Agenda

Chairman's welcome 

►Rethinking Cyber Resilience in Manufacturing

Jonathan Sinclair, Head of Cyber Resilience PT, Roche

• From “systems restored” to “product shipped”: measuring resilience by output, not IT uptime
• Hidden dependencies: how automation, cloud, AI and connected OT are widening the attack surface
• The accountability gap: getting the business to own cyber resilience outcomes
• Value chain as the unit of resilience: mapping end to end and setting recovery priorities
• From insight to action: cross-functional exercises, first steps and the changing role of the cyber leader

►Securing xIoT at Global Scale

Natalie Gristwood, Associate Principal Consultant, Dragos

• Learn how a 130-year-old global manufacturer went from covering 3 of 117 plants with a passive tool to assessing more than 100 sites in half a day, with no new hardware or agents.
• Understand the five challenges that stalled their first attempt: blind spots, default credentials, end-of-life devices, uptime requirements and siloed tooling.
• Take away practical steps to inventory connected devices in your own plants, remediate risk without downtime, and fit the work into the tools your teams already use.

►Defending against hidden risks of AI tools in the workplace

Danny Jenkins - CEO & Co-Founder, ThreatLocker

• AI tools have the power to transform organizational productivity while exponentially increasing risk. Join this session to uncover how workplace AI tools, including agentic systems that can take actions on their own, can expose sensitive data, bypass controls, and open new attack surfaces the moment they're compromised or misused. 
• You'll leave with a practical way to discover which AI tools are already running across your endpoints right now, plus a Zero Trust approach to governing AI use that mitigates these risks without slowing down legitimate work.

►AI and IT/OT convergence – When models meet motors: AI at the IT/OT edge

Adeiza Yisa, Business Information Security Office, Shell

• Understand what IT/OT convergence really means in practice and what value AI brings to the mix
• Learn the key architectural and security considerations for integrating AI with legacy IT/OT convergence
• Hear about real-world use cases and measurable outcomes

Comfort Break

►Beyond Compliance: How Assurance Strengthens OT Cyber Defense and Manufacturing Resilience

Temitayo Akinpelu, Audit Manager, GSK

• How can we leverage Assurance as a strategic partner in building sustainable OT cyber defense.
• Identifying hidden weaknesses in OT cyber defense before they result in disruption.
• Validating whether security controls are truly reducing risk, not just deployed.
• Using assurance insights to strengthen OT governance, resilience, and recovery capabilities

►Fireside Chat: Navigating UK Cyber Security Legislation and the Future of Manufacturing Security

Alan Simpson, Field CISO UK&I, and Rik Ferguson, VP Security Intelligence, Rapid7

• In this exclusive fireside chat, Rapid7’s Alan Simpson and Rik Ferguson dissect the evolving cyber security landscape facing the industrial and manufacturing sectors. With new UK cyber security legislation pending, which will officially bring manufacturers and managed service providers into a stricter regulatory scope, organisations must proactively adapt their security and compliance strategies.
• This discussion breaks down these critical regulatory changes and provides actionable insights into securing complex manufacturing environments against modern, evasive threats.
• The Regulatory Horizon: A comprehensive analysis of the pending UK cyber security legislation and its direct compliance implications for the manufacturing supply chain.
• Commanding the Attack Surface: Why achieving end-to-end visibility and utilising an open platform are foundational for effective exposure management.
• MDR as a Strategic Advantage: How leveraging Managed Detection and Response (MDR) capabilities positions manufacturers to seamlessly satisfy emerging regulatory mandates while defending against advanced threats.

►The Corporate Security Case for AI Sovereignty

Alejandro Martín Soto, Head of Digital Security Architecture, Airbus Defence and Space

• Your AI runs on someone else's infrastructure, under someone else's law — is that a security risk your board has signed off on?
• Do you actually know which AI models are running inside your organisation — and do you control what data they see and send out?
• NIS2, the AI Act, and GDPR each touch AI sovereignty differently — how do you build one coherent security programme when the regulations pull in different directions?
• If your primary AI vendor became inaccessible tomorrow — through outage, sanctions, or a geopolitical event — how long before your operations fail, and do you have a continuity plan?

►Fireside chat: TVM at AI Speed

Marina Nogales Fulwood, Global Director of Identify and Protect, Unilever

• The shifting balance between attackers and defenders
• How TVM needs to evolve as threats accelerate
• How defenders can harness AI to counter AI-enabled threats
• What this means for the future of TVM and cyber resilience

Chairs Closing Remarks