As a fundamental part of its activity, the Industrial Cybersecurity Center (CCI) hold its 21st International Congress of Experiences in Industrial Cybersecurity 2023 – Bilbao (Spain) from October 3 to 5 at (9:00 a.m. to 2:00 p.m. CEST), with Basque CyberSecurity Center as host. It has been one of the reference events for the European market, and a meeting point and exchange of knowledge, experiences and relationships of all the actors involved in this field.
The focus of the congress hs been practical, based on real application cases and lessons learned managing the risk of the digital industry. It allowed OT and IT professionals, industrial manufacturers, cybersecurity, engineering, consultants, integrators, end users and critical infrastructure operators to share knowledge and experiences on the different perceptions of the reality that Industrial Cybersecurity is today.
In order to promote improvement in industrial cybersecurity and recognize the efforts of those professionals involved in this discipline, the CCI offers congress attendees a contest, with the aim of motivating and encouraging learning by rewarding professionals for their knowledge. and skills to improve the safety and reduce the risk of industrial technologies.
The competition will consist of preparing a secure architecture for an industrial digitalization project, for which a use case will be presented. Two hours will be available to prepare a recommended secure architecture using the RECIN platform https://recin.cci-es.org.
Participants in this workshop must have a laptop, they will have the opportunity to collaborate in teams, and they will have 5 minutes at the end of the workshop to present and defend their recommended architecture. A panel of three CCI experts will evaluate all proposals submitted during the workshop and determine the winning team, which will be rewarded with a very special prize.
If you are interested in participating in this workshop you must request your attendance by sending an email to info@cci-es.org indicating in the subject “Attendance at the Contest building a secure architecture”.
He is responsible for Platforms, Innovation and Talent. In addition to:
José Valiente is Director and Head of Coordination and Communication of the Industrial Cybersecurity Center. Technological and Security Consulting Specialist. He has more than 20 years of experience working in large consulting firms, where he has developed his professional career both in the field of information technology and in the industrial automation sector. He has participated in dozens of publications on industrial cybersecurity, as well as in multiple congresses, events, and specialized cybersecurity courses. He currently holds multiple certifications in IT and security vendor solutions, as well as the CISM professional certifications from ISACA and the Global Industrial Cyber Security Professional (GICSP) from GIAC.
Susana Asensio is a Member of the Board of Directors, Director of the Professional School of Industrial Cybersecurity, and Project Manager at the Industrial Cybersecurity Center. Graduated in Software Engineering, and Technical Engineer in Computer Management, both from the Polytechnic University of Madrid (UPM), Susana is a specialist in research and development projects in security and technology. He has a postgraduate degree as a Specialist in Promotion and Management of International R&D Projects and Actions from the UPM. After working as a researcher in Information Technology (IT) at the UPM, in recent years, and prior to joining CCI, she has been combining the management of IT security projects, and the coordination of various IT security groups. in the Multisectoral Association of Electronics, Information and Communication Technologies, Telecommunications and Digital Content Companies (AMETIC).
She has worked on national and international projects related to digital identity, digital certification services, data protection, cloud and critical infrastructures.
Susana has coordinated and promoted specialized IT services forums, although her greatest previous dedication has been to the AMETIC Information Security Commission, with a broad representation of the Spanish Cybersecurity Industry (more than 70 companies), covering areas such as digital identity, digital certification service providers, critical infrastructures, and industrial cybersecurity, among others.
Since joining CCI in 2014, he has focused his career on cybersecurity applied to industry, being a regular speaker at conferences, seminars and courses on industrial cybersecurity.
Maite Carli is Head of Communication and General European Coordinator of the Industrial Cybersecurity Center. Specialized in network and communications administration, industrial critical infrastructures, industry 4.0, data analysis technologies in the Health sector and industrial cybersecurity, having completed several advanced courses and a master’s degree. She has developed her professional career for 9 years in the United Kingdom.
Patrick Miller has spent his career protecting and defending critical infrastructure as an independent regulatory advisor. He is the CEO of Ampere Industrial Security, as well as the founder, director and president emeritus of EnergySec and US. Coordinator of the Industrial Cybersecurity Center. Patrick’s diverse experience spans the energy, telecommunications, water, and financial services verticals, including key positions with regulatory agencies, private consulting firms, utility asset owners, and commercial organizations.
