Programme Draft
Subject to Change
To be considered contact marketing@cybersenate.com
On mobile: swipe left/right to view concurrent sessions
Day One March 10th 2026
| Time | Strategy Theatre | Tech Breakout |
|---|---|---|
| 8:00 | Registration | No Sessions |
| 8:45 | Welcome from Cyber Senate Jamison Nesbitt | Introduction to Chairman Kevin Wood, Thales | No Session |
| 9:00 | Rail in the Grey War Jeanette Van Halteren, Managing Consultant, Thales | No Session |
| 9:45 | From CyberResilient to Antifragile. How Railway CISOs Can Orchestrate Complexity. Dimitri van Zantvliet, Directeur Cybersecurity / CISO, Dutch Railway | Nederlandse Spoorwegen | AI in Rail OT Security: Risks, Opportunities, and the Path Forward Miki Shifman, CTO and Co-Founder, Cylus |
| 10:15 | Building Resilient Rail Systems: Leveraging Reference Architecture and IEC 63452 for Cybersecurity Christian Juel-Jensen, Head of Security Engineering and Advisory, Bane NOR & Geir Reset Simonsen, Chief Security Architect, Bane NOR | OT Intrusion Detection Systems – The Journey and Lessons Learnt Petros Tsekouras, Cyber Security Advisory Lead, Transport for London |
| 10:45 | Networking Break (One Hour) | |
| 11:45 | Building a Cyber Risk Assessment Tool for Rail OT Arinder Badyal, Head of Information Security, Transport UK Group & Liam Sterling, Head of Information Technology, Angel Trains | Bridging IT and OT: Governance and Cybersecurity in a Secure by Design Framework Gertjan Tamis, Enterprise Architect Cybersecurity, NS / Dutch Railways |
| 12:15 | Digital Risk Assessment in the Engineering Change Process James Woodhouse, Digital Systems Engineer, Angel Trains & Darren Fitzgerald, Chartered Engineer, RSSB | Supplier Management Working Group Discussion Invite only for suppliers. Contact marketing@cybersenate.com |
| 12:45 | Inside the Threat: Human Risk, Ransomware, and Intelligence Phil Butterworth, Fraud & Investigations Lead, TransPennine Express | Supplier Management Working Group Discussion Invite only for suppliers. Contact marketing@cybersenate.com |
| 13:15 | Networking Lunch | |
| 14:15 | Cyber-Hardening Legacy Signalling & Interlocking Systems: Lessons from Live Rail Projects Francisco Lozano Ovejero, Head of R&D, Enyse | Beyond the Mirror: Achieving Total Onboard Visibility Alex Cowan, CEO, RazorSecure |
| 14:45 | Safe Tracks Ahead: 5 years on, rolling stock design evolution Bruno Corasolla, Global Head of Digital Train | LoB Vehicles, Hitachi Rail | Securing Multifunction Vehicle Bus (MVB) Jyrki Keurulainen, CTO, EKE-Electronics Ltd. |
| 15:15 | Networking Break | |
| 15:45 | The Cyber Resilience Act (CRA): Status, Scope, and Open Questions Eddy Thesee, Vice President Products Cybersecurity, Alstom | Technical session available. Contact marketing@cybersenate.com |
| 16:15 | Raising the Bar: Defining “Good” Cyber Assurance in Rail OT – From Compliance to Confidence – Darin Gray, Principal Assurance Engineer (System Safety & Cyber Security), NCB Assurance | Technical session available. Contact marketing@cybersenate.com |
| 16:45 | Collaborative Research to Improve Rolling Stock Cyber Resilience George Bearfield, Visiting Professor of Railway System Safety, University of Huddersfield |
Technical session available. Contact marketing@cybersenate.com |
| 17:15 | End of Day One | |
Day Two March 11th 2026
On mobile: swipe left/right to view concurrent sessions
| Time | Strategy Theatre | Tech Breakout |
|---|---|---|
| 8:00 | Registration | No Sessions |
| 8:45 | Welcome Back from Jamison Nesbitt, Director Cyber Senate and Kevin Wood, Cyber Design Authority, Thales | Closed |
| 9:00 | TABLE TOP PANEL EXERCISE: Incident Response Under Pressure, expert insight. Incident Response Under Pressure explores how legacy and safety critical organisations make critical response and recovery decisions when operational disruption escalates before the cause is clear. Through a moderated, scenario-led discussion, the panel examines where cybersecurity and OT frameworks meet real-world safety and operational constraints. Drawing on rail and nuclear sectors for cross sector learning, the session focuses on practical decision-making, assurance, and return-to-service under pressure. Kenny Holmes, Head of Group Cyber Operations, Nuclear Decommissioning Authority Lu Wang, Group SOC Engineering Manager, Nuclear Decommissioning Authority Joseph Mager, Information Security Officer, Nederlandse Spoorwegen | Beyond Safety: Addressing the Security Gap in Railway Software Standards Lucia Capogna, Cybersecurity and Software Assurance Team Leader, Visiting Professor in Cybersecurity and Operational Technology, Systra |
| 9:45 | Using an AI Toolset to Verify and Assess Cybersecurity Cases Against IEC 63452 Dr Howard Parkinson, Research Fellow, University of Huddersfield | Securing the Rail Supply Chain in Practice: What Actually Works, Jay Moloo, Cyber Security, IT, Consultancy, IT Risk Management, former DB Schenker |
| 10:15 | Cyber Risk or Safety Risk? A Multidisciplinary Approach Jon Torode, Head of Engineering and Asset Performance, RKH Qitarat |
NIS2 Oversight & Supervision A practical exchange on how rail authorities and operators are implementing NIS2 in the real world. The session explores supervisory approaches, legacy challenges, and how modernisation programmes such as ERTMS upgrades can be used to embed cybersecurity without adding cost or complexity. Participants will compare national experiences and identify workable, cross-border solutions. Anika Vonk – Senior Cybersecurity Inspector, Ministry of Infrastructure |
| 10:45 | Networking Break | |
| 11:45 | Roundtables
|
Closed during Roundtables |
| 12:45 | Roundtable Outcomes | Closed during Roundtables |
| 13:10 | Networking Lunch | |
| 14:15 |
A live, progressive cyber incident exercise A live, progressive cyber incident exercise that shows how to build resilience that helps people respond better, simply by having experienced it before. |
Dave Hallway, Managing Director, GDAK Cyber Solution Ltd Josh Tucker, Cyber Incident Exercising Team Lead, GDAK Cyber Solution Ltd |
| 15:15 | Networking Break | |
| 15:50 | End of Day Two | |
Speakers Corner
Amin Ben Karroum | Information Security Architect | Sporveien
From multiple ISMS (chaos) to one ISMS (tranquility)presented by Amin Ben Karroum Information Security Architect Sporveien
