Andrew Carney
Program Manager - DARPA
Carney is program manager for the DARPA AI Cyber Challenge. He is also a program manager at ARPA-H where he leads programs and projects to improve health cybersecurity. He was previously a principal researcher in HSBC’s Cybersecurity Science and Analytics group. Before that, he was a technical advisor and contractor at DARPA, supporting reverse engineering, program analysis, human-machine teaming, and automated program repair research. He has long been involved in competitive hacking (Capture the Flag, or CTF) as both a player and a competition organizer. Carney has over 15 years of experience in software & hardware vulnerability research and technical education & training. He holds a master’s degree in computer science from The Johns Hopkins University.
Sessions
-
Automated Cyber Defense for Critical Infrastructure: Lessons from DARPA’s AI Cyber ChallengeWednesday, October 29, 2025
11:05 AM - 11:35 AM
Blake Gilson
OT Cyber Security and Risk Manager - ExxonMobil
Blake Gilson serves as Operational Technology Cyber Security and Risk Manager at ExxonMobil, where he plays a key role in shaping and implementing the IT department's OT cybersecurity strategy. Blake earned a BA in Business Management Information Systems from the University of Houston, is an alumnus of the Department of Energy's OT Defender Program, and is an avid collector of GIAC certifications.
Sessions
-
Tug-of-War in OT Security: Balancing Operations, Cybersecurity, and ComplianceWednesday, October 29, 2025
9:00 AM - 9:40 AM
Brad Nash
OTCRM SOC Supervisor - ExxonMobil
-
Sessions
-
Navigating Complexities in Global Oil and Gas Projects: A Fireside Chat on ICS SecurityTuesday, October 28, 2025
10:45 AM - 11:30 AM -
Harmonizing Cyber Security Across Diverse Business Lines: The Role of the SOCThursday, October 30, 2025
10:20 AM - 11:00 AM
Brian Schleifer
Southeast Regional System Security Engineer & Cybersecurity SME - Modern Technology Solutions Inc (MTSI)
Strategic cybersecurity executive with 24+ years of progressive global leadership in governance, risk management, compliance, training, and business development across defense and commercial sectors. Pursuing a Doctorate of Technology through Purdue University with an emphasis on embedded systems. His hobbies include wrangling his five children and two dogs, as well as his YouTube Channel and Podcast, "People Add Value Experience," where he discusses entrepreneurship and shares life experiences with interesting people.
Sessions
-
Panel: OT Security Successes, Failures, and the Road AheadTuesday, October 28, 2025
9:00 AM - 9:45 AM -
Training: Cyber Attack Methods for Cyber-Physical Systems (Day 1)Tuesday, October 28, 2025
9:00 AM - 5:00 PM -
How to Assess Risk for AI in Embedded Systems and Cloud EnvironmentsWednesday, October 29, 2025
9:00 AM - 9:40 AM -
Training: Cyber Attack Methods for Cyber-Physical Systems (Day 2)Wednesday, October 29, 2025
9:00 AM - 12:30 PM
Chris Wiwczaroski
Enterprise Architect - OT Infrastructure - Metropolitan St. Louis Sewer District
Chris Wiwczaroski is an Enterprise Architect - OT Infrastructure at Metropolitan St. Louis Sewer District (MSD). He is an experienced application engineer with a demonstrated history of working in the industrial automation, water and wastewater, information technology and associated services industries. He is a skilled engineering professional with strength in process control, SCADA, DCS, analytics, OT Cybersecurity and operations management.
Sessions
-
Panel: OT Security Successes, Failures, and the Road AheadTuesday, October 28, 2025
9:00 AM - 9:45 AM
Clint Bodungen
Director, AI/ML Engineering - MorganFranklin Cyber
Clint Bodungen is a globally recognized ICS cybersecurity professional and thought leader with 30+ years of experience (focusing primarily on industrial cybersecurity, red teaming, and risk assessment), and has also worked in game development and AI for 10+years. He is the author of two best-selling books, "Hacking Exposed: Industrial Control Systems" and “ChatGPT for Cybersecurity Cookbook.” He is a United States Air Force veteran and has worked for notable cybersecurity firms like Symantec, Booz Allen Hamilton, and Kaspersky Lab, and is currently the Founder/Head of Product Innovation at ThreatGEN as well as the Director of AI/ML Engineering at MorganFranklin Cyber. Renowned for his creative approach to cybersecurity education and training, Clint has been at the forefront of integrating gamification and AI applications into cybersecurity training. He created “ThreatGEN® Red vs. Blue”, the world's first online multiplayer computer designed to teach real-world cybersecurity and “AutoTableTop”, which uses the latest generative AI technology to automate, simplify, and enhance IR tabletop exercises. As AI technology continues to evolve, he hopes to help revolutionize the cybersecurity industry using gamification and generative AI.
Sessions
-
ICS/OT Cybersecurity Incident Preparedness & Response WorkshopMonday, October 27, 2025
9:00 AM - 4:55 PM -
Secure AI Adoption Framework for ICS/OTWednesday, October 29, 2025
2:05 PM - 2:45 PM -
Project DARWIN - Can Bio-Evolution Solve OT Cybersecurity?Thursday, October 30, 2025
9:00 AM - 9:45 AM
Jeevan Sakti
ICS Cybersecurity Program Manager - ExxonMobil
Jeevan Sakti is industrial cybersecurity program leader at ExxonMobil. He has over a decade of experience that includes guiding cybersecurity strategy and execution for international sites across five continents. He initially joined ExxonMobil in hands-on roles and have earned several promotions to leadership in its Industrial Control Systems organization including running a global cyber program covering 30 countries. He holds multiple certifications - CISSP, CISM, CISA, GICSP, GRID, CCDP, CCNA, CCNP - and additional training.
Sessions
-
Cybersecurity Implementation for Major Industrial Capital ProjectsWednesday, October 29, 2025
11:05 AM - 11:35 AM
Jon "McFly" McEllroy
Offensive/Defensive Cyber Engineering Team Lead - Modern Technology Solutions, Inc. (MTSI)
Jon "McFly" McEllroy is a retired US Naval Officer of 22 years serving as a carrier jet Naval Aviator, test pilot, acquisition professional, and hands-on Cyber SME for aircraft, ships, and weapons. He has a BS in Computer Science, a Masters in Aeronautical Engineering, and has extensive experience in as well as teaching software reverse engineering, vulnerability research, exploit development, and software defined radio. Currently he leads the Offensive/Defensive team in MTSI's Weapon System Cybersecurity (WSC) group and he is a Tech Fellow at MTSI for adversarial test of cyber physical systems.
