The Cumberland Hotel - Arena, London United Kingdom
Contact: [email protected]
0
0
0
0
Days
0
0
Hrs
0
0
Min
0
0
Sec
13th Annual Summit
13th Annual Rail Cybersecurity Summit
From Cybersecurity to Operational Resilience.
Managing Cyber Risk Across Connected Infrastructure, Digital Systems & Critical Dependencies
The Cumberland Hotel, London United Kingdom | 9–10 March 2027
DAY ONE — Regulation, Safety, Connectivity & Digital Dependency
Examining how regulation, connected systems, software dependency, supply chains, data and AI are reshaping cybersecurity risk across the railway.
08:00 – 08:40
Registration, Coffee, Exhibition & Networking
Welcome refreshments and exhibition area open.
08:40 – 08:50
Chair’s Welcome & Opening Remarks
Setting the context, core themes, and objectives for the 13th Annual Summit.
08:50 – 09:30
Main Stage Plenary
Cybersecurity in an Age of Dependency: Protecting Critical Infrastructure When You Don’t Control the Technology
30 min keynote followed by 10 min audience Q&A. Examining sovereign dependency, systemic software risk, cloud infrastructure, and operational autonomy across essential national transport networks.
Ciaran Martin CB
Former Founder & CEO, National Cyber Security Centre (NCSC)
NCSC / Oxford University / Paladin Capital
09:30 – 10:00
Main Stage
Digital Safety in Rail: Integrating Software, OT and Cyber Risk into the Safety Management System
James Walker
Head of Digital Safety, Railway Safety Directorate
Office of Rail and Road (ORR)
10:00 – 10:30
Main Stage
Provisional Title
Cyber Resilience — From Cybersecurity Compliance to Operational Continuity
A practical look at how cybersecurity supports railway resilience, availability, uptime, operational continuity, customer acceptance and the ability to recover quickly from disruption. Examining resilience as a stronger business and operational framework for senior railway stakeholders, connecting cyber investment to measurable operational outcomes.
* Provisional title — final abstract/content to follow from Eddy Thesee.
Eddy Thesee
Vice President, Products Cybersecurity
Alstom
10:30 – 11:15
Morning Coffee, Exhibition & Networking
45-minute morning refreshment and networking window across the exhibition hall.
11:15 – 11:45
Main Stage
Cybersecurity in Germany’s Railway Sector: Regulatory Developments and Practical Implications
Dr Frank Werner
Cybersecurity Expert
Eisenbahn-Bundesamt (EBA)
Syndicate
Rolling Stock Vulnerability Management: What Happens When a CVE Hits the Fleet?
Analysing fleet vulnerability workflows, operational remediation, and safety impact Speaker TBC.
11:45 – 12:15
Main Stage
How IEC 63452 Supports Compliance with Cybersecurity Regulations
Bruno Corasolla
Global Head of Digital Train, LoB Vehicles
Hitachi Rail
Syndicate
SBOMs, Software Components & Supplier Visibility: Can Rail See Far Enough Into the Product?
Mapping deep Tier-N software dependencies and third-party code verification Speaker TBC.
12:15 – 13:00
Main Stage Panel
Panel: Regulation Meets Reality — Implementing CRA, NIS2 and IEC 63452
Moving beyond explaining regulation to focus on practical implementation across railway organisations:
- What does implementation of CRA, NIS2 and IEC 63452 now mean in practice for operators, OEMs and suppliers?
- Who owns the responsibility, risk and cost of meeting the new cybersecurity obligations?
- Balancing legal compliance with commercial reality, project delivery and customer acceptance.
- Translating compliance into long-term resilience, trust and business value.
