Critical Infrastructure Security Summit

Organizations can’t protect what they can’t see, making visibility across increasingly complex IT and operational technology environments critical to managing cyber risk. Federal and industry leaders will discuss strategies for identifying assets and vulnerabilities, monitoring networks and using analytics and threat intelligence to better understand and respond to risk.

IT and operational technology (OT) environments are becoming increasingly interconnected — and recent cyber incidents targeting water systems have highlighted risks of exposed industrial control systems. This panel will explore approaches to protecting IT and OT, including zero trust, identity and access controls, secure remote access and strategies for maintaining continuity as infrastructure evolves.

Experts will identify the threats, vulnerabilities and security challenges — and the strategies and programs tackling them — that federal leaders should be paying closest attention to over the next year.

The flywheel — a critical component in a machine to increase its momentum — is also a critical symbol representing our publication’s goal to keep federal IT decision-makers informed on technology’s impact on government. This momentum is what fuels the constant need for transformers to innovate in cybersecurity and communicate evolving cyber strategies across the ecosystem.

Artificial intelligence is giving critical infrastructure organizations new tools to detect suspicious activity and respond to cyber threats faster. Leaders will discuss how they are using AI to identify anomalies, automate parts of incident response and strengthen infrastructure monitoring, as well as the data and technology foundations needed to deploy AI effectively.

Critical infrastructure security increasingly depends on understanding the technology, software and vendors that make up complex supply chains. This panel will examine how organizations are taking inventory of their technology stacks, addressing third-party risk and improving vendor and software visibility.

Preventing every cyberattack may not be possible, making resilience and continuity essential to critical infrastructure security. Experts will discuss how organizations can prepare for major incidents through response planning, cyber exercises, red teaming, resilient data and backup strategies, and other measures designed to keep essential services running during and after an attack.