Sessions
-
Training: Cyberattack Methods for Cyber-Physical Systems (Day 3)Thursday, October 30, 2025
9:00 AM - 12:35 PM
Liliane Scarpari
Security Technical Specialist - Microsoft
Liliane Scarpari is a Sr. Technical Specialist with deep expertise in cybersecurity for critical infrastructure. She focuses on the intersection of AI, industrial systems, and threat resilience. With a background in cyber security and a passion for secure innovation, Liliane helps organizations navigate the evolving risks of digital transformation. She recently presented at the https://smartgridobserver.com/ICS-Cybersecurity/agenda.htm, where she shared insights on the role of agentic AI as a new “untrusted component” in ICS environments.
Sessions
-
Untrusted by Design: Agentic AI in Industrial Control SystemsWednesday, October 29, 2025
11:40 AM - 12:15 PM
Melanie Hutcheson
Lead Associate - Booz Allen
Melanie is a is a cyber transformation lead at Booz Allen with specializations in governance, strategic digital and cybersecurity transformations, change management, senior and executive stakeholder engagements, executive meeting facilitation, and strategy implementation. Melanie has led large cyber transformation efforts and change initiatives across multiple business markets at Fortune 500 companies, to include manufacturing, energy, healthcare, defense, and various government agencies. Melanie holds a MBA from Old Dominion University; Change Management Advanced Practitioner Certification from Georgetown, and is a certified PMP, and Scrum Master.
Sessions
-
Maturing OT Cyber Programs: From Static Defense to Strategic AdvantageTuesday, October 28, 2025
2:20 PM - 2:55 PM
Mike Holcomb
Director - ICS/OT Cyber Security - Fluor Corporation
Mike Holcomb is the Fellow of Cybersecurity and the ICS/OT Cybersecurity Global Lead for Fluor, one of the largest global engineering, procurement, and construction companies. His current role provides him with the opportunity to work in securing some of the world’s largest ICS/OT environments, from power plants and commuter rail to manufacturing facilities and refineries. He has his Masters degree in ICS/OT cybersecurity from the SANS Technology Institute. You can find his free educational content on ICS/OT cyber security on LinkedIn (linkedin.com/in/mikeholcomb), YouTube (youtube.com/@utilsec) and mikeholcomb.com.
Sessions
-
Closing the Gaps: No More Easy TargetsTuesday, October 28, 2025
11:30 AM - 12:15 PM -
Workshop: Introduction to OT/ICS Penetration Testing (9AM – 3PM)Thursday, October 30, 2025
9:00 AM - 2:55 PM
Sanjay Kumar
Threat Intelligence Manager - Landis+Gyr
Sanjay Kumar is a Threat Intelligence Manager at Landis+Gyr and a PhD researcher in Cybersecurity and Networking at the University of Jyväskylä Finland, specializing in hybrid machine learning–based threat detection. He has over a decade of global experience in threat intelligence, detection engineering, and adversary tracking, having worked at several international organizations, and he currently serves as Chair of IEEE Finland Young Professionals. Sanjay is an active speaker at international cybersecurity conferences and has earned numerous awards recognizing his contributions to the field.
Sessions
-
From Spam to Shutdown: Ransomware’s Social Engineering Path into OTWednesday, October 29, 2025
10:20 AM - 10:50 AM
Vivek Ponnada
SVP Growth & Strategy - Frenos
Vivek Ponnada is an OT Security practitioner with global experience and is SVP of Growth & Strategy at Frenos. Having started his career in ICS as a Technician, Vivek became a Controls Engineer and commissioned Gas Turbines in Europe, Middle-East, Africa and South-East Asia. Post MBA, Vivek held multiple roles including Sales, Marketing & Business Development and Services covering ICS and OT Security solutions for Critical Infrastructure industries at GE, XenonCyber Dynamics and Nozomi Networks. Vivek has a C.Eng from I.E. India, MBA from UT Austin, and ISA/IEC 62443 Cybersecurity Expert & GICSP certifications. He is a co-lead for the Top 20 Secure PLC Coding Practices Project, member of the ISA, ISACA, Public Safety Canada ICS Security Symposium Advisory Committee and is a CS2AI Fellow.
Sessions
-
Failure to Accelerate - How to Re-ignite the Spark to Sustain OT Security ProgramsTuesday, October 28, 2025
9:45 AM - 10:30 AM
Adam Maruyama
Field CTO, Digital Transformation & AI - Everfox
Adam Maruyama is the Field CTO for Digital Transformation and AI at Everfox. He advises strategy around countering emerging threats like adversarial AI and advises customers on using trusted, high-assurance solutions to securely adopt the latest technologies, including AI, into their environment. Before his time in the private sector, Adam served over 15 years as a US intelligence officer supporting cyber and counterterrorism operations and co-led drafting the 2018 National Strategy for Counterterrorism. Adam has also served commercial and government customers at McKinsey & Company and Palo Alto Networks. Adam has been published extensively in AI, cybersecurity, and policy publications.
Sessions
-
Protecting Critical Infrastructure with the Rigor of Classified NetworksTuesday, October 28, 2025
3:00 PM - 3:30 PM
Ahmik Hindman
Sr. Network & Security Solution Consultant - Rockwell Automation
Ahmik Hindman is a Senior Network & Solution Consultant with over 27 years focused on industrial control systems, last 5 years for used on IACS networks and cybersecurity. Ahmik holds a B.S. EE, MBA-IT and the following certifications: CISSP, CCSP, CCNA, Security+, NSE 3, ISA/IEC 62443 Cybersecurity Fundamentals Specialist (ISA/CFS), ISA/IEC 62443 Cybersecurity Risk Assessment Specialist (ISA/CRS) and ISA/IEC 62443 Cybersecurity Design Specialist (ISA/CDS).
Sessions
-
[Launchpad] Securing OT/ICS: Implementing CISA’s Secure by Demand PrinciplesMonday, October 27, 2025
11:30 AM - 12:15 PM
Anna Raymaker
Ph.D. Student in Electrical and Computer Engineering - Georgia Institute of Technology
Alumnus of the University of Florida with a degree in Computer Engineering from the HWCOE. Ph.D. student at the Georgia Institute of Technology in the Department of Electrical and Computer Engineering, advised by Professor Saman Zonouz. My research interests include cyber-physical systems security, network security, and usable security.