Confirmed Panellists:
• Eddy Thesee — Vice President, Products Cybersecurity, Alstom
• Joseph Mager — Manager Cyber Governance, Nederlandse Spoorwegen (NS)
• Bruno Corasolla — Global Head of Digital Train, LoB Vehicles, Hitachi Rail
• Invitation to DfT — Competent Authority / Government Representative
• Eddy Thesee — Vice President, Products Cybersecurity, Alstom
• Joseph Mager — Manager Cyber Governance, Nederlandse Spoorwegen (NS)
• Bruno Corasolla — Global Head of Digital Train, LoB Vehicles, Hitachi Rail
• Invitation to DfT — Competent Authority / Government Representative
13:00 – 14:00
Lunch, Exhibition & Networking
Dedicated 60-minute exhibition and networking lunch.
14:00 – 14:30
Main Stage
NIS2 in Practice: First Experiences from the Rail Sector
Joseph Mager
Manager Cyber Governance
Nederlandse Spoorwegen (NS)
Syndicate
Can You Trust the Maintenance Data? Securing Diagnostics, Sensors and Digital Depot Tooling
Protecting onboard edge sensors, telematics integrity, and maintenance environments Speaker TBC.
14:30 – 15:00
Main Stage
The Connected Train: Who Controls the Data?
Satellite communications, onboard telemetry, and GPS spoofing resilience.
Marc Silverwood & Gavin McAuley
Onboard Systems Manager & Compliance Manager
Northern Trains Limited
Syndicate
Securing AI at the Edge: Trains, Stations and Trackside Systems
Adversarial ML, data tampering, and securing distributed edge models Speaker TBC.
15:00 – 15:30
Main Stage
Cybersecurity and AI Alignment in an Age of Autonomous Acceleration
Dimitri van Zantvliet
Director Digital Resilience / CISO
Nederlandse Spoorwegen (NS)
15:30 – 16:00
Afternoon Coffee, Exhibition & Networking
30-minute afternoon networking window across the exhibition hall.
16:00 – 17:00
Day One Roundtable Forum — 8 Tables Running Concurrently
Interactive, discussion-led breakout sessions addressing critical commercial, operational and regulatory challenges.
| Table | Topic | Discussion Lead(s) |
|---|---|---|
| RT1 | From Compliance to Reality — Who Owns the Cost, Risk and Decision? Practical and commercial consequences of rail cyber regulation: lifecycle costs, OEM/operator responsibility splits, common supplier assurance criteria, and cyber monitoring across connected fleets. |
Eddy Thesee (Alstom) |
| RT2 | From NIS2 to IEC 63452: What Does Good Evidence of Rail Cyber Compliance Actually Look Like? | Joseph Mager (NS) & Bruno Corasolla (Hitachi Rail) |
| RT3 | Trusting Position: GPS Spoofing, PNT Resilience and Active Monitoring on the Connected Railway | Marc Silverwood & Gavin McAuley (Northern Trains) |
| RT4 | Autonomous AI Acceleration: What Should Rail Boards Be Governing Now? | Dimitri van Zantvliet (NS) |
| RT5 | Beyond Tier 1: How Far Down Your Digital Supply Chain Can You See? | Lead TBC |
| RT6 | Asset Visibility Across the Digital Railway: Do You Know What You Own & What Depends Upon It? | Lead TBC |
| RT7 | When Does Cyber Risk Become Safety Risk — and When Should It Enter the Safety Management System? | James Walker (ORR) |
| RT8 | Resilient Intelligence: What Happens When Connectivity, Data or the Application Cannot Be Trusted? | Lead TBC |
17:00 – 17:30
Roundtable Roundup & Day One Conclusions
Key takeaways, insights, and strategic findings reported from each of the 8 discussion tables.
DAY TWO — Operations, Long-Lived Assets, Fleets & Signalling
Moving from policy into the operational railway: fleet cybersecurity, signalling, engineering assurance, incident response and maintaining resilience across 25–40-year system lifecycles.
08:00 – 08:40
Registration, Coffee, Exhibition & Networking
Morning exhibition area open.
