The Cumberland Hotel - Arena, London United Kingdom
Contact: [email protected]
0
0
0
0
Days
0
0
Hrs
0
0
Min
0
0
Sec
13th Annual Summit
Rail Cybersecurity Summit
From Cybersecurity to Operational Resilience
Managing Cyber Risk Across Connected Infrastructure, Digital Systems & Critical Dependencies
London | 9–10 March 2027
DAY ONE — Regulation, Safety, Connectivity & Digital Dependency
Examining how regulation, connected systems, software dependency, supply chains, data and AI are reshaping cybersecurity risk across the railway.
08:00 – 08:40
Registration, Coffee, Exhibition & Networking
Welcome refreshments and exhibition area open.
08:40 – 08:50
Chair’s Welcome & Opening Remarks
Setting the context, core themes, and objectives for the 13th Annual Summit.
08:50 – 09:30
Main Stage Plenary
Cybersecurity in an Age of Dependency: Protecting Critical Infrastructure When You Don’t Control the Technology
30 min keynote + 10 min Q&A. Examining sovereign dependency, systemic software risk, cloud infrastructure, and operational autonomy across essential national transport networks.
Ciaran Martin CB
Former Founder & CEO, National Cyber Security Centre (NCSC)
NCSC / Oxford University / Paladin Capital
09:30 – 10:00
Main Stage
Digital Safety in Rail: Integrating Software, OT and Cyber Risk into the Safety Management System
James Walker
Head of Digital Safety, Railway Safety Directorate
Office of Rail and Road (ORR)
10:00 – 10:30
Main Stage
Cybersecurity in Germany’s Railway Sector: Regulatory Developments and Practical Implications
Dr Frank Werner
Cybersecurity Expert
Eisenbahn-Bundesamt (EBA)
10:30 – 11:15
Morning Coffee, Exhibition & Networking
45-minute morning refreshment and exhibition networking break.
11:15 – 11:45
Main Stage
NIS2 in Practice: First Experiences from the Rail Sector
Joseph Mager
Manager Cyber Governance
Nederlandse Spoorwegen (NS)
Syndicate
Rolling Stock Vulnerability Management: What Happens When a CVE Hits the Fleet?
Technical breakout tracking triage, rolling stock CVE qualification, and depot response Speaker TBC.
11:45 – 12:15
Main Stage
How IEC 63452 Supports Compliance with Cybersecurity Regulations
Bruno Corasolla
Global Head of Digital Train, LoB Vehicles
Hitachi Rail
Syndicate
SBOMs, Software Components & Supplier Visibility: Can Rail See Far Enough Into the Product?
Evaluating software bills of materials, deep Tier-N visibility, and firmware verification Speaker TBC.
12:15 – 13:00
Main Stage Panel
Panel: Regulation Meets Reality — CRA, NIS2, IEC 63452, Digital Safety and the Railway
Bridging European legislative frameworks with real-world engineering and railway operations.
Contributors: Eddy Thesee (Alstom), Joseph Mager (NS), Bruno Corasolla (Hitachi Rail), Mark Robinson (CIO, DfT Operator).
13:00 – 14:00
Lunch, Exhibition & Networking
Dedicated 60-minute exhibition and networking lunch window.
14:00 – 14:30
Main Stage
The Connected Train: Who Controls the Data?
Satellite communications, onboard telemetry, and GPS spoofing resilience.
Marc Silverwood & Gavin McAuley
Onboard Systems Manager & Onboard Systems Compliance Manager
Northern Trains Limited
Syndicate
Can You Trust the Maintenance Data? Securing Diagnostics, Sensors and Digital Depot Tooling
Protecting condition-monitoring data integrity and depot connectivity Speaker TBC.
14:30 – 15:00
Main Stage
Cybersecurity and AI Alignment in an Age of Autonomous Acceleration
Dimitri van Zantvliet
Director Digital Resilience / CISO
Nederlandse Spoorwegen (NS)
Syndicate
Securing AI at the Edge: Trains, Stations and Trackside Systems
Defending distributed edge inference systems and computer vision nodes Speaker TBC.