Sessions
-
From Ship to Shore: Real-World Threats and Zero-Day Attacks in Maritime Operational TechnologyWednesday, October 29, 2025
1:30 PM - 2:00 PM
Ben Callaway
Regional Sales Director - Nozomi Networks
Ben Callaway has 15+ years of experience in Industrial Control Systems (6+ years in OT Security). He currently serves customers in the Mid-Atlantic and Southeastern US for Nozomi Networks with market-leading OT and IoT Security & Visibility solutions. Having started his career in ICS in Instrumentation and software sales for Emerson, he spent over a decade on plant floors across all industrial verticals. Over his career, Ben has held multiple roles including Sales, Marketing & Business Development and Services covering Control systems & Cybersecurity solutions for Critical Infrastructure (Power, Oil & Gas, Water, Mining). Ben has a Bachelor’s Degree in Economics from The University of Georgia.
Sessions
-
Securing the Unseen: Transforming OT/IoT Risk Management with Nozomi NetworksTuesday, October 28, 2025
12:30 PM - 1:15 PM
Benjamin Stirling
Director Cybersecurity & Operational Technology - Jacobs
Ben has over 15 years of experience in the Power, Oil & Gas, and Industrial sectors. As a thought leader in securing industrial environments, Ben works with end users and OEMs to develop technology stacks and secure architectures. He has a passion for control systems and securing the world’s infrastructure combined with deep knowledge of NERC CIP, NIST, ITIL, ISA 99/IEC 62443, and MITRE ATT&CK for ICS. He has a long-established track record of working with industry to recognize and ameliorate cybersecurity risks to infrastructure and human safety.
Sessions
-
Panel: OT Security Successes, Failures, and the Road AheadTuesday, October 28, 2025
9:00 AM - 9:45 AM
Brad Tenenholtz
Product Security Officer - Becton Dickenson
Brad Tenenholtz leads security for FDA-approved medical devices and AI products at BD, where he protects critical healthcare infrastructure from nation-state threats. His recent writing on cyber sovereignty examines how industrial defenders can coordinate against sophisticated adversaries. Previously built security programs protecting critical infrastructure across multiple sectors. Holds MS in Cybersecurity from Indiana University and CISSP certification.
Sessions
-
Breaking the Kill Chain: How Industrial Sectors Can Coordinate to Deny Nation-State InfrastructureThursday, October 30, 2025
9:00 AM - 9:30 AM
Brian Deken
Sales Director, Industrial Cybersecurity - Rockwell Automation
Brian Deken is the Sales Director of Industrial Cybersecurity at Rockwell Automation, and has worked in automation for over 20 years in various roles involving sales, business development, business strategy, and professional services. Brian is a passionate customer advocate, focused on tangible results. His role today is responsible for evolving risk management and OT security solutions while working across a broad range of internal, partner, and customer stakeholders to deliver cybersecurity outcomes based on standards and best practices.
Sessions
-
Rethinking Cybersecurity with an OT-First ApproachTuesday, October 28, 2025
11:30 AM - 12:00 PM
Carlos Sanchez
Director, OT Systems Engineering Specialist - Fortinet
Carlos-Raul Sanchez is a technologist with 32 years of experience in network, telecommunications, and critical infrastructure security. Carlos specializes in simplifying complex business problems with a pragmatic application of technology. With master’s degrees in computer science, business administration, and a wide range of experience ranging from US Air Force, DOD contractor, and O&G IT security, he is known for securing critical infrastructure worldwide. He spent 15 years leading teams securing oil fields in the United States and offshore assets in the Gulf of Mexico, Western Africa, Brazil, and South China Sea. Now with Fortinet, he is the senior director of operational technology, providing solutions and education to companies seeking to improve their critical infrastructure security posture.
Sessions
-
Harnessing AI to Defend and Transform Critical Infrastructure CybersecurityTuesday, October 28, 2025
1:30 PM - 2:15 PM
Chris Grove
Director of Cybersecurity Strategy at Nozomi Networks - Chris Grove
Chris brings more than 25 years of cybersecurity experience with deep knowledge of IT, OT and IoT networks and mission-critical infrastructure. His prior experience includes managing large, critical and complex security projects around the world for customers of leading IT and OT security vendors. Security executives turn to Chris for his expertise in almost every sector including commercial, government, defense, law enforcement, and the intelligence community.
Sessions
-
Securing the Unseen: AI-Driven OT/IoT Risk ManagementWednesday, October 29, 2025
3:35 PM - 4:05 PM
Christopher Walcutt
Chief Security Officer - DirectDefense
Christopher Walcutt is a former network architect with 25 years of experience in security, risk, and compliance leadership. His expertise is predominantly in the energy, utility, smart grid, and manufacturing sectors, specializing in industrial controls architecture, management consulting, and breach and incident handling. He has provided services to a wide variety of enterprise clients, including some of the world’s largest energy, engineering, manufacturing, and water companies, and has advised CISO’s offices and Boards of Directors globally. Chris served in leadership roles at Constellation Energy, SunGard, and Black & Veatch, where he was responsible for cybersecurity and management consulting for NERC CIP, NRC, smart grid, and NIST compliance.
Sessions
-
Control Systems Under Pressure: Strategies for Running Effective OT Tabletop ExercisesThursday, October 30, 2025
11:50 AM - 12:20 PM
Dave Smit
OT Infrastructure and Security, Interstates - Interstates
David Smit is an operational technology architect at Interstates. Smit specializes in network design and troubleshooting, firewalls, Linux operating systems, containers/edge computing and security tools. Smit is deeply committed to helping clients transform their network infrastructure and fortify their security measures. He has extensive experience in manufacturing environments and has led projects such as the Global Firewall Rule Compliance Review and implementing IEC 62443 Zones & Conduits work. Smit’s expertise enhances network security, optimizes performance and mitigates risks globally.