Systems Engineer Graduated from the University of Lima (Peru) with more than 10 years of experience in Information Technology and Telecommunications in the Energy and Hydrocarbons Sector. Specialist in Information Security and Cybersecurity in Critical Infrastructures, he is an active member of the Industrial Cybersecurity Committee of the Regional Association of Companies in the Oil, Gas and Biofuels Sector of Latin America and the Caribbean (ARPEL). He is an ISO 27001:20013 Auditor accredited by The International Register of Certified Auditors (IRCA), and has international certifications such as Project Manager Professional (PMI), ISO 27001:2013 Internal Auditor and ISMS ISO27001:2013 Implementer.
He currently leads the Information Security Area of Compañía Operadora de Gas el Amazonas (COGA), a company specialized in the management, operation and maintenance of infrastructures in the energy sector.
Søren Egede Knudsen is a senior cyber security consultant with more than 25 years of experience in computer networks and cyber security. Søren started his professional work with IBM 3270 systems in 1991 and IT network and cyber security since 1993. Since 2009, Søren has worked in ICS/OT cyber security and is today considered a cyber security expert in the ICS/OT environment. OT and has been involved in many large and complex projects internationally within their fields.
In addition to working as a senior consultant and subject matter expert in ICS/OT Cybersecurity, Søren is an international public speaker at ICS/OT Cybersecurity conferences.
Søren’s specialty, in addition to technical areas, is leadership communication and how to present cybersecurity information to management. Søren has worked as CTO of Ezenta, a security company in Denmark, as well as chief advisor to the Danish Energy Agency, in addition to consulting work. Søren is today CCIE and GIAC GRID certified, as well as an MBA from Henley in the UK.
Gilles Loridon has worked as an IT Consultant for 28 years and specialized in Cybersecurity for over 23 years. In 1999, Gilles joined the European leader in strategic security, as a senior security consultant, and later became CEO of Global Security Network, its Middle East branch. Gilles has led and implemented successful cybersecurity projects for security agencies, military departments, nuclear and power companies, and oil and gas corporations in Europe, Africa, Asia, and the Middle East. Gilles has been conducting cybersecurity and VA/PT audits, CSMS ISA 62443 implementations, risk assessments, and awareness training in the energy and government sectors. Gilles is certified as an ISA/IEC 62443 Cybersecurity Fundamentals Specialist and an elected ISA UAE Section Leader.
Agustín Valencia is an Industrial Engineer from ICAI, with additional training in different fields such as Maintenance Management, BWR Nuclear Technology and more recently Director of Security, Master of Computer Security and CISM. With more than 20 years of experience, he has covered all areas of the world of energy, from Engineering to Operation and Maintenance in combined cycle and nuclear power plants to relevant sectors such as Renewables, Smartgrids or electric vehicles, and has participated in working groups. of the World Economic Forum.
Since 2011, responsible for cybersecurity in the nuclear sector. Leading the development of plans and analysis of cybersecurity risks in critical infrastructures in accordance with the PIC Law. Also as Head of Engineering for instrumentation and control and cybersecurity projects, modernizing distributed control platforms and introducing cybersecurity from design or redesigning network architectures and control systems focused on strongholding, network segmentation, whitelisting and SIEM-IDS on security systems. the main manufacturers (GE, Honeywell, Schneider-Electric, etc). Currently, Head of OT Security Business Development at Fortinet.
Additionally, Agustín participates in various activities as a professor at the Professional School of the CCI, Professor in the Master of Cybersecurity at the Universidad Pontificia de Comillas, Collaborator of the ISA99 and Top 20 Secure PLC Coding Practices Committees.
Antonio Navarrete is a technical engineer in computer systems with more than 20 years of experience. The last 15 years focused on industrial cybersecurity. At Fortinet, he currently leads the technical expertise for this area in Iberia, advising clients on best practices and related solutions.
Cesar is a Telecommunications Engineer and MBA. He has more than 25 years of experience in the network and cybersecurity area. With a master’s degree in industrial cybersecurity from the CCI, and other certifications in the field such as CISSP (Certified Information Systems Security Professional), CEH (Certified Ethical Hacker) or CCDP/CCNP (Cisco Certified Design and Network Professional), he is currently responsible for development Cyber OT business at Rockwell Automation. Previously, he held other positions of responsibility related to cybersecurity and networks in OT, IoT and IT environments in other international companies and public bodies. Enthusiastic and student of cybersecurity regulations and reference frameworks and their practical, proportional and reasonable application to corporate environments and public entities, of good cybersecurity governance practices, and of the influence of new technologies such as AI, Big Data, Cloud, ZTNA, SASE, Blockchain and Edge Computing and IoT in the improvement and spread of Cybersecurity in all types of organizations.
