Quantifying OT Cyber Risk in Financial Terms: Executive Action in Critical Energy Infrastructure
About This Session
As energy systems become more distributed, digital and interconnected, operational technology is now central to the resilience of critical infrastructure. Wind, solar, battery storage, grid-connected assets, gas, data centres and other energy environments depend on complex OT ecosystems that were often not designed with today’s cyber risk in mind.
For many operators, the challenge is no longer whether cyber risk exists. The challenge is understanding what is connected, where exposure sits, which risks could affect operations, and how to translate technical findings into decisions that boards, investors, compliance teams and asset managers can act on.
This session will present a practical, vendor-neutral approach to OT cyber risk management across critical energy infrastructure. It will explore how organisations can move from fragmented asset lists and one-off assessments towards continuous visibility, risk prioritisation, compliance evidence and executive reporting.
The presentation will focus on the operational realities of energy infrastructure: distributed sites, mixed vendor environments, limited local cyber expertise, evolving regulation and the need to protect uptime, safety, compliance and business continuity. Rather than focusing on a single technology or product, the session will give attendees a repeatable framework for connecting OT visibility with cyber resilience and business action.
For many operators, the challenge is no longer whether cyber risk exists. The challenge is understanding what is connected, where exposure sits, which risks could affect operations, and how to translate technical findings into decisions that boards, investors, compliance teams and asset managers can act on.
This session will present a practical, vendor-neutral approach to OT cyber risk management across critical energy infrastructure. It will explore how organisations can move from fragmented asset lists and one-off assessments towards continuous visibility, risk prioritisation, compliance evidence and executive reporting.
The presentation will focus on the operational realities of energy infrastructure: distributed sites, mixed vendor environments, limited local cyber expertise, evolving regulation and the need to protect uptime, safety, compliance and business continuity. Rather than focusing on a single technology or product, the session will give attendees a repeatable framework for connecting OT visibility with cyber resilience and business action.
Speaker
Brad Fusilier
Account Director - Centrii
Brad Fusilier helps asset owners, utilities and renewable energy operators turn OT cyber risk into the financial and operational terms that drive decisions. As Account Director at Centrii, he works with organisations protecting critical infrastructure, including battery energy storage (BESS), solar and wind assets.
Brad came to ICS security from the plant floor. He began his career supporting oil and gas assets in the Gulf of Mexico before moving into chemical processing in the industrial catalyst sector. That operational grounding has shaped his cybersecurity work ever since, spanning asset discovery, OT governance, risk and compliance (GRC), and threat hunting.
He has applied the industry's leading risk quantification methods in practice, which gives him a clear view of what they do well and where they struggle to keep pace with evolving OT environments. Brad holds a BS in Industrial Engineering from Louisiana State University and an MBA from Texas A&M University, pairing an engineer's understanding of industrial systems with the commercial lens needed to bring risk data to the boardroom.
Brad came to ICS security from the plant floor. He began his career supporting oil and gas assets in the Gulf of Mexico before moving into chemical processing in the industrial catalyst sector. That operational grounding has shaped his cybersecurity work ever since, spanning asset discovery, OT governance, risk and compliance (GRC), and threat hunting.
He has applied the industry's leading risk quantification methods in practice, which gives him a clear view of what they do well and where they struggle to keep pace with evolving OT environments. Brad holds a BS in Industrial Engineering from Louisiana State University and an MBA from Texas A&M University, pairing an engineer's understanding of industrial systems with the commercial lens needed to bring risk data to the boardroom.