Agenda
DAY 1 - 27 November 2024
Cybersecurity Trends in European Markets
- The evolution of cyber security trends from the last century to present day
- Changing threat landscape and how these impact on current trends- Lessons learned
- Challenges of staying ahead of emerging threats
- What the future may look like
Umberto Cattaneo / EURA Regional Cyber Security Business Consultant Lead / Schneider Electric
Cyber Security Initiatives within the Energy Sector
Paul Sutton
Principal OT Cyber Architect, Ofgem
A brief run through of work within the sector to manage security of network and information systems (NIS) and some key challenges for the sector as it moves towards a net zero, future energy system.
We will touch upon the need for cyber resilience and our regulatory approach, issues impacting continued maturity within the sector and how security requires more than just controls were we need to consider systemic risks facing the sector.
Can’t I just get some fancy firewalls and a SOC and be done with it? - Cyber Security from the Asset Owner perspective
- Owner responsibilities and the site RACI
- Creating a Cyber Security programme
- What is a Cyber Security Management Framework?
- Case study from one of our sites
Sanna Danielsson / Asset Manager / Schroders Greencoat
Why Cyber Security Should be a Primary Concern for Utilities and Renewable Energy
In these interactive roundtable discussions, delegates will have the opportunity to pose their biggest questions directly to industry experts in small working groups on the topic of their choice
- Why do operators and developers do not pay enough attention to cyber security?
- Learning how first level SCADA protection is managed by the OEMs
- Who should be responsible for the security of assets?
- Should cyber security be an OEMs responsibility? Are OEMs the ones with the power to influence the discussion?
- Who should bring together different players in order to develop industry standards?
- Should renewable energy be more involved in how data are handled by suppliers and demand a higher level of security?
Panelists
Ricardo Pimentel / Senior BPA / Data Protection Specialist / Creos Luxembourg SA
Securing Business Real Time Information Exchange between DSO and Renewable Energy Industrial Installations in ENEDIS Context
- Technical and Cyber situation of renewable energy producer: lessons learned from the field,
- Information exchange between ENEDIS and renewable energy producer:
- Business role and impact
- Securing Technical links
- Evolutions to come in DSO / Producer real time communication cyber security.
Damien Ploix / Chef Service Cybersecurity / Enedis
One-to -One Meetings & Networking Break
.
The Risks and Impact of a Large-scale Hack on the Electric
Harm van den Brink
Cyber Security Specialist & Innovation, ElaadNL
- Current state of cyber security standards in the EV infrastructure
- Upcoming (European) legislation
- Challenges in the near future
Defend Your Critical Infrastructure with Dragos Industrial Cybersecurity
Phil Tonkin
Field Chief Technology Officer, Dragos Inc
Phil Tonkin / Field Chief Technology Officer / Dragos Inc.
Renewables and Cyber Security Regulation (NIS2.0) regarding a Cyber Attack?
Rafael Narezzi / Managing Director / Cyber Energia
Mastering OT Cybersecurity: ISA/IEC-62443 implementation and pitfall prevention
Jose Antonio Meseguer
EU Regional Leader OT Cybersecurity – ISA IEC 62443 Expert, Schneider Electric (Spain)
- Unveiling Cyber Security in OT: Spotlight on ISA/IEC-62443 standard, key areas within Energy and Utilities Organizations.
- Pragmatic Approach to OT Cybersecurity: Unfolding strategies and common pitfalls for successful implementation.
- Tackling Challenges: Realizing cybersecurity transcends technology.
- Finally, let’s get to work! First steps and must-dos in your organization
Lunch Time Break
.
One-to -One Meetings & Networking Break
.
Policy and Best Practices for Incident Prevention
- Implementing risk assessment and identifying top risks
- 5 Critical Controls for OT Security
- Incident Response Framework for OT
Jason Harle / Partner | RA Tech Resilience / Deloitte
To What Extent Does Current Cyber Policy Reflect a Changing Cyber Risk Landscape?
Amogh Dhamankar
Senior Advisory Enterprise Architect, ServiceNow
To protect critical infrastructure, collaboration across all departments is essential. Silos hinder progress, whereas integrated platforms like ServiceNow enable utilities to effectively manage operational risks and ensure regulatory compliance. Disconnected technology and outdated tools not only jeopardize critical infrastructure but also expose organizations to penalties. Embracing a common platform is key to safeguarding our national infrastructure.
To What Extent Does Current Cyber Policy Reflect a Changing Cyber Risk Landscape?
- How can business, regulators and government collaborate on new policy for a new age?
- What might a global rules-based system for cyber resilience look like?
- How can policy makers ensure renewable companies are better prepared for cyber-attacks?
- Will government proposals to mandate the reporting of cyber- attacks be successful?
- What measures can be taken by global leaders to ensure new technologies are not weaponised?
Panelists
Jason Harle / Partner | RA Tech Resilience / Deloitte
Paul Sutton / Principal OT Cyber Architect / Ofgem
Damien Ploix / Chef Service Cybersecurity / Enedis
Amogh Dhamankar / Senior Advisory Enterprise Architect / ServiceNow
One-to -One Meetings & Networking Break
.