08:40 – 08:50
Chair’s Day Two Welcome & Opening Remarks
08:50 – 09:20
Main Stage
Defining the Minimum Viable Company: Building a Defendable, Resilient Railway Organisation
Tom Remberg & Trond Eskild Tingstad-Stav
CISO & Service Owner Traffic Operations
Bane NOR
09:20 – 09:50
Main Stage
Cybersecurity Across the Operational Fleet Lifecycle: Maintaining Assurance, Managing Vulnerabilities and Sustaining Security Over Decades
Joshua Edgley
Global Head of Fleet Security
Hitachi Rail
Syndicate
Cybersecurity by Design for New Rolling Stock
Procurement gates, security baselines, and design assurance Speaker TBC.
09:50 – 10:30
Main Stage Keynote
Cyber Resilience in Wartime: Building a Railway That Can Operate Through Disruption
30 min presentation followed by 10 min audience Q&A. Examining cyber threats, operational continuity, incident response under fire, and practical techniques to keep rail infrastructure running under continuous systemic disruption.
Anatolii Protsiuk
Deputy Director for Corporate Security – Head of the Information Security and Personal Data Protection Division
JSC Ukrainian Railways (Ukrzaliznytsia)
Syndicate
Remote Access to Rolling Stock: Maintenance Tool or Attack Path?
40 min session. Assessing bidirectional telematics, conditional maintenance tunnels, zero trust architecture for depot operations, and supplier access controls Speaker TBC.
10:30 – 11:15
Morning Coffee, Exhibition & Networking
45-minute morning refreshment and networking window across the exhibition hall.
11:15 – 11:45
Main Stage
After Handover: Keeping Railway Signalling Secure for the Next 30 Years
Damanjit Singh
Cyber Security Engineer – Signal Operations & Maintenance
Transport for London (TfL)
Syndicate Track
Bridging the IT/OT Divide: Practical Coordination, Governance and Operational Security in Railway Environments
Exploring practical coordination mechanisms between IT and OT security, resolving operational silos, and managing unified cyber posture across trackside, fleet and corporate railway networks.
Dmitri Ivanov
Chief Information Security Officer
Eesti Raudtee (Estonian Railways)
11:45 – 12:15
Main Stage
Bridging the Gap Between Cybersecurity and Railway Safety: Are Our Assurance Models Keeping Pace with the Connected Railway?
Jon Torode
Head of Engineering and Asset Performance
RKH Qitarat
Syndicate
AI-Enabled Cyber Defence: What Is Actually Working?
Automated detection, real-time response, and anomaly detection in rail OT networks Speaker TBC.
12:15 – 13:00
International Panel
International Panel: Information Sharing Between Railway Operators: Strengthening Collective Security and Resilience
How railway operators share cyber threat intelligence, physical security information, operational incident experiences and lessons learned across organisations and national borders.
Panel Contributors:
• Anatolii Protsiuk — Deputy Director for Corporate Security, JSC Ukrainian Railways
• Oleksandr Rykovtsev — Director of Corporate Security, JSC Ukrainian Railways
• Dimitri van Zantvliet — Director Digital Resilience / CISO, Nederlandse Spoorwegen (NS Rail)
• Dmitri Ivanov — Chief Information Security Officer, Eesti Raudtee (Estonian Railways)
• Independent Industry Moderator — TBC
• Anatolii Protsiuk — Deputy Director for Corporate Security, JSC Ukrainian Railways
• Oleksandr Rykovtsev — Director of Corporate Security, JSC Ukrainian Railways
• Dimitri van Zantvliet — Director Digital Resilience / CISO, Nederlandse Spoorwegen (NS Rail)
• Dmitri Ivanov — Chief Information Security Officer, Eesti Raudtee (Estonian Railways)
• Independent Industry Moderator — TBC
13:00 – 14:00
Lunch, Exhibition & Networking
Dedicated 60-minute exhibition and networking lunch.
14:00 – 14:40
Main Stage Keynote
Securing Railway Operations Under Martial Law: Protecting People, Infrastructure and Critical Operations
30 min presentation followed by 10 min audience Q&A. Examining physical and corporate security, personnel protection, critical infrastructure defence, and maintaining essential transport under active martial law.
