Agenda

• Why do friction points still exist between IT and OT regarding risk ownership, operational priorities, and security tolerances?
• Evaluating the reality of IT/OT convergence: Is it delivering better security outcomes or simply expanding the digital attack surface?
• Assessing the maturity of current governance, policies, and technical controls (like network segmentation) in hybrid environments.
• Moving from theory to practice: How to build a unified culture of accountability, trust, and clear communication between IT and plant operations.

– Moderator: Miguel Nascimento, CISO and Head of IT Infrastructure, Aperam
– Marcelo Assumpção, CISO & DPO, Elera Renewables
– Daniel Morales, Corporate Automation Manager, Braskem
– Danilo Cabrini, Corporate Manager of Electrical Instrumentation and Automation, bp bioenergy
– Cleber Guimarães Ferreira, Security Officer & Cyber Security, Klabin
.

• Attacker use of AI and how defenders will benefit from AI
• The evolving threat landscape from across the globe
• Ransomware and multifaceted extortion as the most disruptive form of cybercrime
• Maturing security operations in the cloud & The growing threat of infostealer malware
• The importance of preparing for post-quantum cryptography
• Insights specifically for Latin America

.
– Gemina
.

• Analyzing an industrial case study on how the integration of IT and OT reveals new security vulnerabilities.
• Exploring how public-private partnerships can help navigate the specific regulatory hurdles of securing hybrid IT and OT environments.
• Leveraging shared threat intelligence and ecosystem-wide collaboration to bridge the cultural gap between IT security and plant operations.
• Implementing best practices and clear policies to overcome cultural friction and drive alignment between teams

.
– Marcus Abreu, Head of Innovation, Digital & Operational Technology, Acelen & Iode Reis, OT Cybersecurity Specialist, Acelen
.

• How we can manage increased risk caused due convergence through a robust security strategy.
• How a risk management approach can help to ensure our systems are protected
• Where GRC (Governance, Risk, Compliance) programmes can aid in defending against IT threats to our OT systems

..
– Claudio Saito, IT/OT Manager, Bunge & Gabriel Volsi, Global OT Cybersecurity Specialist, Bunge
..

• What are the main tools when it comes to monitoring the third-party when giving them access to your infrastructure for management, maintenance, and even administration?
• If the third-party got compromised, how confident are any of you that they will notify the organization? And how can this be assured?
• Does Zero Trust play a big role in third-party risk management?
• What features do you expect to be implemented when it comes to Zero Trust for Vendors management?

.

• How you compare to your peers in areas including risk and readiness
• The opportunities created by the interconnection of infrastructure
• The need for securing the OT environment
• New technologies to protect the Oil and Gas infrastructure

.

• Why is it simpler to buy another software tool than to fix a broken security culture?
• Why does expensive training fail to change habits, and what actually works?
• How do we pitch human-centric security to executives who only want to buy technical fixes?
• How do you stop employees from viewing security as an IT problem rather than their responsibility?

– Moderator: Yan Gomes, Head of Corporate IT & Projects and Digital Transformation – Cyber – Brazil, PneuBras
– Bruno Sicchieri, RISO, Bunge
– André Gomes, CISO, EuroChem Brazil
– Rogerio Alves, CISO, Hirota Food
– Gabriel Calegari, Senior Manager, Cybersecurity, Nestlé
.

• Where does AI deliver genuine, measurable value for OT security?
• What real-world examples show AI successfully defending industrial networks?
• What new vulnerabilities does AI introduce, and how do we mitigate them?
• How do leaders adopt AI over the coming years while keeping security paramount?
• Will upcoming innovations like Quantum Computing impact security even more than AI?

– Moderator: Rodolpho Guedino, CTO, Atlas Renewable Energy
– Daniel Morales, Corporate Automation Manager, Braskem
– Adriano Lima, Regional CISO, Brink’s Inc
– Alexandre Lattaro, BISO, Kenvue
– Eduardo Marsola do Nascimento, Head of OT Security – Interim, Petrobras
.

• Define overall expectations and set measurable goals for your organization
• Gather data on potential threats and risks
• Identify key stakeholders and successfully secure cross-department buy-in
• Create a risk remediation roadmap and vendor-agnostic management solutions to successfully start protecting your OT systems.
  .