Crafting a Robust AppSec Roadmap in the Energy Sector: How Do We Strategize to Secure Both Traditional and AI Applications?
Ramesh Krishnasagar
Technology and Security Consultant, BP
- Intricacies of developing a comprehensive Application Security (AppSec) roadmap tailored to the Energy sector, addressing both traditional and AI-driven applications.
- The challenges and limitations associated with implementing scalable AppSec programmes for the complex application ecosystems in large enterprises.
- Why conventional AppSec measures are inadequate for securing AI applications, underscoring the necessity for specialised AI-AppSec strategies.
- The essential components of an AI-AppSec program, incl. implementation strategies, maturity models, and potential obstacles, offering a thorough guide for safeguarding the future of energy infrastructure.
Electricity Security Vs. Cyber Security
Elad Shaviv
Director, Business Development Division, Israel Electric Corporation (IEC)
- The evolving challenges to electricity security
- The risks of keeping cyber security in silo
- The need to converge cyber, physical, and electrical security.
- Converged threat examples
Advanced Network Segmentation: Unidirectional Architectures
Tjeerd Zwijnenberg
Director Europe, Waterfall Security Solutions Ltd
Despite their growing significance in protecting industrial automation systems, unidirectional architectures are often not well understood, particularly by professionals with IT-centric backgrounds. Unidirectional architectures represent a true revolution in network cybersecurity, enabling use cases such as monitoring production and enabling secure remote access, while dramatically reducing the risk associated. Unidirectional architectures, featuring at least one Unidirectional Gateway, provide enhanced security by permitting data flow in only one direction. The talk will explain how these architectures differ from traditional firewalls and highlight their role in safeguarding networks, emphasizing their growing relevance due to stricter segmentation requirements in sectors like pipelines and rail systems, the rise of ransomware, and the emergence of industrial cloud solutions. The discussion will also cover different unidirectional architecture designs, their implementation, and their significant advantages in improving network security in critical networks to support all of the current business needs in the industrial (OT) network.
Bridging the Gap between IT and OT Teams
- Examining the reasons for the current separation of IT and OT teams
- What’s the difficulty in monitoring this interconnection for CISOs?
- When events occur, how do these two teams communicate and collaborate?
- Is it possible to bring these two teams together? And if so, how do you structure your A-team?
- How do you train your ideal team on cyber security? And, what kind of talent should you have in place?
- Understand how OT environments differ from IT and gain technical approaches to providing OT security.
- How you should develop a framework on vulnerability management processes
Panelists
Bas Kruimer / Business Director Digital Grid Operations & Cyber Security / DNV Netherlands B.V.
Tjeerd Zwijnenberg / Director Europe / Waterfall Security Solutions Ltd
Sanna Danielsson / Asset Manager / Schroders Greencoat
Amogh Dhamankar / Senior Advisory Enterprise Architect / ServiceNow
Moderator
Bas Kruimer
Business Director Digital Grid Operations & Cyber Security, DNV Netherlands B.V.
Panelists
Tjeerd Zwijnenberg
Director Europe, Waterfall Security Solutions Ltd
Amogh Dhamankar
Senior Advisory Enterprise Architect, ServiceNow
Chairman’s Closing Remarks and End of Day One
.
DAY 2 - 28 November 2024
Cyber Security vs Cyber Resilience
Marta Majtenyi
Director of Cyber Security Services, Norsk Hydro
- Creating a resilient cyber culture and protecting user data
- Have cyber-crimes evolved over the past two years? What are the key pressures exacerbating this threat?
- The top-down vs bottom-up approach to cyber training – Which method is best?
- How to ensure all employees are trained in data protection procedures?
- How are we ensuring that user data is protected, Is IAM enough on its own?
- Internal threats – How to recognise if employees are committing fraud.
- How to establish if your organisation has an effective incident response and disaster recovery plan.
Cyber Threats in Times of Crisis and War: A Case Study from the Biggest Russian Gas Importer to Europe
- Examination of the cyber and energy security challenges brought about by the conflict and its immediate effects on the European energy sector and the specific case study.
- Analysis of how the business and geopolitical landscape influenced cybersecurity measures and threat landscapes, requiring rapid adaptation and response.
- Implementation of proactive strategies and advanced threat intelligence to protect critical infrastructure and mitigate emerging threats.
- The critical role of collaboration between cybersecurity teams and crisis committees in maintaining operational resilience during geopolitical upheavals.
Cesar Oliveira / Cyber Resilience Officer / Uniper
Cybersecurity Risk-Management to Secure Operations and Comply with Regulations: Asset Owners' Perspective
- Treating cybersecurity risk of renewable assets(Avoid, modify, share & retain)
- Ensuring Compliance to EU cybersecurity directives.
- Challenges faced so far.
Olaoluwa Babasanmi / Data, Visualisation and Systems Engineer (Renewable Energy Systems) / Nuveen Infrastructure
Ensuring Robust Cybersecurity in Mega Renewables Projects
Norris Alward
GSI Global Cybersecurity Leader, GE Vernova
- Cybersecurity challenges in interconnected systems, remote operations, third party vendors and legacy systems.