Ramón Quirós is a product manager for control and communication systems at Phoenix Contact. Specialized in functional safety (Safety Relays, Configurable Safety modules, Safe I/Os,…), HMIs and Industrial PCs, industrial communication technology (Industrial Ethernet, Remote Communication, Wireless…) and cybersecurity.
Víctor Egido has been a Senior Security Engineer at Tenable Iberia for 5 years, with extensive experience in the sector.
He has certifications such as Certified Information Security Manager (CISM), Computer Hacking Forensic Investigator (CHFI) and Certified Ethical Hacker (CEH). In addition, he is Director of Security for the Ministry of the Interior of Spain, as well as a good number of
technical certifications. He also has experience as a solutions architect in data centers and
Cloud Computing. He has carried out projects for the Inter-American Development Bank (IDB), including the
implementation of a security program for critical infrastructures in Chile, the creation of a critical infrastructure protection plan for Bolivia and the master plan for the development of ICT infrastructures and services in Bolivia.
Iván Gutiérrez is a cryptography and cybersecurity enthusiast, a software engineer with a master’s degree in intelligent systems, and is in constant contact with cutting-edge research and technologies. Currently, he applies his experience in Distributed Ledger Technologies and Privacy Enhancing Technologies for TECNALIA. Iván has developed his technical capabilities by collaborating with the two main global blockchain alliances (Hyperledger and Enterprise Ethereum Alliance) and the national network of distributed digital economy (Alastria). Innovation is essential for success, and for this reason, Iván regularly contributes to specialized presentations, teaching and research articles.
Maurizio is an experienced Industry 4.0 thought leader. With a consultative approach, Maurizio supported clients for more than 30 years on the journey of digital transformation with experience in country management, general manager and regional sales management in EMEA. Maurizio is a “Change Agent” in Industrial Digital Transformation with a solid experience of 14 years in Cybersecurity and spent more than the last 8 years in OT Security/ICS Cybersecurity. Maurizio’s areas of interest include asset performance management and predictive maintenance, augmented industrial intelligence and machine learning. Maurizio has a mentality focused on creating value. Maurizio was a Speaker at OT Security Conferences such as CSET 2019, CSET 2022 (Industrial Cybersecurity for Critical Infrastructures), at AFCEA 2018 (Armed Forces Communications & Electronics Association: ICS Cybersecurity), CCI Madrid, SPS Parma 2022 and 2023, Round Table with Marsh 2023 , Webinar with Nozomi 2023. Maurizio taught the university about Industrial IoT and AI. Maurizio spent over 25 years with US software organizations starting operations in EMEA. Maurizio lives in Rome Italy with his family.
Marcello has been in TXOne Networks since November 2022 with the role of Principal Presales Engineer for South EMEA.
Expert in IT/OT security topics and solutions, within the role held he is able to best support customers of
the Region in understanding and adopting Cyber Defense solutions in the sector of Automotive, Manufacturing, Pharma, Energy, Transportation, Chemical, OIL & GAS, Healthcare and more.
His responsibility also covers the enablement and support of strategic partners, both for their technical competences and for designing and sizing of security architectures.
During his professional career in Cyber Security, started in 1997, he helped most of the TOP Enterprise and Gov customers in Italy in adopting best practices, architectures and solutions to protect their critical IT and OT environment against Cyber Attacks achieving the required resilience and business continuity
aligned with their Risk Plan.
Appreciated Author and Speaker in the world of Cyber Security, with a summary of the activities carried out on Linkedin: https://www.linkedin.com/in/marcello-romeo-041454/
Education: Master’s Degree in Computer Engineering
Pedro Viana, with more than 15 years of experience in IT, has developed his career in consulting and cybersecurity in different companies, evolving into technical management in end customers, he joined Kaspersky in 2018 as a pre-sales manager, reinforcing business development mainly as a focal point of the solution. industrial Kaspersky Industrial CyberSecurity. He was appointed Head of Presales in 2022 collaborating in the evolution of the presales department.
Mateo Madariaga, passionate about the industrial world, digitization and computer security, with extensive experience in business development, commercial management and consulting for software development and cybersecurity companies, specializing in recent years in cybersecurity for OT/ICS/IoT environments . Since 2022, he has been part of the Kaspersky Iberia team and is responsible for the OT & IoT cybersecurity business unit.
