• Understand how traditional IT remote access and PAM solutions cannot effectively secure operational technology environments
• Learn from the experience of other industry peers in CNI and manufacturing how best to provide simplified yet secure remote access
• Understand how best of breed Remote Privileged Remote Access does not require the cloud
• Understand the challenges being faced by Critical National Infrastructure providers securing access to privileged environments

Legislation, such as NIS2, the Cyber Resilience Act and other national cyber regulation, require cybersecurity to be sustained actively by the rail industry.

This challenge must be managed by suppliers, integrators and operators jointly with automated, coordinated work processes which are supported by tools adapted to the assets.

The presentation will provide an overview of Siemens Mobility's comprehensive approach to increase the resilience of its customers.

Presented through practical examples such as cloud security, vulnerability monitoring and management with decision support for the operators, security monitoring and incident response.

The fundamentals are simple; patching, segmentation, malware controls, visibility – but what we are trying to achieve is no easy feat when you look to dismantle more than 20 years of ad hoc OT security measures as there is still risk during the implementation phase.

Key points to be discussed:

• Technical controls / process and people
• Poor visibility (automation)
• Organisational structure to support OT
• Manage risk faster
• Contain threats quicker
• Minimise impact
• Green field vs brown field
• Skills from the ground up
• Managed services
• Managing multiple streams of activity
• Iterative, agile process, we learn, we move forward
• Rapid threat containment

Willi is a graduate of Rockhurst University in Kansas City, MO, USA and holds a CISSP (Certified Information Security Professional) certification in good standing. Willi lives in NW Arkansas with his family. He’s an avid outdoorsman, cyclist, woodworker, and veteran.

30-03-2021, 15:30 - 16:10

Supply Chain Cyber Security is taking center stage and is our biggest risk.
-Are we identifying risk in the supply chain?
-How are we doing this and if not how can we improve?
-Information Sharing on supply chain threats, common practices, challenges and ways we can improve
-How can we more effectively build trust with our suppliers and industry peers?
-How can we better communicate supply chain risk?
-Sourcing and Procurement - how can we better communicate cyber risk contractually and move away from the 'break and fix' model with our suppliers
-Lets look closer at how vendors, infosec leaders and engineering are working -together in ensuring security of OT products

•Identifying critical assets

•What are we seeing, day to day 

•Understanding your tools and user awareness  

•Identifying risk prior to stopping threats 

•APT Education

Panellists include 

Noureen Njoroge

CISCO
Cybersecurity Threat Intel Engineer
(now Director of Global Cyber Threat Intelligence at Nike)

Jacob Benjamin, PhD

Dragos
Principal Industrial Consultant

• James Nesbitt Cyber Senate Director
• Guido Villacis EDF Technical Client Organisation I&C Cyber Security Lead, PWR Technology
• George Bearfield Rock Rail Health & Safety Director
• Michael H Firstenberg Waterfall Security Solutions Director of Industrial Security
• Andreas Klien OMICRON electronics GmbH Head of Business Development Power Utility Communication

The company’s growing list of customers includes national critical infrastructures and utilities, power plants, nuclear plants, water and wastewater systems, offshore platforms, refineries, pipelines, pharmaceutical, chemical and manufacturing plants, and many more. Deployed world-wide, Waterfall products support the widest range of industrial and remote monitoring platforms, applications, databases and protocols in the market. 

As a global leader in industrial control system security, Waterfall contributes routinely to national and international standards, best practice guidance and control system security educational programs. As a result, our products are widely recognized as simplifying compliance with security regulations, standards and best practices. https://www.waterfall-security.com

Cloud computing technology is a key business driver, enabling the sharing of railway information resources, improving the capacity of information processing. However, cloud security monitoring remains a barrier to the full realisation of Cloud’s capability. Deploying security monitoring tools, virtualisation and configuration of event management tools in dynamic environments are just a few of the challenges rail security professionals are grappling with on a daily basis, as well as how security information is shared and how we effectively collaborate within a shared infrastructure.

 Join the Cyber Senate as we dive deeper into the key discussion on Security Monitoring for Cloud Services, as we address best practices in ensuring the confidentiality, integrity and availability of cloud computing for the rail network.

You can join our Rail Cyber Security SME Group here

Areas of discussion include:

• How can we gain full visibility to monitor for potential security flaws and vulnerabilities in a multi-tenant architecture?
• How can we gain strict controls over data at all endpoints?
• How can we better identify patterns and pinpoint potential security vulnerabilities?
• Reliability and performance: How can we ensure it is not impacted by security?
• A look at Cloud-wide intrusion and anomaly detection systems
• Security monitoring collaboration
• How can we provide more timely information on attacks, vulnerabilities and incident

The talk will focus on the strategy achieving IEC 62443-3-3 Security Level 3 compliance for a country-wide, fully digitalized rail automation system. Topics are the current status of standardization, the required central security services and outlook for the protocols required to achieve interoperability. Additionally, the application of this strategy in a large rail-automation infrastructure project is presented at the conference.

This topic would bring together various points:

·         Technical security systems and communication protocols

·         Standardization, also aiming at the work that is currently done within Shift2Rail IT-Sec Working Group and an overall move of the sector to IEC 62443 compliance.

For more information visit www.railcybersecurity.com 

Cyber Senate discusses Industry 4.0: Cyber Securing Legacy Systems across the Business with Andrew Kling, Director Cybersecurity and Software Practices, Schneider Electric. Andrew has been one of our guest speakers on our Industrial Control Cybersecurity USA conference for several years and brings a wealth of information to our community of subject matter experts. 
In this podcast, Cyber Senate and Andrew Kling dive deeper into the new ISA Global Strategic Alliance and what the means for the industry, supply chain and IoT cybersecurity, the transfer of risk across global businesses and how our perception and culture are changing to mitigate evolving cyber threats. 

The podcast and artwork embedded on this page are from James Nesbitt, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.

• Introductions to the challenges of modern aviation and technology
• Maintenance and asset management
• FAA requirements and recalls

     -Weaknesses in exposure of various parts databases  
     - Lack of required security testing by FAA on maintenance software 

• Software utilized in a modern airframe

     -Explanation of what types of software is in use on both planes and weight balancing 

• Buffer overflows, the FAA requires memory checks to ensure they stay within hardware operating parameters. But, no full boundary checks. 
• Explanation of current challenges: F35a has buffer overflow issues requiring a manual reboot of the flight computer, in-flight
• Gate logic doesn't equal good code or secure code: explanation of how the software is written whilst pointing out memory leaks, incompatibility with ease of patching unless substantial downtime (except the 787) and the lack of any security testing for any aviation software on a plane.
• 
  
• Exposure of various airframe manufacturer systems.
• 
  
• Exposure of various airport ticketing and maintenance systems