- Cybersecurity electrical regulatory global compliance differences.
- Expected works, resources and spending to ensure delivery.
- How can we manage?
Rethinking Cybersecurity in the Digital Transformation Age
Jim Salter
Manager, Wood
- Today OT is a legacy term and doesn't fit the current era. Cyber Physical Systems (CPS) encompasses the broader scope of IT, OT, IIoT, Cloud and other acronyms too. This talk discusses some of the challenges and opportunities as our industry evolves around us.
- Adapting OT thinking and methods for CPS (Cyber Physical Systems).
- AI is here, as an aide and an adversary. How can teams leverage AI to enhance their Cybersecurity Posture? Why and how should we move to Zero Trust?
- Adapting defence-in-depth to include CPS.
- Brown-Field, Green-Field, Next-Field and No-Field; a brief glimpse at the future.
One-to -One Meetings & Networking Break
.
Renewable Energy Cyber Security in the Age of Digitalization
- Why is it important and critical to renewable energy operations?
- Cybersecurity - emerging threats and strategies to address them.
- What cyber security issues emerge as digital strategies are adopted.
- Cybersecurity best practices for renewable energy.
Panelists
Jim Salter/ Manager / Wood
Olaoluwa Babasanmi / Data, Visualisation and Systems Engineer (Renewable Energy Systems) /Nuveen Infrastructure
Norris Alward / GSI Global Cybersecurity Leader / GE Vernova
Bas Kruimer / Business Director Digital Grid Operations & Cyber Security / DNV Netherlands B.V.
Moderator
Jim Salter
Manager, Wood
Panelists
Bas Kruimer
Business Director Digital Grid Operations & Cyber Security, DNV Netherlands B.V.
Norris Alward
GSI Global Cybersecurity Leader, GE Vernova
The Future of Cybersecurity – Where Should We Go from Here?
Bas Kruimer
Business Director Digital Grid Operations & Cyber Security, DNV Netherlands B.V.
- The future of cyber security correlates with the future of information technology. How much of an impact will security have in our business and personal lives?
- How will advancements in AI, Machine Learning and Automation impact the industry?
- How renewable power plant controls protect inverters from hacks and attacks
- Reviewing developments in the attacker ecosystem.
- Where does human stand in cyber security?
Untangling the Complexity of Vulnerability Management
• What systems and controls should be involved in your vulnerability management program
• How to scale and monitor the progress
• How to scale and follow-up the required processes associated with the remediations and exceptions
Georgios Kryparos / Chief Information Security Officer / Einride
Lunch Time Break
.
One-to -One Meetings & Networking Break
.
Vendor and Supply Chain Security
Christie Ogubere
Principal Cyber Security Consultant, Intex IT
- Understanding the Risks
- Key Components of Vendor and Supply Chain Security
- Best Practices for Enhancing Security
Secure Usage of the Internet for Critical Infrastructures – Use Case
Thomas Zinniker
Head Corporate IT, BKW
- The Internet can no longer be avoided to be used for Critical Infrastructures
- Increasing Attack Surface due to decentralized infrastructure and supply chain
- SCION - An new Secure Communication Protocol secures the use of public infrastructure
- Use Cases from Switzerland in the Finance, Health Care and Utilities Industry
Cybersecurity Monitoring for Renewable Energy: Links with Resilience
Critical Infrastructure Protection with the point of view of a European project
Frederic Guyomard / Senior Project Manager / EDF
One-to -One Meetings & Networking Break
.
Cyber Security Protection of OT/Scada
- Pitfalls
- What to lock and secure
- In-country and international standards
- Regulations compliance
Lida Rragami / Head of Cyber Security / Sonnedix
Securing the Grid: Cybersecurity Strategies for the Energy Sector
- Assessing the vulnerability landscape of modern power grids and the implications of digitalization on security.
- Outlining best practices and regulatory frameworks that ensure robust cybersecurity measures in the energy sector.
- Delving into innovative solutions for real-time monitoring and threat detection to preempt cyber-attacks.
- Sharing insights on collaboration between industry stakeholders to enhance grid resilience against cyber threats.
The Role of Insurance in Protecting your REN Assets
- Who’s currently insuring their data? And, what are the best practices currently available?
- Are there products for cyber security attacks? How do they limit liability?
- Providing mitigation and control methods that matters to risk managers
- What steps does the industry need to take to enable insurers to tackle cyber security incidents?
- Evaluating client’s risks and focus on those that represent non-traditional damages and potential lost revenue
Panelists
Marta Majtenyi / Director of Cyber Security Services / Norsk Hydro
Thomas Zinniker / Head Corporate IT / BKW
Lida Rragami / Head of Cyber Security / Sonnedix
Jim Salter / Manager / Wood
Moderator
Marta Majtenyi
Director of Cyber Security Services, Norsk Hydro
Panelists
Thomas Zinniker
Head Corporate IT, BKW
Jim Salter
Manager, Wood
End of Conference
.