Oleksandr Rykovtsev
Director of Corporate Security
JSC Ukrainian Railways (Ukrzaliznytsia)
Syndicate
Vulnerability Management Across Legacy & Modern Rail Systems
40 min session. Practical methodologies for coordinating security patching, firmware testing, and compensating controls across mixed fleets Speaker TBC.
14:40 – 15:10
Main Stage
Strengthening Cybersecurity Across a National Railway: Lessons Learned from the Irish Rail Experience
Practical challenges of delivering cybersecurity programmes, risk management, and converting requirements into operational improvements.
Salman Munir
OT Cyber Security Manager
Iarnród Éireann (Irish Rail)
Syndicate
Securing Software, Updates & Third-Party Components Across the Rail Lifecycle
Managing software integrity, cryptographically verified updates, and third-party code Speaker TBC.
15:10 – 15:55
Afternoon Coffee, Exhibition & Networking
45-minute afternoon networking window across the exhibition hall.
15:55 – 16:55
Day Two Roundtable Forum — 8 Tables Running Concurrently
Focused small-group sessions addressing long-term asset management, OT breakdown points, and operational resilience.
| Table | Topic | Discussion Lead(s) |
|---|---|---|
| RT1 | Minimum Viable Company: What Absolutely Must Continue to Function After a Major Cyber Compromise? | Tom Remberg & Trond Eskild Tingstad-Stav (Bane NOR) |
| RT2 | Who Owns Cyber Risk After Fleet Handover? | Joshua Edgley (Hitachi Rail) |
| RT3 | Where OT Cybersecurity Breaks Down in Practice | Damanjit Singh (TfL) |
| RT4 | Keeping Safety Cases True Under Dynamic Cyber Risk | Jon Torode (RKH Qitarat) |
| RT5 | Cybersecurity by Design in Procurement: Setting Baseline Requirements Before the Contract Is Signed | Lead TBC |
| RT6 | Remote Access After Handover: Who Can Still Connect to the Train or Operational System? | RazorSecure |
| RT7 | Railway Security Information Sharing: Building Trusted Relationships Before a Crisis | Anatolii Protsiuk & Oleksandr Rykovtsev (Ukrainian Railways) |
| RT8 | From Cybersecurity Strategy to Delivery: What Works, What Doesn’t and What Have We Learned? | Salman Munir (Irish Rail) |
16:55 – 17:25
Roundtable Roundup & Summit Conclusions
5 minutes of key takeaways and actionable insights reported from each table, followed by final closing remarks from the summit chair.
Featured Industry Leaders & Speakers
Confirmed experts speaking across the 13th Annual Rail Cybersecurity Summit.
Eddy Thesee
Vice President, Products Cybersecurity
Alstom
Ciaran Martin CB
Former Founder & CEO, National Cyber Security Centre (NCSC)
NCSC / Oxford University / Paladin Capital
Anatolii Protsiuk
Deputy Director for Corporate Security – Head of Information Security
JSC Ukrainian Railways (Ukrzaliznytsia)
Oleksandr Rykovtsev
Director of Corporate Security
JSC Ukrainian Railways (Ukrzaliznytsia)
James Walker
Head of Digital Safety, Railway Safety Directorate
Office of Rail and Road (ORR)
Dr Frank Werner
Cybersecurity Expert
Eisenbahn-Bundesamt (EBA)
Joseph Mager
Manager Cyber Governance
Nederlandse Spoorwegen (NS)
Bruno Corasolla
Global Head of Digital Train, LoB Vehicles
Hitachi Rail
Dimitri van Zantvliet
Director Digital Resilience / CISO
Nederlandse Spoorwegen (NS)
Dmitri Ivanov
Chief Information Security Officer
Eesti Raudtee (Estonian Railways)
Salman Munir
OT Cyber Security Manager