Sessions
-
Something’s in the Air: Uncovering Hidden Wireless Threats in OT/IoTThursday, October 30, 2025
9:45 AM - 10:15 AM
David Formby
CEO/CTO - Fortiphyd Logic Inc
David Formby is CEO/CTO and co-founder of Fortiphyd Logic. He received his Ph.D. from the Georgia Institute of Technology where he focused on developing novel attacks and defenses for industrial control system networks and PLCs. Formby now leads Fortiphyd Logic in developing innovative solutions for industrial cybersecurity training and PLC endpoint detection. He is a member of the ISA and the Top 20 Secure PLC Coding Practices community.
Sessions
-
Applied ICS Security Training LabMonday, October 27, 2025
9:00 AM - 4:55 PM -
Faster, Lighter, and more Vulnerable than Ever: Modern OT Labs with GRFICSv3Tuesday, October 28, 2025
3:45 PM - 4:20 PM
David Mazary
CTO - Corsha
David Mazary serves as our Chief Technology Officer at Corsha. With a decade of experience crafting mission-critical systems for defense customers, David is a seasoned professional in the field. Before joining Corsha in 2018, he had an extensive and impactful tenure at General Dynamics Mission Systems.
Sessions
-
AI You Can Touch: Securing the Hidden Power of Physical AIWednesday, October 29, 2025
9:45 AM - 10:15 AM
Debbie Lay
Principal Solutions Engineer - TXOne Networks
Debbie Lay is a Senior Solutions Architect at TXOne Networks, a global leader in OT/ICS security. With her vast experience as a network security engineer for organizations in various industries, Debbie is focused on all aspects of solution design, deployment, and implementation of cybersecurity strategies for operational efficiency and secure processing. Debbie has over 25 years of security experience representing security companies from firewalls/vpn, Data Governance Solutions and Endpoint Security companies.
Sessions
-
[Launchpad] Answer the ICS Security Wake-up Call: It’s Time to Stop Fixing OT Problems with IT ToolsMonday, October 27, 2025
9:00 AM - 9:45 AM
Debbie Lay
Principal Solutions Engineer - TXOne Networks
Debbie Lay is a Principal Solutions Engineer at TXOne Networks, a global leader in OT/ICS security. With over 25 years of experience as a network security engineer for various industries, Debbie focuses on all aspects of cybersecurity strategies for operational efficiency and secure processing, including solution design, deployment, and implementation.
Sessions
-
Visibility Is a Good Starting Point, But What Are the Crucial Next Steps for OT Protection?Wednesday, October 29, 2025
12:30 PM - 1:15 PM
Dusty Courtney
Industrial Cybersecurity Engineer - ExxonMobil
Dusty Courtney is an Industrial Cybersecurity Engineer at ExxonMobil with 20+ years of experience in radio systems, military intelligence and downstream industrial control systems. In his current role, he focuses on OT threat intelligence, ICS incident response and cyber investigations. He specializes in ICS cybersecurity, system migrations, and team leadership. Dusty holds multiple GIAC certifications and brings deep expertise in securing industrial environments.
Sessions
-
Navigating Complexities in Global Oil and Gas Projects: A Fireside Chat on ICS SecurityTuesday, October 28, 2025
10:45 AM - 11:30 AM
Glen Combe
OT Specialist Systems Engineer - Fortinet
Glen Combe has 26 years of experience in IT and OT operations and has dedicated his career to architecting and implementing secure cybersecurity solutions for operational technology environments. His passion lies in building and optimizing cybersecurity frameworks that align with business objectives while protecting critical infrastructure. Glen specializes in evaluating IT/OT systems, identifying vulnerabilities, and applying tailored security controls to mitigate risks. At Fortinet, he brings deep expertise in industrial cybersecurity, IT/OT convergence, and risk management to drive resilient and future-proofed security solutions.
Sessions
-
Secure Remote Access for Operational TechnologyTuesday, October 28, 2025
2:20 PM - 2:50 PM -
From Implied Trust to Zero Trust for Operational TechnologyWednesday, October 29, 2025
11:40 AM - 12:10 PM -
Solutions Theater: Using the Right Signals to Protect and Manage OT Network TrafficThursday, October 30, 2025
11:15 AM - 11:45 AM
Greg Houser
Senior Cybersecurity Engineer - exida
Greg is a Senior Cybersecurity Engineer with exida. With over 20 years of experience, Greg has worked in both IT and OT environments, for clients in government, commercial, and industrial sectors. During his career, Greg has had the opportunity to work as an accreditor, cybersecurity tester, security architect, integrator, and administrator, and brings these unique experiences and viewpoints to his approach to cybersecurity.
Sessions
-
Supply Chain Risks: When The Vendors Are an Attack VectorTuesday, October 28, 2025
4:20 PM - 5:00 PM
Harminder Singh
Industrial Cybersecurity Consultant - Valmet Inc./Industrial Applications Consulting
Harminder has vast experience in industrial process control and cybersecurity. He has worked in ICS system architecture, engineering, third-party systems integration, and cybersecurity in the generation side of the energy sector. He has worked in product and application development in the process control field. And has developed a cybersecurity risk management program for one of the ICS. He is highly experienced in endpoint security control. His standards expertise includes ISA/IEC 62443 and NERC-CIP standards. Harminder has several cybersecurity certifications including GICSP and ISA/IEC 62443 Expert.
Sessions
-
[Launchpad] Integrating IT and OT: Designing a Secure ICS ArchitectureMonday, October 27, 2025
9:45 AM - 10:30 AM
Hien Nguyen
Chief Engineer - Booz Allen Hamilton
Hien Nguyen is the Innovation Lead for the Global Commercial OT Cybersecurity team, where he leads a cross-functional group of cybersecurity professionals and OT engineers. His team's mission is to scout, evaluate, and integrate emerging solutions for Fortune 500 clients across five pillars pertaining to OT Cybersecurity: assessments; architecture & engineering design; implementation & mitigation; managed threat detection and response; and transformation. Based in Chantilly, his team utilizes OT Innovation Hub as a proving ground for rapidly prototyping client solutions, delivering hands-on training for IT and OT teams, and evaluating, piloting, and selecting technologies that fit each client’s goals.
