Keynote Session: STANDARDS & CERTIFICATION

This session delivers a practical playbook for translating security frameworks into operational reality, showing how rail organisations can move faster from vision and policy into deployed, measurable controls without stalling delivery or inflating cost.

• Moving from policy to operations, operationalising the new NIST2 and risk framework in practice, closing the gap between strategy and real-world deployment

• Implementing least-privilege access at scale, managing the deployment in a large enterprise, and turning policy into enforceable system design

• Accelerating the pace of enterprise rollout in large organisations, setting clear goals, and overcoming organisational friction, budget resistance, and delivery delays

• How to prioritise secure-by-design decisions, embedding stronger security choices directly into operational architecture