Experienced Sales Business Development Manager with a demonstrated history of working in the Information Technology and Services Industry. Skilled in OT Cybersecurity, Business Continuity, Storage and Data Protection, Optical Networks, Cybersecurity, ITIL and High Performance Computing. Strong engineering professional with an Engineer’s degree focused in Telecommunications from Universidad Politécnica de Madrid.
Jesús has a solid background in various branches of Engineering such as Electronics, Telecommunications and Industrial, being a graduate in Industrial Electronic Engineering and a Master in Electronic Systems in Intelligent Environments, among other studies, both degrees with the best record of his class
Jesús has spent years developing in the area of Cybersecurity, working in renowned globally accredited laboratories, where he participated in the development of software and product certifications, such as Common Criteria, Amazon AVS, CTIA, IoXt, ETSI EN 303 645, GSMA IoT, NESAS, on systems and devices from the IoT, Automotive, Telecom and Medical sectors. In addition, he actively participated in the accreditation of several of these
certifications for the laboratory being in charge of the development of the R&D area at the same time that I was Project Manager in the execution of both certification projects, as well as Pentesting and other Cybersecurity activities.
Jesús Muñoz is currently Cybersecurity Manager and head of the Capgemini Cybersecurity Center in Malaga. Participates in the development of lines of work in the Industrial / consumer IoT, Automotive, Telco, Healthcare, Energy and Railway sectors as well as in projects in areas such as Aeronautics, Smart Industry or where product evaluation is involved.
Given his knowledge in the field of Cybersecurity, especially focused on Hardware, he collaborates and is a member of several working groups in entities such as ETSI, GSMA (NESAS, fraud), 5GAA, O-RAN and IoXt among others, as well as speakers at conferences and courses such as RootedCON.
Oscar is currently the head of global cybersecurity for the GBfoods group, a company in the food sector with 19 factories, more than 20 offices and products present in more than 50 countries. Their responsibility includes both cybersecurity of the industrial environment and cybersecurity of the IT environment in all its areas (applications, infrastructure and communications, workplace, user awareness, regulatory and legal compliance, operation and incident management, recovery, etc. .).
Prior to his time at GBfoods, Oscar served as an executive in Big4’s IT consulting departments, leading cybersecurity services and projects, from master plans and deployment of tools to ongoing services for large multinationals, highlighting among them the management of a multi-client SOC of more than of 40 analysts and the leadership of teams specialized in incident response and forensic analysis for prominent public services, covering more than 200,000 users.
Joan es actualmente Service Delivery Manager en el departamento de Ciberseguridad para Deloitte España especializado en entornos OT-IoT. Actualmente se encuentra liderando la ejecución de los proyectos enfocados al ámbito industrial en la demarcación de Cataluña, Aragón, Baleares y Andorra. En el equipo del cual forma parte ha desarrollado más de 180 proyectos orientados al entorno industrial en los últimos años. Además también ha colaborado en el desarrollo y optimización de los proyectos desde el equipo de tecnologías emergentes en Deloitte.
En etapas anteriores, Joan ha participado en proyectos nacionales e internacionales proporcionando su experiencia a los múltiples clientes con los que ha trabajado.
Miguel Llin Terol is an industrial engineer from the Polytechnic University of Valencia with a specialty in Industrial Automation and Robotics. He has extensive experience in the field of industrial cybersecurity in all types of OT cybersecurity evaluation and consulting projects in numerous sectors, such as electricity (in energy generation, transportation and distribution systems), water, logistics, food or manufacturing. . He is currently coordinator of the OT consulting field in the industrial cybersecurity area of S2 Grupo.
Daniel López Lago is an Information Technology Engineer with experience in the field of industry and energy. He currently works at Petronor, S.A., where he works key functions in supporting existing infrastructure in the Industrial Complex during more than 10 years.
As responsible for communications and cybersecurity, OT is responsible for the maintenance and administration of computer and communication systems, leading the development of cybersecurity plans in critical infrastructures in compliance with the PIC law.
Antonio Martínez is an expert in IT/OT Security technologies, with more than 30 years of experience in cybersecurity. Responsible for Professional Services and certified official trainer in different technologies and protection tools, he has also participated in multiple cybersecurity conferences and courses (MundoHacker, Cyberacademy, etc.), collaborating in the dissemination and security awareness through articles in the press. and specialized media.