Iarnród Éireann (Irish Rail)
Marc Silverwood
Onboard Systems Manager
Northern Trains Limited
Gavin McAuley
Compliance Manager
Northern Trains Limited
Joshua Edgley
Global Head of Fleet Security
Hitachi Rail
Damanjit Singh
Cyber Security Engineer – Signal Operations & Maintenance
Transport for London (TfL)
Jon Torode
Head of Engineering and Asset Performance
RKH Qitarat
Tom Remberg
CISO
Bane NOR
Trond Eskild Tingstad-Stav
Service Owner Traffic Operations
Bane NOR
2027 Speakers
🇬🇧 James Walker
Head of Digital Safety, Railway Safety Directorate
Office of Rail and Road
🇫🇷 Eddy Thésée
Vice President, Products Cybersecurity
Alstom
🇩🇪 Dr. Frank Werner
Cybersecurity Expert
Eisenbahn-Bundesamt (NSA Germany)
🇳🇱 Joseph Mager
Manager Cyber Governance
Nederlandse Spoorwegen
🇳🇱 Dimitri van Zantvliet
Director Digital Resilience / CISO
Nederlandse Spoorwegen
🇬🇧 Marc Silverwood
Onboard Systems Manager
Northern Trains Limited
🇬🇧 Gavin McAuley
Onboard Systems Compliance Manager
Northern Trains Limited
🇳🇴 Tom Remberg
CISO
Bane NOR
🇳🇴 Trond Eskild Tingstad-Stav
Service Owner Traffic Operations
Bane NOR
🇬🇧 Joshua Edgley
Global Head of Fleet Security
Hitachi Rail
🇬🇧 Bruno Corasolla
Global Head of Digital Trains
Hitachi Rail
🇶🇦 Jon Torode
Head of Engineering and Asset Performance
RKH Qitarat
🇬🇧 Damanjit Singh
Cyber Security Engineer (Signal Operations & Maintenance)
Transport for London
🇺🇦 Anatolii Protsiuk
Deputy Director for Corporate Security – Head of the Information Security and Personal Data Protection Division, Corporate Security Department
JSC Ukrainian Railways (Ukrzaliznytsia)
🇮🇪 Salman Munir
OT Cyber Security Manager
Iarnród Éireann
🇪🇪 Dmitri Ivanov
Chief Information Security Officer
AS Eesti Raudtee / Estonian Railways Ltd
🇬🇧 Mark Robinson
Chief Information Officer
DfT Operator
🇺🇦 Oleksandr Rykovtsev
Director of Corporate Security
JSC Ukrainian Railways (Ukrzaliznytsia)
2027 Sponsors
Sponsors
Sponsors
Exhibitor
Near Capacity for 2027. Register while places remain 📢
Sponsorship | Speaking | Workshops | Attending
Contact: [email protected]
Past Attendees Include 👥
Rail Cybersecurity brings together the organisations that operate, own, engineer, assure and secure railway systems, alongside the specialist technology and cybersecurity companies supporting them.
120–175
delegates per event
300+
organisations represented historically
13th
Annual Rail Cybersecurity Summit in 2027
Rail & Transit Operators / Infrastructure
- Abellio
- ADIF
- Angel Trains
- Arriva
- ARTC
- Austrian Railways
- Bane NOR
- Banedanmark
- BLS
- Calgary Transit
- Central Japan Railway Company
- CFL
- Chiltern Railways
- CN Rail
- Crossrail
- CSX
- DB Cargo
- DB Cargo UK
- DB InfraGO / DB Netz
- DB Regio
- DB Schenker
- DB Systel
- DB Systemtechnik
- Deutsche Bahn
- Direct Rail Services
- East Midlands Railway
- East West Rail
- Eversholt Rail
- Fintraffic
- Flix
- GB Railfreight
- Govia Thameslink Railway
- Great Western Railway
- Heathrow Express
- HS1
- HS2
- Irish Rail / Iarnród Éireann
- Land Transport Authority Singapore
- LNER
- London Northwestern Railway
- Metropolitan Transportation Authority (MTA)
- Metro Service Copenhagen
- Network Rail
- Network Rail Telecom
- Northern
- NS / Dutch Railways
- Porterbrook
- RKH Qitarat
- Rock Rail
- SBB Swiss Federal Railways
- SNCF
- SNCFL
- South Western Railway
- Sporveien