Sessions
-
From Tabletop to Practical Preparation: Advance OT Cyber Response Readiness with Live-Fire ExercisesWednesday, October 29, 2025
2:50 PM - 3:20 PM -
Practical Guidance for Modernizing OT Infrastructure to Enable Secure Smart ManufacturingThursday, October 30, 2025
1:30 PM - 2:00 PM
Jason Silva
Principal, Sales - Software Defined Automation
Jason Silva helps manufacturers navigate the intersection of automation, cybersecurity, and digital transformation. At Software Defined Automation (SDA), he works with global industrial leaders to modernize how they manage and secure industrial controllers through cloud-based DevOps practices. With over two decades in industrial software and leadership roles, Jason has guided digital transformation initiatives that bridge engineering and IT disciplines. Prior to joining SDA, he spent eight years with Hexagon Manufacturing Intelligence, helping manufacturers integrate smart-factory technologies to enhance quality, efficiency, and security. He began his career at PTC, where he developed a deep understanding of enterprise software deployment in complex industrial environments.
Sessions
-
Securing the Future of Industrial Operations: The Evolving Role of OT Backups in Cyber ResilienceWednesday, October 29, 2025
2:50 PM - 3:20 PM
Jason Thompson
OT Cybersecurity Engineering - ExxonMobil
Jason has spent the majority of his 20 year career with ExxonMobil in Infrastructure Operations and he has spent the last year leading the OT Cybersecurity Engineering team.
Sessions
-
Navigating Complexities in Global Oil and Gas Projects: A Fireside Chat on ICS SecurityTuesday, October 28, 2025
10:45 AM - 11:30 AM
Jerome Farquharson
Managing Director - MorganFranklin Cyber
Dr. Jerome Farquharson is a visionary Executive and Managing Director with a proven track record of driving business growth, improving profitability, and mitigating risks for Fortune 500 companies in the power, oil, and gas sector. With over 25 years of experience in cybersecurity, regulatory compliance, risk management, infrastructure protection, and strategic business advisory, he brings a unique blend of technical and consulting expertise to navigate complex cybersecurity landscapes. As a renowned thought leader in cybersecurity and compliance, he has developed and implemented comprehensive security frameworks in the IT/OT infrastructure, including security by design and quantitative cyber risk modeling, resulting in significant reductions in security incidents and costs.
Sessions
-
Embedding Cyber Resilience: A Security-by-Design Blueprint for Critical Infrastructure SystemsThursday, October 30, 2025
12:30 PM - 1:15 PM
Jey Krishnan Pandurengan
EMS Principal Process Control Engineer - Smurfit Westrock
Jey brings 24 years of experience in process control, Industrial Control Systems (ICS), Networking, and protocols, with a strong background in the energy, paper, and automation industries. He has in-depth expertise in energy and pulp & paper process control and has worked extensively on DCS (ICS) system architecture design, application engineering, and networking, particularly in the OT domain. His technical proficiency includes working with protocols such as Profibus, Modbus/TCP, EtherNet/IP, and OPC.
Sessions
-
[Launchpad] Integrating IT and OT: Designing a Secure ICS ArchitectureMonday, October 27, 2025
9:45 AM - 10:30 AM
Joe Cody
Director, OT Cybersecurity and Network Services - EIS Cyber
Joe leads the cybersecurity team at EIS Cyber, a division of Enhanced Information Solutions. Joe has nearly 30 years of experience in IT, OT, process control, automation, and associated fields. Joe is a graduate of the US Navy's Nuclear Propulsion Program and holds both a BS and MS from Purdue University along with multiple industry certifications
Sessions
-
Defining, Refining, and Automating Your OT Cyber ProcessesTuesday, October 28, 2025
3:00 PM - 3:30 PM
John Cusimano
Chief Security Officer (CSO) - Armexa, LLC
John Cusimano is a seasoned OT cybersecurity business and thought leader, with over 30 years of expertise in process control, functional safety, and operational technology (OT) and industrial control systems (ICS) cybersecurity. He is a pioneer in the development of the Cyber HAZOP methodology, has led countless OT cybersecurity risk assessments, and played a pivotal role in establishing OT cybersecurity programs for numerous companies. As a prominent member of the ISA 99 cybersecurity standards committee, he chaired the subcommittee responsible for crafting the ISA/IEC 62443-3-2:2020 standard and developed multiple training courses on OT cybersecurity.
Sessions
-
Packaged Control Systems – The Achilles Heel of Most OT Cybersecurity ProgramsThursday, October 30, 2025
10:20 AM - 11:00 AM
John Filitz
Cybersecurity Product Marketing Manager for Industrial IoT - Cisco
John Filitz is Cybersecurity Product Marketing Manager for Industrial IoT at Cisco, where he focuses on GTM strategy development and execution for Cisco’s security enabled industrial networking infrastructure and solutions. With an early career in policy research across sectors like manufacturing, mining, upstream oil & gas, utilities, and transportation, he transitioned to enterprise IT and cybersecurity, working for a Cisco partner and multiple cybersecurity startups. He holds a MSc in Computer Science – Information Assurance from Regis University, USA, and a MA in Development Studies from the University of KwaZulu-Natal, South Africa.
Sessions
-
Defend Your Industrial Network: The Zero-Trust Blueprint You NeedTuesday, October 28, 2025
1:30 PM - 2:15 PM
John Newsome
Partner Services Offering Architect - Claroty
John is a 30-year industry veteran in IT and Cybersecurity and has worked for some of the most recognizable brands in Cybersecurity such as Palo Alto Networks, Cisco Systems. Blue Coat (now Symantec) and Websense (now Forcepoint). John has been a guest speaker and panelist at numerous industry events and tradeshows and has served as a subject matter expert in advanced threat detection and remediation techniques.
Sessions
-
Taking Back Control: Centralizing Remote Access to ICSWednesday, October 29, 2025
2:05 PM - 2:45 PM
Kareem Sykes
Director, Industry and Engagement, Ecclalon - Eccalon
Kareem A. Sykes is the Director of Industry & Engagement for Project Spectrum, a U.S. Department of Defense-recognized cybersecurity initiative that equips small and mid-sized businesses with tools and training to navigate CMMC compliance and industrial cyber risk. An ITIL v4-certified leader with over 15 years of program and stakeholder management experience, he oversees national outreach efforts to strengthen cybersecurity readiness across the Defense Industrial Base. Kareem is known for his strategic engagement with manufacturers, APEX Accelerators, SMBs, and innovation ecosystems to safeguard operational technology and sensitive data. He holds degrees from the University of Baltimore and is widely recognized as an authoritatively impactful voice in securing America’s supply chain.