15:00 – 15:45
Afternoon Coffee, Exhibition & Networking
45-minute networking window across the exhibition floor.
15:45 – 16:45
Day One Roundtable Forum — 8 Tables Running Concurrently
Interactive small-group discussions addressing crucial operational, regulatory and architectural challenges.
| Table | Topic | Discussion Lead(s) |
|---|---|---|
| RT1 | CRA Article 14: When Does the Reporting Clock Start — and Who Owns the Decision? | Eddy Thesee (Alstom) |
| RT2 | From NIS2 to IEC 63452: What Does Good Evidence of Rail Cyber Compliance Actually Look Like? | Joseph Mager (NS) & Bruno Corasolla (Hitachi Rail) |
| RT3 | Trusting Position: GPS Spoofing, PNT Resilience and Active Monitoring on the Connected Railway | Marc Silverwood & Gavin McAuley (Northern Trains) |
| RT4 | Autonomous AI Acceleration: What Should Rail Boards Be Governing Now? | Dimitri van Zantvliet (NS) |
| RT5 | Beyond Tier 1: How Far Down Your Digital Supply Chain Can You See? | Lead TBC |
| RT6 | Asset Visibility Across the Digital Railway: Do You Know What You Own & What Depends Upon It? | Lead TBC |
| RT7 | When Does Cyber Risk Become Safety Risk — and When Should It Enter the Safety Management System? | James Walker (ORR) |
| RT8 | Resilient Intelligence: What Happens When Connectivity, Data or the Application Cannot Be Trusted? | Lead TBC |
16:45 – 17:15
Roundtable Roundup & Day One Conclusions
Key takeaways, strategic findings, and closing insights reported from each table lead.
DAY TWO — Operations, Long-Lived Assets, Fleets & Signalling
Moving from policy into the operational railway: fleet cybersecurity, signalling, engineering assurance, incident response and maintaining resilience across 25–40-year system lifecycles.
08:00 – 08:40
Registration, Coffee, Exhibition & Networking
Morning exhibition area open.
08:40 – 08:50
Chair’s Day Two Welcome & Opening Remarks
08:50 – 09:20
Main Stage
Defining the Minimum Viable Company: Building a Defendable, Resilient Railway Organisation
Tom Remberg & Trond Eskild Tingstad-Stav
CISO & Service Owner Traffic Operations
Bane NOR
09:20 – 09:50
Main Stage
Cybersecurity Across the Operational Fleet Lifecycle: Maintaining Assurance, Managing Vulnerabilities and Sustaining Security Over Decades
Joshua Edgley
Global Head of Fleet Security
Hitachi Rail
Syndicate
Cybersecurity by Design for New Rolling Stock
Procurement gates, security baselines, and design assurance Speaker TBC.
09:50 – 10:30
Main Stage Keynote
Cyber Resilience in Wartime: Building a Railway That Can Operate Through Disruption
30 min presentation followed by 10 min audience Q&A. Examining cyber threats, operational continuity, incident response under fire, and practical techniques to keep rail infrastructure running under continuous systemic disruption.
Anatolii Protsiuk
Deputy Director for Corporate Security – Head of the Information Security and Personal Data Protection Division
JSC Ukrainian Railways (Ukrzaliznytsia)
Syndicate
Remote Access to Rolling Stock: Maintenance Tool or Attack Path?
40 min session. Assessing bidirectional telematics, conditional maintenance tunnels, zero trust architecture for depot operations, and supplier access controls Speaker TBC.
10:30 – 11:15
Morning Coffee, Exhibition & Networking
45-minute morning refreshment and networking window across the exhibition hall.
11:15 – 11:45
Main Stage
After Handover: Keeping Railway Signalling Secure for the Next 30 Years
Damanjit Singh
Cyber Security Engineer – Signal Operations & Maintenance
Transport for London (TfL)
Syndicate Track
Bridging the IT/OT Divide: Practical Coordination, Governance and Operational Security in Railway Environments
Exploring practical coordination mechanisms between IT and OT security, resolving operational silos, and managing unified cyber posture across trackside, fleet and corporate railway networks.
