S4x26 Video Release Schedule

* Monday, March 9: Welcome & Keynote by Dale Peterson.
* Thursday, March 12: Connect For Industrial DataOps by Aron Semle.
* Monday, March 16: A Richter Scale For OT Security Incidents presented by Dale Peterson, Kelly Jackson Higgins, Munish Walther-Puri, and Robert Hanson.
* Thursday, March 19: Great Debate: CRA featuring Sarah Fluchs and Sam Miorelli.
* Monday, March 23: OT Visibility Is Overated presented by Bryson Bort.
* Thursday, March 26: Securing The Diversity In Universal Theme Park’s Ride & Show Network presented by Luis Alves.
* Monday, March 30: Case Study: Operationalizing Multi-Source Threat Intelligence presented by Alex Waitkus.
* Thursday, April 2: The Future With ISO 22373 for Trustworthy OT Supply Chains presented by Aliza Maftun.
* Monday, April 6: Systemic Security Issues In “SoftPLCs” presented by Diego Giubertoni.
* Thursday, April 9: Emerging Markets OT Security Regulation presented by Sheila Casserly.
* Monday, April 13: Closing The Cyber Physical Risk Capital Gap In Insurance presented by Neil Arklie.
* Thursday, April 16: Building FrostyGoop With The Help Of AI presented by Jimmy Wylie.
* Monday, April 20: Orchestration for OT at Scale presented by Adam Koch.
* Thursday, April 23: Cyber Detection Initiated Safety And Protection presented by Felipe Costa.
* Monday, April 27: Industrial DevOps For Velocity and Resilience presented by Adam Gluck.
* Thursday, April 30: Operation Grim Beeper: A Cyber-Physical Attack presented by Raphael Arakelian.
* Monday, May 4: What OT Can Learn From FinTech On Product Security For SaaS presented by Maggie Morganti.
* Thursday, May 7: Calculating Return On Mitigation presented by Hector Perez.
* Monday, May 11: Gaming With Metrics To Achieve An OT Security Program presented by Teemu Kumpulainen.
* Thursday, May 14: Understanding and Securing Unified Name Space (UNS) presented by Jeff Smith.
* Monday, May 18: Distress Tolerance In Your Job, Life, & OT System presented by Shireen Rizvi.
* Thursday, May 21: Honeypots For Threat Intelligence presented by Daniel dos Santos.
* Monday, May 25: OT Threat Predictions For The Next 1 – 3 Years presented by John Hultquist.
* Thursday, May 28: Generating Malicious OT Data To Train and Test Systems presented by Dan Gunter.
* Monday, June 1: How Complete Is Your Asset Visibility? A Metrics Answer presented by Grant Geyer.
* Thursday, June 4: A Converged Actor Framework presented by Mike Holcomb.
* Monday, June 8: Current and Predicted Market Impact of the US Cyber Trust Mark presented by Jean Camp.
* Thursday, June 11: Does DPI In Industrial Firewalls Actually Work? presented by Tony Turner.
* Monday, June 15: Great Debate: Human In The Loop? featuring Marissa Morales Rodriguez and Jalal Bouhdada.
* Thursday, June 18: What Risk Have You Accepted In A Company Acquisition? presented by Jacob Marzloff.
* Monday, June 22: OT SecOps Or Bust presented by Adam Robbie.
* Thursday, June 25: Creating The OT Security AI Data Model & Data Fabric presented by Devin McCrate.
* Monday, June 29: The Impact Of Regulation On Multinational Companies featuring Trevor Rudolph, Ryan Rathbun, and Dale Peterson.
* Thursday, July 2: 3 Step Success Story In Semiconductors presented by Terence Liu.
* Monday, July 6: S4 Legend Interview with Mark Weatherford and Danielle Jablanski.
* Thursday, July 9: Poland 2025: Attack on the Electric System presented by Phil Tonkin.
* Monday, July 13: Fireside Chat with Katie Jereza Of The US Dept. Of Energy featuring Katie Jereza and Dale Peterson.
* Thursday, July 16: EU CRA Terms and Terminology … What They Mean For Compliance presented by Ben Morgan.
* Monday, July 20: Game Show: My Favorite Metric! featuring Dale Peterson.
* Thursday, July 23: Identifying And Overcoming Cognitive Bias In Detection Systems presented by Nicole Carignan.
