- Network Rail
- Network Rail Telecom
- Northern
- NS / Dutch Railways
- Porterbrook
- RKH Qitarat
- Rock Rail
- SBB Swiss Federal Railways
- SNCF
- SNCFL
- South Western Railway
- Sporveien
- STIB-MIVB
- Strathclyde Partnership for Transport
- The Copenhagen Metro
- Toronto Transit Commission
- Trafikverket
- TransPennine Express
- Transport for London
- Transport for Wales
- Transport UK Group
- West Midlands Trains
- YPTO
Rolling Stock, Signalling & Rail Technology
- Alstom
- Belden
- CAF
- CAF Signalling
- Camlin Rail
- DeltaRail
- duagon
- Egis Rail
- EKE-Electronics
- ENYSE
- Euro-Multitel
- Frauscher Sensortechnik
- HARTING
- Hitachi Rail
- Hit Rail
- Icomera
- IMH Technologies
- Knorr-Bremse
- Kontron Transportation
- Loram
- Nomad Digital
- OMICRON electronics
- Patentes Talgo
- Perpetuum
- Power Standards Lab
- Resonate Group
- Schweitzer Engineering Laboratories
- Selectron Systems
- Siemens Mobility
- Stadler Rail
- Telent
- Televic Rail
- Thales
- Turntide
- Westermo
Cybersecurity & OT Technology
- 4Secure
- Acalvio Technologies
- aDolus Technology
- Airbus CyberSecurity
- AM Cyber
- Ampere Industrial Security
- Applied Risk
- Auxilium Cyber Security
- Auxilium Pentest Labs
- BlackBerry
- Cervello
- Codewerk
- Comcast DataBee
- Complete Cyber
- Computacenter
- Context Information Security
- Cyber Innovation Hub
- Cyber Shield
- Cyberics
- Cygnia Technologies
- Cylance
- Cylus
- Cyolo
- DigiTribe
- Dragos
- Expandium
- Fortinet
- GDAK Cyber Solution
- Huawei Technologies
- Huld
- Hypasec
- IBM
- iHackLabs
- IL7 Security
- Industrial Defender
- Information Security Forum
- Irdeto Security
- Mandiant
- mnemonic
- Modux
- NCC Group
- Nozomi Networks
- OTORIO
- Palo Alto Networks
- Pen Test Partners
- RazorSecure
- Risk Ledger
- SecurityScorecard
- Shift5
- Stoïk
- WALLIX
- Waterfall Security Solutions
- Xage Security
- XONA Systems
Engineering, Consulting & Assurance
- Abbott Risk Consulting
- Adelard
- Amentum
- Aon
- Arcadis
- Arup
- AtkinsRéalis
- Bird & Bird
- Bureau Veritas
- Deloitte
- DNV
- Egis
- Expleo Group
- Frazer-Nash Consultancy
- HNTB
- Ineco
- NCB Rail Assurance
- Network Certification Body
- PA Consulting
- PROSE
- SYSTRA
- TÜV Rheinland
- VUZ
- WSP
Government, Regulators, Standards & Academia
- British Transport Police
- Cyber Security Agency of Singapore
- Danish Transport and Construction Agency
- Department for Transport
- DfTO
- Eisenbahn-Bundesamt
- ERTMS Users Group
- European Commission – DG CONNECT
- European Commission – DG MOVE
- European Union Agency for Railways
- Finnish Transport and Communications Agency
- Human Environment and Transport Inspectorate
- NCSC
- NCSC Netherlands
- Nuclear Decommissioning Authority
- Office of Rail and Road
- Rail Delivery Group
- Rail Safety and Standards Board
- Shift2Rail Joint Undertaking
- Traficom
- University of Birmingham
- University of Huddersfield
- University of Warwick
Additional Organisations Represented
- Aspen Insurance
- Hiscox
- Honda
- MAPNA
- Mondi Group
- Petroleum Development Oman
- Solventum
Past attendee organisations are shown to demonstrate the breadth of the Rail Cybersecurity community and do not imply participation in the 2027 event. Company names have been consolidated where the same organisation has attended under different subsidiaries or legal entities.
Get in touch
Enquire About Rail Cybersecurity 2027
Register your interest in speaking, sponsorship, exhibition or attending the next Rail Cybersecurity Summit.
Join the Rail Cybersecurity Summit WhatsApp Group
News
Ayman Al Issa Industrial Cybersecurity Lead and Senior Expert @ McKinsey and Company
“Cloud for the OT environment: Being realistic about what is possible.” He will also run a workshop for Cyber Senate attendees “Workshop 'Designing a Secure Reference Architecture for Plant Operations and Maintenance.”
Agile OT Security for Evolving Energy Networks discussed by National Grid this November
Philip Tonkin has worked in the energy business for over 20 years, working in a wide range of disciplines. From field engineering to senior leadership positions, he has always been passionate about solving the challenges of digitising the energy supply industry. Using an understanding of the systems used by the industry along with experience in making decisions as an asset manager, he has led a number of key projects to move forward the understanding of cyber threat.
Now as the OT leader within National Grid’s security team his focus is securing the operational technology that underpins the operation of National Grid’s trans atlantic businesses, from Gas Transmission to Electricity Generation.
OT Security: Adopting and the Value of Defense in Depth
OT Security: Adopting and the Value of Defense in Depth with Cyber Senate and Sellafield Ltd
Geopolitics of Cybersecurity Presentation: Implications for the Supply Chain ICS Europe Nov 3/4
Technological Turning Points
The Making of Cyberspace
Growing Geopolitical Conflict
Cybersecurity on the Trade Battleground
Decoupling of Digital Economies
The Democratization of Innovation Power
Cyber Warfare to Information Warfare
Intelligent Battlefield
The Rise of Digital Disorder
Supply Chain Implications
The Evolution of OT Systems Management discussed with Cyber Senate
Organizations should embrace the concept of OT Systems Management (paralleling [...]
Cyber Senate Rail Cybersecurity USA conference welcomes WMATA
Kyle Malo is Senior Director of Cybersecurity and Chief Information [...]
