Agenda
21st October
Rail Cyber Resilience Summit (RCRS)
Securing the Digital Railway: Moving from Reactive Defence to Predictive Resilience, Engineering Cyber Resilience
Across Europe’s Rail Ecosystem
9:30 am
Strategic Morning Panel Discussion: Making the Leap Forward from Framework to Frontline: How to Operationalise NIS2, Least Privilege and Risk Policy at Enterprise Scale
This session delivers a practical playbook for translating security frameworks into operational reality, showing how rail organisations can move faster from vision and policy into deployed, measurable controls without stalling delivery or inflating cost.
Vish Kalsapura, Principal Engineer, Network Rail
Daniele Bozzolo, Chair, International Standardization Body IEC
Dr. Martin Koop, Head of Railway Security, INCYDE GmbH
10:10 am
OT Security in Practice:
Lightning Talk: Implementing NIS 2 and CRA throughout the OT lifecycle
Presenting examples, this talk will demonstrate how risk analyses, security requirements engineering, system architecture design, hardening, test automation, monitoring and vulnerability management are interlinked. The presentation will show how a structured approach based on IEC 62443 covers both regulations and where NIS 2 and the CRA go beyond existing standards.
Martin Koop, Head of Railway Security, INCYDE GmbH
11:00 am
Panel Discussion: Engineering CRA-Compliant Rail Products, Defining Ownership, Requirements and Lifecycle Responsibility Across the Supply Chain
A practical, commercial and technical playbook for translating Cyber Resilience Act (CRA) requirements into deployable, sellable and future-proof rail products. Learn how operators, manufacturers and integrators can define ownership, close compliance gaps, and embed requirements into procurement and lifecycle delivery to ensure product compliance beyond 2027.
Eddy Thesee, Vice President Digital & Cybersecurity, Alstom
Amelia Alder, Legal Counsel Cybersecurity, Knorr-Bremse
Martin Koop, Head of Railway Security, INCYDE GmbH
2:50 pm
Visibility, Detection & Threat Anticipation: Moving from Reactive to Predictive Protection
Ignite Session: Achieving Full OT Asset Visibility: Automating Discovery, scanning and Strengthening Identity Controls to Safeguard Critical Rail Operations
This session delivers a practical overview of DB InfraGO as Europe’s largest rail infrastructure manager and a KRITIS operator (critical infrastructure).
Ulrich Zackor, Head of OT Security, DB InfraGO AG
3:15 pm
Ignite Session: When Cyber Becomes Safety: Building Predictive Resilience Across Railway Operations
As digital complexity expands the rail attack surface, this session delivers a practical intelligence and analytics framework to help operators detect emerging threats earlier, justify security investment through safety impact, and prevent escalation before disruption occurs.
Helen Barbara Grofe, Information Security Architect, Nerthus
4:05 pm
The EU Prepares Against the Quantum Threat – Overview for the Rail Industry
This session provides a practical roadmap for identifying quantum-vulnerable cryptography across rail IT and OT, prioritising long-life and safety-critical systems, and planning a phased transition to quantum-safe security without disrupting railway operations.
Manfred Rieck, Co-Founder
4:30 pm
Virtual Presentation: From IT to Operational Resilience: Building a Hybrid IT/OT Security Operations Centre for a Modern Railway
This session delivers a practical cultural and leadership framework for shifting rail from reactive cyber defence to proactive, safety-led security thinking, embedding cyber awareness into everyday operational decisions.
Yelibeth Mendez Perez , Cyber Security Operations Manager | Technology and Data
4:55 pm
BUSINESS CONTINUITY & CRISIS RESPONSE: ENGINEERING CYBER RESILIENCE AT SCALE
Lightning Talk: Responding to Hybrid Threats: Building a Vigilant Railway Culture from Train Driver to CEO
This session delivers a practical resilience and recovery framework to help rail organisations withstand, contain, and rapidly recover from large-scale cyber disruption, safeguarding safety-critical operations.
Lt Alessandro Chioccarello, Incident Command Specialist, SBB AG
5:15 pm
SUPPLY CHAIN RISK & ECOSYSTEM SECURITY: MANAGING RISK BEYOND THE RAILWAY BOUNDARY
Panel Discussion: Securing the Software Supply Chain: Preventing Code Tampering, Reducing Attack Surface, and Protecting Rail Operations: Minimising risk in building new software.
This session delivers a practical framework for securing the full software lifecycle, from code commit to live deployment, tackling the industry’s fastest-growing cyber risk: supply chain compromise.
Tomasz Chruściński, Product Cyber Security Engineer, Stadler
Eddy Thesee, Vice President Cybersecurity, Alstom
Alex Cowan, CEO & Founder, RazorSecure