• How we can best overcome new AI threats in light of an expanding threat landscape with attackers increasingly utilizing AI for their attacks 
• Provide a deep-dive into how we can adapt technically to these new threats brought by AI
• Explore how we can build a comprehensive strategy that defenses our OT infrastructure against AI-based threats
• Provide an extensive roadmap of how we can build effective cyber defenses that take into account the evolving nature of AI

– Alexandre Lattaro, BISO, Kenvue
– Marcelo Gianetti, Cyber-Security for Operations Manager, Kenvue
.

• Proactively contributes to threat modeling and generation of security requirements
• Enables traceability and auditability for risk and security teams
• Provides actionable guidance for developers to build products that are compliant to industry regulations and secure by design
• Made for industry leaders, professionals, and cyber practitioners who want to achieve compliance and build secure, trusted products

.

The session will address: 

• Why per-device engineering — connectors, parsers, coded rules — is the real barrier to legacy OT visibility
• How AI removes that barrier: no parsers, no per-device rules, priorities written by your own team
• As natural language – rules that scale across vendors and generalize to unanticipated scenarios
• Practical architecture and cost-control strategies that scale from one site to a regional fleet
• Keeping AI trustworthy in OT: verifiable evidence, human decision-making, and data staying under your control
• Lessons learned, real examples, and the impact on how fast incidents are understood

– Rodolpho Guedino, CTO, Atlas Renewable Energy
.

As part of Braskem’s industrial cybersecurity transformation, a global OT asset inventory solution was deployed across more than 40 sites in four countries. Covering over 8,000 assets, the initiative transformed a manual inventory process that previously took weeks into an automated, near real-time capability. Beyond improving asset visibility, the program established governance processes, strengthened collaboration between cybersecurity and automation teams, and created a trusted foundation for vulnerability management, compliance, risk assessment, and operational decision-making. This session will share the implementation journey, key challenges, lessons learned, and the value of turning OT data into actionable risk intelligence.

– Renata Araújo, Leader of Cyber OT & Industrial Digital Solutions, Braskem
.

• How we mapped our industrial footprint to establish a realistic baseline for operational risk.
• How we moved away from generic IT threat assessments to design a strategy built specifically for physical production environments.
• The exact roadmap we used to secure funding and buy-in from both plant managers and executive leadership.
• The key milestones and lessons learned during our multi-year rollout across diverse manufacturing sites.

.
– Uilson Souza, Global Information Risk Lead, Mars
.

An overview of the key challenges, lessons learned, and achievements we have experienced while integrating IT and OT SOC operations into a single platform. The presentation would also explore how this synergy can generate significant value for the organization, strengthen threat visibility, and enhance the overall cybersecurity maturity of industrial environments.

– Julio Concilio, Global Information Security Leader, Braskem

As cybersecurity risks continue to grow in critical infrastructure environments, the P-84 and P-85 offshore platform projects adopted a proactive Security by Design approach. Three cybersecurity workshops, in China and Singapore, were conducted during the engineering phase to assess industrial automation systems before implementation. The initiative identified architectural improvements, security controls, and technology updates, reducing cybersecurity risks during commissioning and helping ensure a smoother transition to operations without security-related barriers to production startup.

– Eduardo Marsola do Nascimento, Head of OT Security – Interim, Petrobras
.

• How can we ensure that regulatory mandates actually improve plant floor security instead of just creating paperwork?
• Where do new executive liability laws change how the C-suite funds and prioritizes industrial cyber risk?
• How can passing an audit be misleading when securing our factories against modern cyber threats?
• How can international standards like IEC 62443 and NERC-CIP be utilized in absence of strict regional regulations?

– Leandro Ribeiro, CISO, Hospital Sírio-Libanês
– Cleber Guimarães Ferreira, Security Officer & Cyber Security, Klabin
– Cleber Santos, ICS/OT Cybersecurity Consultant, Suzano
– Uilson Souza, Global Information Risk Lead, Mars
– Igor Gutierrez, ISO & DPO, B. GROB do Brasil S.A.
.

Industrial automation assets often remain in service for decades after vendor support ends, creating significant cyber risk. This session explores how to overcome fragmented manufacturer lifecycle information by building a scalable, multi-vendor approach to collecting and consolidating EOL/EOS data. Attendees will learn how to correlate lifecycle status with OT asset inventories to create a living view of obsolescence exposure, enabling more informed risk prioritization, network segmentation, compensating controls and long-term replacement planning.

– Gleison Baioco, Cybersecurity Coordinator, ArcelorMittal

.