OT security workshop

Operational technology (OT) is crucial to critical infrastructure and industrial processes. Threats are evolving at lightspeed. How do you build a robust and secure OT environment designed for resilience and growth?

Program

• Welcome
• Plenary program
• Break
• Break-out session(s)

• Drinks

  Plenary program

• Setting the scene: OT is transforming industries by enabling automation and real-time data sharing, but the convergence of OT and IT introduces new vulnerabilities. As threats grow more complex, industries must prioritize both innovation and robust security to ensure their critical infrastructure remains secure and resilient. What are the current trends and challenges in OT security, and how do we build robust and secure OT environments, designed for resilience and growth? CISO Platform board member Justin Broeders sets the scene for this OT Security workshop.

  

   

• Inside information: Kirsten Dijkhuizen-Meeuwisse, CISO of Rijkswaterstaat. 
  
  As the lowermost region in the Rhineland, the Netherlands is extremely sensitive to high water and longer periods of drought. For water management, Rijkswaterstaat was created more than two centuries ago. Perhaps more than any other European country, the Netherlands depends on frequent and timely measurements of water levels and the quality of dikes, bridges, roads, and waterways. This used to be human labor; today, Rijkswaterstaat (RWS) primarily uses an operational technology (OT) network including many specialized sensors.

  This OT network needs to be properly secured. However, OT security is more complicated than IT security. Operational technology typically involves a variety of hardware and software solutions from different vendors, which often have a longer lifespan than IT systems. This extended lifespan can lead to obsolescence, making adequate security more challenging. In addition, you can't test OT environments as well as IT environments, because they need to operate continuously.

  Kirsten will share with the attendees how her team keeps the organization's OT (and IT) secure. Are you a CISO or in another cybersecurity leadership role, interested in learning more about OT security? If so, you are welcome to attend this workshop. 

  

• Interactive panel discussion: Together with Kisten Dijkhuizen-Meeuwisse (RWS), Jan Joost Bierhoff (Heineken), Lilian Knippenberg (Gemeente Den Haag) and Godfried Boshuizen (CC Group) we will discuss the future of OT security. By bringing different perspectives to the table and providing the opportunity to ask questions, we aim to engage in an insightful discussion on the trends and challenges of OT security.
   

  

  Break-out sessions:

1. The challenges of connecting IT & OT

   As IT and OT systems become increasingly interconnected, organizations face new security challenges. During this breakout session, we will discuss how companies can coordinate their efforts to ensure security and mitigate vulnerabilities. We will discuss practical examples and solutions to strengthen collaboration between IT and OT teams.

2. Are you prepared for NIS2? Risk management and compliance in OT security

   The introduction of NIS2 and other essential regulations pose many questions for organizations with OT.  In this session, we will cover those regulations and discuss how companies can align their security practices with enterprise risk management strategies. Practical advice on managing compliance and demonstrating compliance with these evolving standards will also be covered.

3. Learning from real-world cyber-attacks: threat detection and incident response in OT environments

   As cyberthreats keep evolving, advanced detection techniques and robust incident response plans must also be continuously assessed. In this session, we will discuss using behavioral analytics, anomaly detection, and other tools to identify threats early. Additionally, discussions will focus on creating incident response plans specifically tailored to OT systems and learning from recent, real-world cyber incidents.

4. Building resilience and ensuring business continuity in OT environments
   Businesses must ensure that operations continue to run, even if things go wrong. We will discuss how organizations can build resilience and plan for a rapid and effective return to normal. In this session, we will share experiences and best practices to gain insights.

Please note that the details of this workshop may change. Speakers can be changed or might be added.