Dmitri Ivanov
Chief Information Security Officer
Eesti Raudtee (Estonian Railways)
11:45 – 12:15
Main Stage
Bridging the Gap Between Cybersecurity and Railway Safety: Are Our Assurance Models Keeping Pace with the Connected Railway?
Jon Torode
Head of Engineering and Asset Performance
RKH Qitarat
Syndicate
AI-Enabled Cyber Defence: What Is Actually Working?
Automated detection, real-time response, and anomaly detection in rail OT networks Speaker TBC.
12:15 – 13:00
International Panel
International Panel: Information Sharing Between Railway Operators: Strengthening Collective Security and Resilience
How railway operators share cyber threat intelligence, physical security information, operational incident experiences and lessons learned across organisations and national borders. Addressing trust, information-sharing barriers, practical collaboration, security sensitivities and how stronger international operational relationships improve collective railway resilience.
Panel Contributors:
• Anatolii Protsiuk — Deputy Director for Corporate Security, JSC Ukrainian Railways (Ukrzaliznytsia)
• Oleksandr Rykovtsev — Director of Corporate Security, JSC Ukrainian Railways Subject to Confirmation
• Dmitri Ivanov — Chief Information Security Officer, Eesti Raudtee (Estonian Railways)
• European Railway Operator Representatives — TBC
• Independent Industry Moderator — TBC
• Anatolii Protsiuk — Deputy Director for Corporate Security, JSC Ukrainian Railways (Ukrzaliznytsia)
• Oleksandr Rykovtsev — Director of Corporate Security, JSC Ukrainian Railways Subject to Confirmation
• Dmitri Ivanov — Chief Information Security Officer, Eesti Raudtee (Estonian Railways)
• European Railway Operator Representatives — TBC
• Independent Industry Moderator — TBC
13:00 – 14:00
Lunch, Exhibition & Networking
Dedicated 60-minute exhibition and networking lunch.
14:00 – 14:40
Main Stage Keynote
Securing Railway Operations Under Martial Law: Protecting People, Infrastructure and Critical Operations
30 min presentation followed by 10 min audience Q&A. Examining physical and corporate security, personnel protection, critical infrastructure defence, coordination between security functions, and maintaining essential passenger/freight transport under active martial law.
Oleksandr Rykovtsev
Invited / Subject to Confirmation
Director of Corporate Security
JSC Ukrainian Railways (Ukrzaliznytsia)
Syndicate
Vulnerability Management Across Legacy & Modern Rail Systems
40 min session. Practical methodologies for coordinating security patching, firmware testing, and compensating controls across mixed-generation fleets and legacy interlocking Speaker TBC.
14:40 – 15:10
Main Stage
The Cyber Security and Operational Resilience Journey to GBR
Navigating digital transformation, systemic cyber assurance, and long-term operational resilience during the national transition to Great British Railways.
Mark Robinson
Chief Information Officer
DfT Operator
Syndicate
Securing Software, Updates & Third-Party Components Across the Rail Lifecycle
Managing software integrity, cryptographically verified updates, and third-party code Speaker TBC.
15:10 – 15:55
Afternoon Coffee, Exhibition & Networking
45-minute afternoon networking window across the exhibition hall.
15:55 – 16:55
Day Two Roundtable Forum — 8 Tables Running Concurrently
Focused small-group sessions addressing long-term asset management, OT breakdown points, and operational resilience.
