Cyber risk in industrial environments carries consequences far beyond data loss—it can disrupt essential services, damage equipment, impact safety, and affect entire communities. In the utilities sector, this risk is operational, immediate, and escalating. Water treatment plants, electric grids, and energy distribution networks are now routine targets for adversaries seeking to exploit weaknesses in industrial control systems with traditional malware, ICS/OT tailored malware and living off the land techniques where no malware is needed.
The Winter Cyber Solutions Fest: Utilities and Critical Infrastructure Forum is a virtual event built specifically for utility asset owners, technology vendors, operators' staff, engineers, and cybersecurity professionals responsible for defending the ICS/OT systems that make, move, and power our world. This forum delivers focused insight into today’s evolving industrial threat landscape, emerging defense strategies, and real-world technology solutions to build resilient ICS/OT cybersecurity programs beyond just the traditional IT security approaches—without unnecessary complexity or cost.
Attendees Can Expect
Case studies on ICS/OT intrusions and ICS cyber incidents
Strategies to defend against supply chain threats and ransomware etc.
Practical methods to secure remote access into operational networks
Live technology demonstrations of ICS/OT security tools for proactive response
Alignment with frameworks and the 5 ICS Cybersecurity Critical Controls, etc.
Expert panel perspectives from front-line engineers and cybersecurity leaders
What You’ll Gain
Actionable lessons from real incidents in utilities
Techniques to detect, contain, and respond to ICS/OT cyber attacks
Approaches that protect safety, reliability, and uptime
Access to a collaborative peer community and expert network
Free registration and CPE credit eligibility
Join us this winter to collaborate, learn, and strengthen cyber resilience across critical infrastructure with practical, affordable, and engineering-aligned solutions.
Dean Parsons, CEO of ICS Defense Force, teaches ICS515 and co-authors ICS418, emphasizing ICS-specific detection, incident response, and security programs that support OT operations—aligning practitioners and leaders on clear, defensible action.
Defending Critical Infrastructure in a Connected World | A Fireside Chat on AI, Zero Trust and Energy Sector Risk
As energy infrastructure becomes increasingly connected, digitally operated, and reliant on data-driven workflows, the cyber risk to these systems continues to evolve in both complexity and consequence. At the same time, many energy organizations are adopting artificial intelligence to augment limited staffing, streamline operations, and improve visibility across IT and operational environments. These shifts are changing not only how energy systems operate, but how they are targeted and defended. This fireside chat brings together two practitioners to discuss how the modern energy threat landscape is being reshaped by connectivity, AI-enabled operations, and expanded remote access. Through guided discussion supported by slides, the speakers will explore where AI can meaningfully enhance security and operational resilience, where it can introduce new risk if poorly governed, and how Zero Trust Network Access is increasingly being used to secure human and machine access to critical systems. Drawing on real-world incidents and field experience, the conversation will focus on practical lessons, tradeoffs, and decision points energy security teams are facing today. Attendees will leave with a clearer understanding of how to align AI adoption, Zero Trust principles, and threat-informed defense strategies to protect the reliability and resilience of energy infrastructure.
Inside the Wire: What NERC CIP-015-1 Teaches All Utilities About Internal Network Visibility
NERC CIP-015-1 now mandates Internal Network Security Monitoring for bulk electric systems—but the threats driving this requirement don't stop at the grid. This session unpacks the principles behind INSM and offers a practical framework any critical infrastructure operator can apply, regardless of regulatory jurisdiction. Beyond detection, we'll examine how connected security platforms that unify visibility across IT and OT enable faster, coordinated response—turning alerts into action before adversaries achieve their objectives.