- STIB-MIVB
- Strathclyde Partnership for Transport
- The Copenhagen Metro
- Toronto Transit Commission
- Trafikverket
- TransPennine Express
- Transport for London
- Transport for Wales
- Transport UK Group
- West Midlands Trains
- YPTO
Rolling Stock, Signalling & Rail Technology
- Alstom
- Belden
- CAF
- CAF Signalling
- Camlin Rail
- DeltaRail
- duagon
- Egis Rail
- EKE-Electronics
- ENYSE
- Euro-Multitel
- Frauscher Sensortechnik
- HARTING
- Hitachi Rail
- Hit Rail
- Icomera
- IMH Technologies
- Knorr-Bremse
- Kontron Transportation
- Loram
- Nomad Digital
- OMICRON electronics
- Patentes Talgo
- Perpetuum
- Power Standards Lab
- Resonate Group
- Schweitzer Engineering Laboratories
- Selectron Systems
- Siemens Mobility
- Stadler Rail
- Telent
- Televic Rail
- Thales
- Turntide
- Westermo
Cybersecurity & OT Technology
- 4Secure
- Acalvio Technologies
- aDolus Technology
- Airbus CyberSecurity
- AM Cyber
- Ampere Industrial Security
- Applied Risk
- Auxilium Cyber Security
- Auxilium Pentest Labs
- BlackBerry
- Cervello
- Codewerk
- Comcast DataBee
- Complete Cyber
- Computacenter
- Context Information Security
- Cyber Innovation Hub
- Cyber Shield
- Cyberics
- Cygnia Technologies
- Cylance
- Cylus
- Cyolo
- DigiTribe
- Dragos
- Expandium
- Fortinet
- GDAK Cyber Solution
- Huawei Technologies
- Huld
- Hypasec
- IBM
- iHackLabs
- IL7 Security
- Industrial Defender
- Information Security Forum
- Irdeto Security
- Mandiant
- mnemonic
- Modux
- NCC Group
- Nozomi Networks
- OTORIO
- Palo Alto Networks
- Pen Test Partners
- RazorSecure
- Risk Ledger
- SecurityScorecard
- Shift5
- Stoïk
- WALLIX
- Waterfall Security Solutions
- Xage Security
- XONA Systems
Engineering, Consulting & Assurance
- Abbott Risk Consulting
- Adelard
- Amentum
- Aon
- Arcadis
- Arup
- AtkinsRéalis
- Bird & Bird
- Bureau Veritas
- Deloitte
- DNV
- Egis
- Expleo Group
- Frazer-Nash Consultancy
- HNTB
- Ineco
- NCB Rail Assurance
- Network Certification Body
- PA Consulting
- PROSE
- SYSTRA
- TÜV Rheinland
- VUZ
- WSP
Government, Regulators, Standards & Academia
- British Transport Police
- Cyber Security Agency of Singapore
- Danish Transport and Construction Agency
- Department for Transport
- DfTO
- Eisenbahn-Bundesamt
- ERTMS Users Group
- European Commission – DG CONNECT
- European Commission – DG MOVE
- European Union Agency for Railways
- Finnish Transport and Communications Agency
- Human Environment and Transport Inspectorate
- NCSC
- NCSC Netherlands
- Nuclear Decommissioning Authority
- Office of Rail and Road
- Rail Delivery Group
- Rail Safety and Standards Board
- Shift2Rail Joint Undertaking
- Traficom
- University of Birmingham
- University of Huddersfield
- University of Warwick
Additional Organisations Represented
- Aspen Insurance
- Hiscox
- Honda
- MAPNA
- Mondi Group
- Petroleum Development Oman
- Solventum
Past attendee organisations are shown to demonstrate the breadth of the Rail Cybersecurity community and do not imply participation in the 2027 event. Company names have been consolidated where the same organisation has attended under different subsidiaries or legal entities.
Get in touch
Enquire About Rail Cybersecurity 2027
Register your interest in speaking, sponsorship, exhibition or attending the next Rail Cybersecurity Summit.
Join the Rail Cybersecurity Summit WhatsApp Group
News