| Table | Topic | Discussion Lead(s) |
|---|---|---|
| RT1 | Minimum Viable Company: What Absolutely Must Continue to Function After a Major Cyber Compromise? | Tom Remberg & Trond Eskild Tingstad-Stav (Bane NOR) |
| RT2 | Who Owns Cyber Risk After Fleet Handover? | Joshua Edgley (Hitachi Rail) |
| RT3 | Where OT Cybersecurity Breaks Down in Practice | Damanjit Singh (TfL) |
| RT4 | Keeping Safety Cases True Under Dynamic Cyber Risk | Jon Torode (RKH Qitarat) |
| RT5 | Cybersecurity by Design in Procurement: Setting Baseline Requirements Before the Contract Is Signed | Lead TBC |
| RT6 | Remote Access After Handover: Who Can Still Connect to the Train or Operational System? | RazorSecure |
| RT7 | Railway Security Information Sharing: Building Trusted Relationships Before a Crisis | Anatolii Protsiuk & Oleksandr Rykovtsev Subj to Conf (Ukrainian Railways) |
| RT8 | From Cybersecurity Strategy to Delivery: What Works, What Doesn’t and What Have We Learned? | Salman Munir (Irish Rail) |
16:55 – 17:25
Roundtable Roundup & Summit Conclusions
5 minutes of key takeaways and actionable insights reported from each table, followed by final closing remarks from the summit chair.
Featured Industry Leaders & Speakers
Confirmed experts speaking across the 13th Annual Rail Cybersecurity Summit.
Mark Robinson
Chief Information Officer
DfT Operator
Dmitri Ivanov
Chief Information Security Officer
Eesti Raudtee (Estonian Railways)
Anatolii Protsiuk
Deputy Director for Corporate Security – Head of Information Security
JSC Ukrainian Railways (Ukrzaliznytsia)
Oleksandr Rykovtsev Subj to Conf
Director of Corporate Security
JSC Ukrainian Railways (Ukrzaliznytsia)
Salman Munir
OT Cyber Security Manager
Iarnród Éireann (Irish Rail)
Ciaran Martin CB
Former Founder & CEO, National Cyber Security Centre (NCSC)
NCSC / Oxford / Paladin Capital
Dimitri van Zantvliet
Director Digital Resilience / CISO
Nederlandse Spoorwegen (NS)
James Walker
Head of Digital Safety, Railway Safety Directorate
Office of Rail and Road (ORR)
Dr Frank Werner
Cybersecurity Expert
Eisenbahn-Bundesamt (EBA)
Joseph Mager
Manager Cyber Governance
Nederlandse Spoorwegen (NS)
Bruno Corasolla
Global Head of Digital Train, LoB Vehicles
Hitachi Rail
Eddy Thesee
VP Group Products & Solutions Cybersecurity
Alstom
Marc Silverwood
Onboard Systems Manager
Northern Trains Limited
Gavin McAuley
Onboard Systems Compliance Manager
Northern Trains Limited
Tom Remberg
CISO
Bane NOR
Trond Eskild Tingstad-Stav
Service Owner Traffic Operations
Bane NOR
Joshua Edgley
Global Head of Fleet Security
Hitachi Rail
Damanjit Singh
Cyber Security Engineer – Signal Operations & Maintenance
Transport for London (TfL)
Jon Torode
Head of Engineering and Asset Performance
RKH Qitarat
2027 Speakers
🇬🇧 James Walker
Head of Digital Safety, Railway Safety Directorate
Office of Rail and Road
🇫🇷 Eddy Thésée
Vice President, Products Cybersecurity
Alstom
🇩🇪 Dr. Frank Werner
Cybersecurity Expert
Eisenbahn-Bundesamt (NSA Germany)
🇳🇱 Joseph Mager
Manager Cyber Governance
Nederlandse Spoorwegen
🇳🇱 Dimitri van Zantvliet
Director Digital Resilience / CISO
Nederlandse Spoorwegen
🇬🇧 Marc Silverwood
Onboard Systems Manager
Northern Trains Limited
🇬🇧 Gavin McAuley
Onboard Systems Compliance Manager
Northern Trains Limited
🇳🇴 Tom Remberg
CISO
Bane NOR
🇳🇴 Trond Eskild Tingstad-Stav
Service Owner Traffic Operations
Bane NOR
🇬🇧 Joshua Edgley
Global Head of Fleet Security
Hitachi Rail
🇬🇧 Bruno Corasolla
Global Head of Digital Trains
Hitachi Rail
🇶🇦 Jon Torode
Head of Engineering and Asset Performance
RKH Qitarat
🇬🇧 Damanjit Singh
Cyber Security Engineer (Signal Operations & Maintenance)
Transport for London
🇺🇦 Anatolii Protsiuk
Deputy Director for Corporate Security – Head of the Information Security and Personal Data Protection Division, Corporate Security Department
JSC Ukrainian Railways (Ukrzaliznytsia)
🇮🇪 Salman Munir
OT Cyber Security Manager
Iarnród Éireann
🇪🇪 Dmitri Ivanov
Chief Information Security Officer
AS Eesti Raudtee / Estonian Railways Ltd
🇬🇧 Mark Robinson
Chief Information Officer
DfT Operator
🇺🇦 Oleksandr Rykovtsev
Director of Corporate Security
JSC Ukrainian Railways (Ukrzaliznytsia)
2027 Sponsors
Sponsors
Sponsors
Exhibitor
Near Capacity for 2027. Register while places remain 📢
Sponsorship | Speaking | Workshops | Attending
Contact: [email protected]
Past Attendees Include 👥
Rail Cybersecurity brings together the organisations that operate, own, engineer, assure and secure railway systems, alongside the specialist technology and cybersecurity companies supporting them.
