















Secretary / State Chief Information Officer, Maryland Department of Information Technology
Director, Cyber Warfare, OUSW Acquisition & Sustainment
U.S. Department of War
Cybersecurity Surface Inspector
Transportation Security Administration Department of Homeland Security
Director – Office of Railroad Systems and Technology, Office of Safety, Federal Railroad Administration, U.S. Department of Transportation
Director, Cybersecurity, Association of American Railroads
Cybersecurity Surface Inspector
Transportation Security Administration Department of Homeland Security
Assistant Vice President – Information Technology
Paducah and Louisville Railway
Vice President, Technology and Chief Information Security Officer
CSX Transportation
Cybersecurity and Risk Analysis, Railroad Systems and Technology
Federal Railroad Administration, U.S. Department of Transportation
CTO Global Public Sector, CrowdStrike
Sr Mgr Fleet Cybersecurity
Amtrak
Chief Information Security Officer
State of NY Metropolitan Transportation Authority
Senior Data Scientist
Cybersecurity and Infrastructure Security Agency (CISA)
Product Manager
Cylus
Founder and Principal Consultant
JenAI Group
OT Practice Director
Guidepoint Security
Managing Director OT Security, Armis
Intelligence Analyst
Federal Bureau of Investigation
Principal Security Architect
CSX
Director and Senior Fellow, Center on Cyber and Technology Innovation
Foundation for Defense of Democracies
Senior Policy Analyst
Foundation for Defense of Democracies
Join us on Board. Get Your Pass.

As federal transportation agencies adopt generative AI to enhance workforce productivity and mission outcomes, security and governance must be built in from day one. From employee use of GenAI tools to the development of agentic AI applications, organizations face new risks around data protection, access, and operational trust. This roundtable will explore how agencies like Amtrak and the FRA are approaching GenAI adoption secure by design—balancing innovation with governance, visibility, and control. Participants will discuss practical considerations for enabling AI safely while maintaining compliance, resilience, and trust across the transportation mission.

AI is starting to play a bigger role in rail cybersecurity, from monitoring and detection to supporting response decisions. In some cases, it helps teams see issues sooner and reduce noise. In others, it introduces new risks, including new ways for attackers to automate activity and avoid detection. This roundtable is a practical discussion about how AI is actually being used in rail environments today. We’ll discuss where it makes sense, where it doesn’t, and how operators can put guardrails in place so AI supports human judgment in systems where safety and reliability come first.
For decades, the primary defense for rail signaling, command, and control systems was "security by isolation." However, the acceleration of digital transformation—driven by the need for predictive maintenance, remote asset management, and high-speed connectivity; has rendered the traditional air-gap a relic of the past. As rail networks converge with IT and IoT, the industry faces a critical inflection point: the perimeter is no longer a physical or logical boundary, but the identity of the users and devices accessing the fabric. This roundtable will explore the practical transition from legacy "implicit trust" models to an Identity-Centric Zero Trust Architecture (ZTA). Participants will engage in a collaborative dialogue on: The shift from Layer 3 (Network) to Layer 4/5 (Application) connectivity to limit lateral movement. Managing "Machine Identities" in distributed rail environments where traditional MFA is physically or operationally difficult. Balancing high-security access with the mission-critical need for rapid, remote maintenance during service disruptions.

To help organizations prepare for the reality of these interdependent threats, Bureau Veritas Cybersecurity is leading live cyber crisis simulations at the upcoming Defend the Railroad event in Maryland. This immersive experience takes participants out of their comfort zones and places them directly into a high-pressure scenario: A multi-faceted cyberattack strikes multiple railway vendors at the height of the FIFA 2026 World Cup – now what? Participants will: - Step into real-world roles such as railway operations, communications, legal, CISO, and IT response - Navigate evolving incidents based on realistic threat scenarios - Collaborate under pressure to assess risk, manage communications, and make tough calls - Gain a hands-on understanding of how operational and cybersecurity decisions must work in tandem Whether you’re a security leader, IT practitioner, or operational stakeholder, this simulation is a must-attend opportunity to test your readiness and sharpen your response playbook.

While the industry focuses on the "brain" of the train, it often overlooks the "body"—the massive industrial infrastructure of power substations, building management systems, and maintenance depots. This session explores the cybersecurity of the extended rail enterprise, where traditional IT security tools fail and specialized signaling tools don't reach. We will analyze the risks in the "silent" assets—such as traction power SCADA and station life-safety systems—and discuss how a unified Cyber-Physical Systems (CPS) approach can provide the visibility needed to prevent a "minor" infrastructure glitch from becoming a major network-wide service disruption.