Sessions
-
Defending Industrial Innovation: CMMC Resources for America’s Manufacturing BackboneWednesday, October 29, 2025
4:10 PM - 4:45 PM
Keith Casey
Cybersecurity & Identity Strategist, Product Marketing - Keystrike
Keith “Danger” Casey currently serves on the Product Team at Keystrike helping organizations secure their IT and OT networks from today's sophisticated attackers. Previously, he served on the Product Teams at Pangea launching AuthN and AuthZ products, ngrok launching GTM efforts, Okta working on Identity and Authentication APIs, as an early Developer Evangelist at Twilio, and answering the Ultimate Geek Question at the Library of Congress. His underlying goal is to get good technology into the hands of good people to do great things. In his spare time, he writes at CaseySoftware.com, lives in the woods, and has recorded numerous API courses with LinkedIn Learning.
Sessions
-
What Does the Data Reveal About Modern Advanced Threats and How to Counter Them?Tuesday, October 28, 2025
8:10 AM - 8:55 AM
Kelli Schwalm
Senior Engineer - RunSafe Security
Kelli Schwalm is a Senior Engineer at RunSafe Security where she leads the team developing RunSafe’s unique approach to generating build-time SBOMs for C/C++. Prior to joining RunSafe, Kelli worked on embedded security technologies for mission-critical systems with a focus on Linux Kernel development.
Sessions
-
SBOMs for Embedded OT: A Practical Approach to Reducing Supply Chain RiskWednesday, October 29, 2025
10:20 AM - 10:50 AM
Kevin Holcomb
Technical Marketing Engineer, Industrial IoT Business Unit - Cisco Systems
Kevin is a Technical Marketing Engineer in Cisco’s Industrial IoT Business Unit, currently covering Cyber Vision. Kevin plays a key role in helping Cisco’s customers and partners implement IoT technology and also helps to define product requirements based on customer needs. Kevin has over 25 years of experience, 20 of which have been at Cisco. Throughout this time, he has worked on many different IoT-related technologies, such as rugged hardware design, embedded routers/switches, video products, networking of trains and Public Safety vehicles, automotive in-vehicle networking, and LoRaWAN. Kevin is located on the East Coast of the United States and assists customers and partners around the globe.
Sessions
-
Security Fused into the Network to Protect OT at ScaleTuesday, October 28, 2025
10:45 AM - 11:15 AM -
Security Fused into the Network to Protect OT at ScaleWednesday, October 29, 2025
1:30 PM - 2:00 PM -
Solutions Theater: Security Fused into the Network to Protect OT at ScaleThursday, October 30, 2025
11:50 AM - 12:20 PM
Kyle Robinson
Industrial Network Cybersecurity Analyst - Tallgrass Energy
Sessions
-
Panel: OT Security Successes, Failures, and the Road AheadTuesday, October 28, 2025
9:00 AM - 9:45 AM
Leo Kershteyn
Director of Product Management, Cybersecurity - Honeywell
Leo Kershteyn has over 15 years’ experience in product management of IT and OT related security software and services. Leo graduated from the Georgia Institute of Technology with an Electrical Engineering degree as well as an MBA from SUNY at Albany. Leo also attained CISSP and GICSP security certifications. Leo resides in Atlanta along with his family and a Boston terrier named Charlie (named after Charlie Chaplin).
Sessions
-
Case Study: Deploying Asset Discovery and Intrusion Detection Across 100+ SitesWednesday, October 29, 2025
11:05 AM - 11:35 AM
Mackenize Morris
Principal Industrial Consultant at Dragos - Dragos
Mackenize Morris is a Principal Industrial Consultant at the industrial cybersecurity company Dragos, Inc. where he assists the professional services teams in conducting network and vulnerability assessments. Dragos works to secure critical infrastructure organizations including power, water, and manufacturing. Prior to joining Dragos, Mackenize worked as a process controls engineer and system architect of DCS systems until fully switching over to an ICS cybersecurity position within the DOE complex. Mackenize received his B.S. in Chemical Engineering and MBA from the University of South Carolina as well as a Masters in Information Security Engineering from the SANS Technology Institute. He currently holds over a dozen cybersecurity certifications.
Sessions
-
[Launchpad] Tales from the Road, How to Crawl, Walk, Run in ICS CybersecurityMonday, October 27, 2025
10:45 AM - 11:30 AM -
Leveraging Network Visibility to Validate Defensible ArchitectureWednesday, October 29, 2025
11:40 AM - 12:15 PM
Margaret Cunningham
Technical Director Security & AI Strategy, Field CISO - Darktrace
Dr. Margaret Cunningham is the Director of Security & AI Strategy at Darktrace, where she advises on AI security strategy, innovation, data security, and risk governance. Her expertise spans physical security, OT&E, AI, risk analytics, and behavioral modeling. Previously, she was the Principal Product Manager for Global Analytics at Forcepoint and Senior Staff Behavioral Engineer at Robinhood. Cunningham holds a PhD in applied experimental psychology and has 13 patents covering human-centric risk modeling, security persona development, and behavior-based threat detection. Dr. Cunningham has spoken at major industry conferences, including RSA and Infosec, has been featured in leading publications such as The New York Times, The Wall Street Journal, BBC, CyberWire, and Dark Reading.
Sessions
-
Cognitive Readiness in OT Security: Human Performance Under PressureWednesday, October 29, 2025
1:30 PM - 2:00 PM
Massimo Nardone
VP, Operational Technology (OT) Security - SSH Communications Security
Massimo Nardone is VP of Operational Technology Security at SSH Communications Security, bringing over 29 years of global experience in IT, OT, and IoT cybersecurity. He has served as CISO, Lead Architect, and Global Security Competence Leader, guiding organizations in managing cyber risks and building resilient security programs. Massimo is a recognized expert in standards such as ISO 27000, NIST, IEC 62443, and regulations like GDPR, DORA, and NIS2. He serves on multiple industry boards, holds four international patents, and is dedicated to advancing innovative cybersecurity solutions for critical OT environments.
Sessions
-
Building Secure OT & IoT Environments: How to Future-Proof Industrial NetworksTuesday, October 28, 2025
3:00 PM - 3:30 PM
Matthew Rogers
ICS Cybersecurity Strategy & R&D Lead - CISA
Matthew Rogers, PhD, is a security researcher, with a background in building OT detection systems for planes, trains, and tanks. He leads the Secure by Design for OT initiative at CISA.