120–175
delegates per event
300+
organisations represented historically
13th
Annual Rail Cybersecurity Summit in 2027
Rail & Transit Operators / Infrastructure
- Abellio
- ADIF
- Angel Trains
- Arriva
- ARTC
- Austrian Railways
- Bane NOR
- Banedanmark
- BLS
- Calgary Transit
- Central Japan Railway Company
- CFL
- Chiltern Railways
- CN Rail
- Crossrail
- CSX
- DB Cargo
- DB Cargo UK
- DB InfraGO / DB Netz
- DB Regio
- DB Schenker
- DB Systel
- DB Systemtechnik
- Deutsche Bahn
- Direct Rail Services
- East Midlands Railway
- East West Rail
- Eversholt Rail
- Fintraffic
- Flix
- GB Railfreight
- Govia Thameslink Railway
- Great Western Railway
- Heathrow Express
- HS1
- HS2
- Irish Rail / Iarnród Éireann
- Land Transport Authority Singapore
- LNER
- London Northwestern Railway
- Metropolitan Transportation Authority (MTA)
- Metro Service Copenhagen
- Network Rail
- Network Rail Telecom
- Northern
- NS / Dutch Railways
- Porterbrook
- RKH Qitarat
- Rock Rail
- SBB Swiss Federal Railways
- SNCF
- SNCFL
- South Western Railway
- Sporveien
- STIB-MIVB
- Strathclyde Partnership for Transport
- The Copenhagen Metro
- Toronto Transit Commission
- Trafikverket
- TransPennine Express
- Transport for London
- Transport for Wales
- Transport UK Group
- West Midlands Trains
- YPTO
Rolling Stock, Signalling & Rail Technology
- Alstom
- Belden
- CAF
- CAF Signalling
- Camlin Rail
- DeltaRail
- duagon
- Egis Rail
- EKE-Electronics
- ENYSE
- Euro-Multitel
- Frauscher Sensortechnik
- HARTING
- Hitachi Rail
- Hit Rail
- Icomera
- IMH Technologies
- Knorr-Bremse
- Kontron Transportation
- Loram
- Nomad Digital
- OMICRON electronics
- Patentes Talgo
- Perpetuum
- Power Standards Lab
- Resonate Group
- Schweitzer Engineering Laboratories
- Selectron Systems
- Siemens Mobility
- Stadler Rail
- Telent
- Televic Rail
- Thales
- Turntide
- Westermo
Cybersecurity & OT Technology
- 4Secure
- Acalvio Technologies
- aDolus Technology
- Airbus CyberSecurity
- AM Cyber
- Ampere Industrial Security
- Applied Risk
- Auxilium Cyber Security
- Auxilium Pentest Labs
- BlackBerry
- Cervello
- Codewerk
- Comcast DataBee
- Complete Cyber
- Computacenter
- Context Information Security
- Cyber Innovation Hub
- Cyber Shield
- Cyberics
- Cygnia Technologies
- Cylance
- Cylus
- Cyolo
- DigiTribe
- Dragos
- Expandium
- Fortinet
- GDAK Cyber Solution
- Huawei Technologies
- Huld
- Hypasec
- IBM
- iHackLabs
- IL7 Security
- Industrial Defender
- Information Security Forum
- Irdeto Security
- Mandiant
- mnemonic
- Modux
- NCC Group
- Nozomi Networks
- OTORIO
- Palo Alto Networks
- Pen Test Partners
- RazorSecure
- Risk Ledger
- SecurityScorecard
- Shift5
- Stoïk
- WALLIX
- Waterfall Security Solutions
- Xage Security
- XONA Systems
Engineering, Consulting & Assurance
- Abbott Risk Consulting
- Adelard
- Amentum
- Aon
- Arcadis
- Arup
- AtkinsRéalis
- Bird & Bird
- Bureau Veritas
- Deloitte
- DNV
- Egis
- Expleo Group
- Frazer-Nash Consultancy
- HNTB
- Ineco
- NCB Rail Assurance
- Network Certification Body