* Monday, July 27: Extending Zero Trust To Your Vendors OR When Managed Security Services Fail presented by Tom Grusendorf.
* Thursday, July 30: Is the World Ready for Cloud-based Autonomous Control System Operations? presented by Kenny Mesker.
* Monday, August 3: POC Pavilion Analysis & Outcomes featuring Kyle Miller and Dale Peterson.
* Thursday, August 6: How Did Team Atlanta Win The DARPA AI Cyber Challenge? presented by Andrew Chin.
* Monday, August 10: S4 Closing Panel featuring Dale Peterson, Ralph Langner, Megan Samford, and Zach Tudor.
* Thursday, August 13: A Technical Solution for Internet-Exposed OT Assets presented by Michael Pyle.
* Monday, August 17: AI Analysis of OT Packets For SOC Analysts presented by Rashi Sharma.
* Thursday, August 20: Cybersecurity Advisories: Still Carving Stone While AI Writes Code presented by Christian Schroeder.
* Monday, August 24: Recognizing & Analyzing Compiled AI In OT Binaries & Firmware presented by Jason Kramer.
* Thursday, August 27: OT Warriors Lock It Down presented by Daryl Haegley.
* Monday, August 31: Comms Architecture & Security For Complex Energy Ecosystems presented by Sara Bavarian.
* Thursday, September 3: Measuring And Reducing Maintenance Debt presented by Esther Shira Stepansky.
* Monday, September 7: Harmonics and Oscillations and Boom presented by Brian Foster.
* Thursday, September 10: Case Study: Collaborative Water Utility Security Program In Massachusetts presented by Gus Serino.
* Monday, September 14: Droning About The Supply Chain presented by Ron Brash.
* Thursday, September 17: Procurement: Addressing Risk Before It Is Purchased presented by Jason Rivera.
* Monday, September 21: Dynamic Response In Secure Remote Access presented by Raed Albuliwi.
* Thursday, September 24: DNP3’s New Authorization Management Protocol presented by Andrew West.
* Monday, September 28: The Closing Panel In Prime Time featuring Dale Peterson, Megan Samford, Ralph Langner, and Zach Tudor.
* Thursday, October 1: Maritime: Compliance Risk Trumping OT Cyber Risk presented by Michael DeVolld.

The flow of topics reveals a deliberate scaffolding designed to build an argument around the operational reality, future risks, and necessary governance of Industrial Control Systems (ICS) and Operational Technology (OT). The sequence moves from defining fundamental concepts—like visibility, risk measurement, and threat intelligence structures (e.g., Richter scale, multi-source intelligence)—to exploring specific regulatory challenges (CRA, ISO 22373) and advanced technological solutions (AI, data fabrics, honeypots). This structure implies that achieving security in the OT domain requires a synthesis of operational metrics, systemic understanding, supply chain accountability, and technological modernization.
The pattern involves framing complex technical realities within a context of governance and strategic risk management. For instance, immediately following discussions on visibility and specific attacks, there are sessions addressing insurance gaps, regulation, and human factors (Cognitive Bias, Distress Tolerance). This suggests an underlying premise: technical security measures alone are insufficient; resilience requires integrating operational performance metrics, regulatory compliance, and human adaptability. The juxtaposition of highly specialized technical deep dives (DNP3 protocols, packet analysis) with macro-level concerns (multinational regulation, market impact) creates a tension that forces the audience to confront where their current focus lies—on the technology itself, the policy layer, or the systemic consequences.
The implications suggest a move toward holistic operational security where metrics are not just reporting tools but drivers of resilience and trust. The inclusion of case studies (Water Utility Security, Supply Chain) alongside forward-looking topics (OT Threat Predictions, Autonomous Systems) indicates an effort to bridge theoretical knowledge with tangible application. The underlying challenge is integrating disparate concerns—from the physical constraints of operational systems to the abstract nature of cyber risk and regulatory mandates—into a coherent, actionable security posture that accounts for both immediate operational demands and long-term systemic evolution.
Bridge Questions: If all these elements are true, how can organizations practically translate high-level risk metrics into immediate, tangible operational adjustments in an environment where legacy systems persist? What specific mechanisms exist to ensure that regulatory compliance frameworks like the CRA do not introduce undue friction onto high-velocity industrial operations? When integrating advanced AI for OT security, what governance structures are necessary to prevent algorithmic blind spots from becoming systemic vulnerabilities?