Sessions
-
Why OT Johnny Can’t EncryptTuesday, October 28, 2025
2:20 PM - 2:55 PM
Michael Rothschild
VP of Product - Armis
Michael Rothschild is a prominent figure in the cybersecurity industry, serving as the Senior Director of Product at Armis, a leading company specializing in asset visibility and security for enterprise environments. Michael held various significant roles in several renowned technology companies over the last 25 years, where he developed a deep understanding of the cybersecurity landscape. Michael has been recognized for his thought leadership in cybersecurity, often contributing to industry discussions through speaking engagements, webinars, and published articles. A past professor of marketing, Michael hold advisory board positions at Ithaca College and Rutgers University.
Sessions
-
Achieving "Left of Boom" Cyber Security and Resilience in CPSWednesday, October 29, 2025
4:10 PM - 4:45 PM
Mike Lennon
Director, ICS Cybersecurity Conference - SecurityWeek
Sessions
-
Industrial Cybersecurity Launchpad (9AM - 4PM)Monday, October 27, 2025
8:30 AM - 9:00 AM -
Closing Panel: Takeaways and Insights from the 2025 ICS Cybersecurity ConferenceThursday, October 30, 2025
2:05 PM - 3:00 PM
Pankaj Goel
Upstream New Operations Advisor - ExxonMobil
As an experienced professional with a robust background in the energy sector, Pankaj Goel stands out as a strategic leader at ExxonMobil. With a career marked by innovation and forward-thinking, Pankaj has consistently driven initiatives that enhance operational efficiency and Cybersecurity. His expertise in navigating complex market dynamics and his commitment to integrating cutting-edge technologies into the energy landscape underscore his role as a catalyst for change within the industry. Pankaj's leadership style is characterized by a collaborative approach, fostering team synergy and encouraging the exchange of ideas to achieve common goals.
Sessions
-
Cybersecurity Implementation for Major Industrial Capital ProjectsWednesday, October 29, 2025
11:05 AM - 11:35 AM
Paul Innella
CEO - TDI
Paul Innella, CEO of TDI, is a globally recognized cybersecurity executive with over 30 years of experience advising critical infrastructure, government, and enterprise organizations. He pioneered Cybersecurity Performance Management (CPM), a strategic approach to measuring cybersecurity effectiveness in operational environments. Paul has guided top institutions including DARPA, the U.S. Navy, Deutsche Bank, and the IMF. His insights have appeared in Forbes, Financial Times, CNBC, and ABC News. He holds CISSP-ISSMP, CISM, and NSA IAM certifications and completed executive programs at Cambridge, IMD, and Edinburgh Business School. He also chairs White Hat USA, supporting Children’s National Medical Center.
Sessions
-
Measuring ICS Cybersecurity Effectiveness: Implementing Cybersecurity Performance Management (CPM)Wednesday, October 29, 2025
9:45 AM - 10:15 AM
Ralph Spada
Technical Fellow - Owl Cyber Defense
Ralph J. Spada is a 20+ year veteran in designing and deploying DoD-grade security solutions. He has architected four generations of secure processing products across the Defense Industrial Base (DIB), from low-SWaP systems to enterprise-class platforms requiring high-level Anti-Tamper and Cybersecurity. His multidisciplinary leadership spans the full product lifecycle—from system architecture, secure SoC/ASIC design, and applied cryptography to full-system hardware and software qualification. Certified in EVM and SAFe, Ralph is a proven program driver and collaborator, dedicated to advancing technology for our nation's most critical security objectives.
Sessions
-
Applying Zero Trust in ICS: Where It Works — and Where It BreaksWednesday, October 29, 2025
3:35 PM - 4:05 PM
Randy Petersen
SCADA Superintendent - San Jacinto River Authority
Randy Petersen is the SCADA Superintendent responsible for the collective network and server infrastructure, programming, and cybersecurity of San Jacinto River Authority’s industrial control systems. He is an active member of the operational technology cybersecurity community, co-founder of the SCADA User Group, and part of the TAWWA resiliency and cybersecurity committee. For the past thirteen years, he has been focused on operational technology with a strong emphasis on networking and cybersecurity. Before joining SJRA, he worked with data extractions, database management, operating system deployment, and system recovery.
Sessions
-
[Launchpad] The OT Approach to Design and CybersecurityMonday, October 27, 2025
2:45 PM - 3:30 PM
Roger Hill
Founder/CEO - Hillstrong Group Security, Inc.
Roger Hill, is an inventor, thought leader and founder of Hillstrong Group Security, brings over 30 years of expertise in industrial automation and cybersecurity. Specializing in OT GRC (Operational Technology Governance, Risk, and Compliance), he has guided global manufacturing enterprises in fortifying their cyber defenses. Known for his strategic insights and practical advice, Roger is a trusted advisor and thought leader in the cybersecurity field, dedicated to advancing ICS security practices.
Sessions
-
[Launchpad] Lean Teams, Big Impact: Automating Evidence and Governance in OTMonday, October 27, 2025
3:45 PM - 4:30 PM -
Mean Time to Replace Expertise (MTTRE): Building an Expert Knowledge System that Reduces RiskWednesday, October 29, 2025
2:05 PM - 2:45 PM
Ron Ahasan
Project Manager - ExxonMobil
22 years with ExxonMobil and working as an IT/OT project manager for last 8 years focusing on delivering solutions to strengthen Cyber posture at all Operations Technology environments (e.g. Oils production site or refinery) at ExxonMobil
Sessions
-
Navigating Complexities in Global Oil and Gas Projects: A Fireside Chat on ICS SecurityTuesday, October 28, 2025
10:45 AM - 11:30 AM
Sachin Mohan
Territory Head - OT Cybersecurity - CyberKnight
Sachin Mohan is an OT cybersecurity expert with over 18 years of experience securing Industrial Control Systems (ICS) in the Middle East’s critical infrastructure sectors, including oil and gas and utilities. As a cybersecurity strategist, Sachin specializes in building resilient OT ecosystems, leveraging ISA/IEC 62443 standards to address challenges. Sachin is a risk management consultant adept at aligning OT security with regulatory compliance and fostering workforce training to bridge the IT-OT skills gap. Sachin is passionate about advancing critical infrastructure protection through innovative strategies like privileged access management and vulnerability management. At the ICS Cybersecurity Conference, He empowers professionals with practical tools for securing OT environments.