- PA Consulting
- PROSE
- SYSTRA
- TÜV Rheinland
- VUZ
- WSP
Government, Regulators, Standards & Academia
- British Transport Police
- Cyber Security Agency of Singapore
- Danish Transport and Construction Agency
- Department for Transport
- DfTO
- Eisenbahn-Bundesamt
- ERTMS Users Group
- European Commission – DG CONNECT
- European Commission – DG MOVE
- European Union Agency for Railways
- Finnish Transport and Communications Agency
- Human Environment and Transport Inspectorate
- NCSC
- NCSC Netherlands
- Nuclear Decommissioning Authority
- Office of Rail and Road
- Rail Delivery Group
- Rail Safety and Standards Board
- Shift2Rail Joint Undertaking
- Traficom
- University of Birmingham
- University of Huddersfield
- University of Warwick
Additional Organisations Represented
- Aspen Insurance
- Hiscox
- Honda
- MAPNA
- Mondi Group
- Petroleum Development Oman
- Solventum
Past attendee organisations are shown to demonstrate the breadth of the Rail Cybersecurity community and do not imply participation in the 2027 event. Company names have been consolidated where the same organisation has attended under different subsidiaries or legal entities.
Get in touch
Enquire About Rail Cybersecurity 2027
Register your interest in speaking, sponsorship, exhibition or attending the next Rail Cybersecurity Summit.
Join the Rail Cybersecurity Summit WhatsApp Group
News
Rail Cybersecurity in 2027: AI, Connected Trains and the New Resilience Challenge
Rail cybersecurity is entering a new phase. As connected trains, AI, digital signalling and increasingly complex technology dependencies reshape railway operations, cyber resilience is becoming inseparable from safety and continuity. Ahead of the Rail Cybersecurity Summit 2027, we explore the key challenges shaping the sector.
Rail Cybersecurity: Key UK, European and North American Developments
Rail cybersecurity is entering a new phase as regulators connect cyber risk more closely with safety, rolling-stock procurement, AI governance, software assurance and operational resilience. This article examines the key developments emerging across the UK, Europe and North America—and what they mean for railway operators, regulators, manufacturers and technology suppliers.
Why Rail Supply Chains Have Become One of the Industry’s Biggest Operational Challenges
For many years, discussions about the rail supply chain have [...]
Senior Rail Leaders Join the Rail Supply Chain Forum 2026
The Rail Supply Chain Forum 2026 has announced senior speakers from Network Rail, Anglia Railway, DfT Operator Limited and Jacobs. Taking place in London on 10 November 2026, the Operational Risk Council forum will examine supplier integration, organisational readiness, systems assurance and the delivery of operationally resilient railways.
Operating Railways Through Complex Supplier Ecosystems
Modern railways depend on increasingly complex supplier ecosystems. Who owns the asset, who maintains it, and who is responsible when it fails?