Juan Caubet is the director of the IT&OT Security Unit at Eurecat. He is a Telecommunications engineer and a doctor in Computer Security from the UPC. He completed his doctoral thesis at the Information Security Group (ISG) of the UPC on identity management in structured P2P networks. In 2013 he spent a stay at the Inria Nancy – Grand Est research center (France) where he had the opportunity to make great progress in his thesis. From 2014 to 2017 he was a professor of the Master of Cybersecurity at the La Salle University (Ramón Llull University). Since 2022, he has been part of the team of experts at the Industrial Cybersecurity Center (CCI), as an expert in R&D&i in Industrial Cybersecurity. Juan has published more than a dozen scientific articles related to his research, frequently writes press articles and acts as a guest speaker at numerous congresses and conferences.
Oscar Lage (PhD) is Head of Cybersecurity at Tecnalia, lecturer and professor. Oscar is co-author of different books, a regular contributor to general media (TV, radio, press), UNE/ISO cybersecurity standardization committee, OECD advisor on blockchain and cybersecurity, member of the main global blockchain alliances (Hyperledger, EEA), Alastria and the main cybersecurity associations such as the ECSO (European Cyber Security Organization), among others. His main lines of research cover information security, applied cryptography, blockchain and new applications of disruptive technologies.
Vicente Segura is a telecommunications engineer with 20 years of experience in cybersecurity, during which time he has held different positions in different departments, which has allowed him to gain experience from multiple angles, from security consulting and innovation, to the development of products, for both residential and business customers. He currently leads the industrial security and Internet of Things product area.
Vicente is a senior Telecommunications engineer and also has a Degree in Business Administration and Management and the CISSP security certification.
Xabier Perez Bascaran is a professional with a strong background in telecommunications engineering, having graduated from Mondragon University. Additionally, he holds a master’s degree in embedded systems that complements his academic profile.
With approximately five years of experience in OT cybersecurity, Xabier has excelled in the field of protecting critical technological infrastructures. His focus revolves around key areas, including monitoring and early threat detection, as well as incident response planning and business continuity. Starting in 2022, he joined Siemens, where he works on designing cybersecurity solutions in the industrial sector.
His diversified expertise in cybersecurity spans from safeguarding robotic systems to ensuring security in IIoT environments, enriching his professional profile with extensive monitoring system experience.
Egoitz Lizaso Legarda is part of the CAF S.A. family. since 2006. During his professional career he has worked as a Testing and Commissioning Engineer, Systems Integrator in the Engineering department and Program Manager. He currently leads the Vehicle Cybersecurity Area at CAF S.A and is the CISO of CAF Rolling Stock, maximizing his focus on compliance with the cybersecurity requirements that the railway industry is demanding and will demand. His technical and management experience as part of CAF S.A. As a rolling stock manufacturer, it gives you the ability to understand what the real challenges the rail industry faces in terms of cybersecurity.
José Luis Gallego is a cybersecurity architect in charge of cybersecurity engineering at Cepsa Química. He has more than 15 years of experience in the development of large industrial automation engineering projects and IEC-62443 certification, which offer an important knowledge base for the cybersecurity of industrial environments and critical infrastructures. Throughout his professional career he has actively worked in cybersecurity in various areas of the industrial environment, such as energy generation and distribution, manufacturing, Smartcities and petrochemicals.
Emma Rubira is a consultant specializing in industrial cybersecurity with 4 years of experience. Graduate in private investigation with specialization in investigations. Currently serving in a technical security office in the pharmaceutical sector. Carrying out security assessments based on the IEC62443 regulation and providing support in the definition of the industrial cybersecurity strategy.
Estefanía Rojas has a solid base of experience as a SCADA developer in industrial environments, Estefanía has acquired a deep understanding of the industry. During the last 5 years, Estefanía has led key projects in industrial cybersecurity and provided strategic support to the company in this area, applying her experience in the industrial field to comprehensively address security in industrial control systems (ICS/SCADA). Its commitment to industrial cybersecurity is reflected in its specialized training, which includes knowledge in industrial development technologies and a deep understanding of the solutions of the main industrial cybersecurity manufacturers on the market. Estefanía plays the role of project manager, working to ensure a safe and secure industrial environment for her clients.
Iratxe Martin began her professional career in 2004 and, for more than five years, she has been the Head of Innovation and Technology Projects at the Basque CyberSecurity Center, coordinating the center’s IT operation, managing the security of the systems and planning the new technology implementation strategy. He is also the link with the agents of the Basque science, technology and innovation network and coordinates the cybersecurity node of the Basque Digital Innovation Hub.
3rd, 4th and 5th of October 2023
Hotel Occidental Bilbao