Sessions
-
Build a Resilient OT Cybersecurity Ecosystem: Lessons from Experience in Middle EastMonday, October 27, 2025
1:15 PM - 2:00 PM -
The Airgap Fallacy: Why Isolated OT Systems Are Still Vulnerable to RansomwareThursday, October 30, 2025
11:15 AM - 11:45 AM
Saman Zonouz
Associate Professor - Georgia Tech
Saman Zonouz is an Associate Professor at Georgia Tech in the Schools of Cybersecurity and Privacy (SCP) and Electrical and Computer Engineering (ECE). Saman directs the Cyber-Physical Security Laboratory (CPSec) which recently hosted a U.S. Congressional visit to demonstrate its research outcomes. His research (supported by ~$120M collaboratively) focuses on security problems in cyber-physical systems. His research has been awarded Presidential Early Career Awards for Scientists and Engineers (PECASE) by the United States President, the NSF CAREER Award in Cyber-Physical Systems (CPS), and Significant Research in Cyber Security by the National Security Agency (NSA). Saman is currently a Co-PI on President Biden’s American Rescue Plan $65M Georgia AI Manufacturing (GA-AIM) project.
Sessions
-
From Ship to Shore: Real-World Threats and Zero-Day Attacks in Maritime Operational TechnologyWednesday, October 29, 2025
1:30 PM - 2:00 PM
Sandeep Lota
Global Field CTO - Nozomi Networks
With over two decades of progressive experience designing and architecting system breakthroughs, Sandeep is a Network Security Expert proven in supporting national and global projects for the world’s largest companies. Sandeep has a long record of success innovating complex, large enterprise solutions for network and security infrastructures. He is known as an industry thought leader, and sought after across North America and internationally. In his current role as Field CTO at Nozomi Networks, Sandeep enables the success of Nozomi’s sales and channel force, and is both a leader and expert in executing complex design and systems engineering configurations.
Sessions
-
Something’s in the Air: Uncovering Hidden Wireless Threats in OT/IoTThursday, October 30, 2025
9:45 AM - 10:15 AM
Sandeep Lota
Global Field CTO - Nozomi Networks
With over two decades of progressive experience designing and architecting system breakthroughs, Sandeep is a Network Security Expert proven in supporting national and global projects for the world’s largest companies. Sandeep has a long record of success innovating complex, large enterprise solutions for network and security infrastructures. He is known as an industry thought leader, and sought after across North America and internationally.
Sessions
-
Securing the Unseen: Transforming OT/IoT Risk Management with Nozomi NetworksTuesday, October 28, 2025
12:30 PM - 1:15 PM
Shibu Thomas
Field CTO for Global Insider Risk Solutions - Everfox
Shibu Thomas is Everfox’s Field CTO for Global Insider Risk Solutions. Shibu has been in the IT/Cyber Security space for over 24 years, working in various roles from IT support/systems administration and professional services to sales engineering/consulting. During the past 18+ years he has been focused on Insider Risk with an emphasis on user and data protection. Shibu has worked with both US Government and private sector companies in various capacities over this period, with an emphasis on acquiring, implementing, and maintaining these Insider Risk solutions. In his current role, Shibu continues to work with both US Government, foreign Government, as well as US and International companies as they research and acquire Insider Risk solutions.
Sessions
-
[Launchpad] How Effective Insider Risk Management is Essential to Operational ReliabilityMonday, October 27, 2025
2:00 PM - 2:45 PM
Suhail Ahmad Rana
Al Assurance and OT/Cybersecurity Professional - Independent AI Assurance and Cybersecurity/OT Professional
Suhail Ahmad Rana is a Cybersecurity GRC and AI assurance professional with almost two decades of experience, specializing in ICS and OT security, smart city projects, and the region’s largest electricity provider. He focuses on governance, risk, and compliance aligned with ISO 27001, ISA/IEC 62443, with local regulations and international standards. He holds CISM, CRISC, CISA, ISO 27001 Lead Auditor, ISO 42001 Lead Implementer, and ISACA’s Advanced in AI Audit (AAIA) certifications. He has published research on Retrieval Augmented Generation in cybersecurity and is developing AI governance frameworks for ICS environments.
Sessions
-
Secure AI Adoption Framework for ICS/OTWednesday, October 29, 2025
2:05 PM - 2:45 PM
Terry McCorkle
CEO and Co-Founder - PhishCloud Inc
Terry is a serial entrepreneur with over 25 years of experience safeguarding public, corporate, and government sectors from cyber threats. A certified ethical hacker and former government red team leader, he is also a renowned expert in ICS/OT incident response and preparedness training, driving innovation in cybersecurity defense strategies.
Sessions
-
From Fire Drills to Fusion: How Cyber Fusion Centers Transform Security OperationsThursday, October 30, 2025
9:45 AM - 10:15 AM
Tom Sego
CEO - BlastWave
Tom Sego’s career spans three decades: one in manufacturing, one at Apple, and one in entrepreneurship. Tom is the co-founder and CEO of BlastWave and dedicates his career to protecting critical infrastructure from cyberattacks by eliminating entire risk classes. Before co-founding BlastWave, Tom was the co-founder of three other startups - one in mobile telephony that is still in operation today (ClearFly Communications), a solar storage company (SunVault), and a wine importing business (SouthInk). Tom also had a three-year stint as a professional poker player, winning two Bay 101 Open tournaments and placing high in both a World Poker Tournament and a World Series of Poker event.
Sessions
-
Failing Open Fails Zero TrustWednesday, October 29, 2025
9:45 AM - 10:15 AM
William Donohue
Booz Allen - OT Cybersecurity Engineer
Will Donohue an OT Cybersecurity Engineer for Booz Allen. He is the OT Cybersecurity Lab Manager who is dedicated to continuous improvements across development and maintenance workstreams. Will has leveraged the OT Innovation Hub to mirror client environments as best as possible for testing various OT security tools including Endpoint Protection tools, OT Passive Monitoring tools, Data Diodes, and more. Additionally, Will supports a range of OT Security focused client engagements ranging from setting up an OT Vulnerability management program to integrating various platforms into ServiceNow to create a centralized OT Asset and Vulnerability Management platform.
Sessions
-
Practical Guide for Evaluating OT Identity Access Management, Endpoint Protection & Backup SolutionsTuesday, October 28, 2025
3:45 PM - 4:20 PM
