ManuSec Europe: Virtual Edition

• What should be our first steps in the scenario of a cyber attack on our OT systems? What should be our priorities in both protection and response?
• Why is an attack on OT different from any other form of cyber attack? Should the standard playbook also be applicable to OT attacks?
• Where can Table Top Exercises and OT Cyber Ranges support our incident response strategies?
• What can we do to ensure that downtime is limited and that impact is minimised?
• How can we best communicate with our boards in the event of an attack? How can we ensure we have the necessary funding to protect against future incidents?
• How can we best take care of our teams following an attack? What can we do to tackle stress and anxiety that may occur post an attack?

• Explore why a business continuity strategy is significant in OT manufacturing environments
• Discuss a case study overview of a cyber incident impact on operations and supply chain
• Examine how we can ensure disaster preparedness through risk assessments and continuity planning
• What were the lessons from incident handling and restoration
• How we can build long-term resilience within our own manufacturing organisations

• How we built a framework of continuous monitoring for real-time anomaly detection and rapid incident response
• How we leveraged automation to neutralise threats before they could disrupt critical OT operations
• Where we restricted lateral movement by enforcing granular, segmented network zones across production environments
• Where we applied Zero-Trust principles to control access, verify identities, and contain risks proactively
• How we utilised strengthened collaboration between IT and OT teams to ensure unified visibility, faster decision-making, and sustained resilience

Learn how critical manufacturing organisations attest for compliance. See into a process that:

• Bridging the OT Security Gap: Analysing why conventional IT authentication methods often fail in industrial settings and identifying the critical security risks posed by shared credentials at the endpoint level.
• Next-Generation Authentication Paradigms: Exploring the transition towards non-repetitive, unidirectional dynamic code technology that enables secure user and device verification even in offline or air-gapped environments.
• Navigating the Regulatory Landscape: Discussing practical strategies to align OT infrastructure with evolving global standards such as IEC 62443, NIS2, CRA, and NERC CIP to ensure operational resilience and compliance.

• How we identified and prioritised vulnerabilities across complex OT environments to build an effective roadmap for OT vulnerability management
• How moving from static asset inventories to dynamic, real-time visibility helped us
• The importance of integrating IT and OT perspectives to create a unified risk picture
• How we can overcome challenges with our legacy systems, vendor patching, and resource constraints and where we can utilise automation and threat intelligence to strengthen our OT vulnerability management

• How we developed and operationalised a Rapid OT Incident Response capability across multiple production sites to strengthen resilience
• Why proactive risk management in OT requires more than visibility and vulnerability data — and how plant-ready response structures close this gap
• Practical lessons from building response playbooks, decision pathways, and cross-functional roles that support both security and production continuity.

This session will bring together senior representatives, CISOs and Head of OT Security to discuss and debate, who really is responsible for operational security? And who should be? We’ll ask:

• What responsibilities do you have in securing your organisation’s cyber security? What responsibilities should you have?
• Why is it important to define clear organisational roles responsible for security?
• Do we need an independent Chief Operational Security Officer? Or Can The CISO do all of this?
• How can you build a culture of security internally that ensures cyber resilience – no matter who is in charge?
• Who should ultimately be responsible for our operational security through our organisations? Where should cyber security fit in an organisation?