Event owner lens
Use this record to benchmark whether a comparable event makes the work after the room visible. The score is 41/100, so the next move is to benchmark the weakest pillars before repeating the format.
broadcast-heavy conference agenda analysis
Industrial Control Systems (ICS) Cybersecurity Conference - The ...
This broadcast-heavy conference in Technology / AI / Startup shows 80 visible agenda rows from icscybersecurityconference.com and scores 41/100: a moderate design signal with incomplete evidence. The clearest public signals sit in Future-of-Work Fit and Learning Transfer; the main limits are Follow Through and Participation Architecture. Visible mechanisms include Participant work, Network design, and Learning transfer. The public record does not show follow-up or tracking, so the score should be read as design... A practical reading: For a reader, this is a comparison record more than a model to copy: it reads as a broadcast-heavy conference, with the strongest visible signal in future-of-work fit and learning transfer and the biggest open question around follow through and participation architecture. The practical test is whether the published agenda connects the room to post-event continuation and evidence. This page is an original public-evidence analysis, not a copy of the source agenda or an endorsement of the event. The score places the visible agenda in the moderate design signal band. The strongest visible pillars are Future-of-Work Fit, Learning Transfer, and Problem Specificity; the thinnest visible pillars are Follow Through, Participation Architecture, and Personalization. Visible mechanisms include Participant work, Network design, and Learning transfer. The extracted agenda preview includes 151 visible rows. The most common formats are Unknown, Presentation, and Break; the most common inferred purposes are Unknown, Knowledge Transfer, and Pacing.
Eight-pillar fingerprint
Hover any pillar to see what it measures and, where it scored low, what the agenda is missing.
Participation Architecture?30
Participation Architecture - 30/100. Participant work, contribution, interaction, and alternatives to passive broadcast.Missing: Turn passive airtime into participant work: practice, sensemaking, decisions, critique, or artifact creation.
Follow Through?5
Follow Through - 5/100. Owners, dates, commitments, progress checks, and accountability after the room.Missing: Add named owners, dates, implementation checkpoints, and a visible post-event continuation path.
Problem Specificity?49
Problem Specificity - 49/100. A clear costly problem, objective, decision, or performance target.
Personalization?34
Personalization - 34/100. Role, path, goal, preparation, or connection tailoring for participants.Missing: Create role-based paths, prepared questions, tailored breakouts, or participant-specific next steps.
Network Design?44
Network Design - 44/100. Structured weak ties, bridge-building, mixers, and relationship persistence.
Learning Transfer?53
Learning Transfer - 53/100. Applied practice, feedback, workplace use, refreshers, and 30-90 day transfer.
Evidence Maturity?43
Evidence Maturity - 43/100. Baseline, comparison, follow-up, isolation, and attribution confidence.
Future-of-Work Fit?69
Future-of-Work Fit - 69/100. Value against time, hybrid reality, accessibility, AI, and meeting load.
Fix the gaps
Field-tested exercises matched to this agenda's weakest pillars, from the exercise library.
Follow Through (5/100)
Exercises that strengthen it: Mental Toughness Workshop • WorkshopBank · 15% Solutions • WorkshopBank · Network Patches
Participation Architecture (30/100)
Exercises that strengthen it: Make A World · Awestruck 3 Minutes · Spectrum Mapping
Personalization (34/100)
Exercises that strengthen it: Journey Mapping • WorkshopBank · Group Energiser & Perspective-Changing Exercise - Paradigm... · Photo Storytelling
Agenda Preview
The actual agenda we captured. Every block is classified by format and purpose. Open any block to see how we read it; the colored edge shows whether it is participant work, broadcast, logistics, or a showcase.
Room vs wrapper
8 percent of the 151 classified blocks put participants to work; the rest broadcast, show, or handle logistics. That mix is what drives the participation score.
Participant workBroadcastShowcaseLogistics
all eventTrainingTrainingSkill building+
Format · Participant workTrainingGuided skill building where participants practice. Counts as participant work and learning transfer.
Evidence basisParticipant work is implied by the formatInferred from format
all event(Note : Monday, October 27th is a pre-conference training day that requires registration. Conference sessions begin on October 28th)TrainingSkill building+
Format · Participant workTrainingGuided skill building where participants practice. Counts as participant work and learning transfer.
Evidence basisParticipant work is implied by the formatInferred from format
all eventTrippe Room (Breakouts) Hope II Hope IIIPresentationPacing+
Format · BroadcastPresentationSpeakers present, the audience receives. Awareness only unless paired with practice or follow-up.
Evidence basisNo participant output visible from this rowRead from source, no work signal
8:00 AMTraining & Workshop DayWorkshopParticipant work+
Format · Participant workWorkshopParticipants work on a problem and produce something. The strongest signal of participation architecture.
Evidence basisParticipant work is implied by the formatInferred from format
8:30 AMTrippe Room (Breakouts)PresentationPacing+
Format · BroadcastPresentationSpeakers present, the audience receives. Awareness only unless paired with practice or follow-up.
Evidence basisNo participant output visible from this rowRead from source, no work signal
9AM - 4PMIndustrial Cybersecurity Launchpad ( )PresentationKnowledge transfer+
Format · BroadcastPresentationSpeakers present, the audience receives. Awareness only unless paired with practice or follow-up.
Evidence basisNo participant output visible from this rowRead from source, no work signal
all eventMike Lennon - Director, ICS Cybersecurity Conference - SecurityWeekPresentationKnowledge transfer+
Format · BroadcastPresentationSpeakers present, the audience receives. Awareness only unless paired with practice or follow-up.
Evidence basisNo participant output visible from this rowRead from source, no work signal
all eventDebbie Lay - Principal Solutions Engineer - TXOne NetworksPresentationKnowledge transfer+
Format · BroadcastPresentationSpeakers present, the audience receives. Awareness only unless paired with practice or follow-up.
Evidence basisNo participant output visible from this rowRead from source, no work signal
9:00 AM - 4:55 PMHope IIPresentationKnowledge transfer+
Format · BroadcastPresentationSpeakers present, the audience receives. Awareness only unless paired with practice or follow-up.
Evidence basisNo participant output visible from this rowRead from source, no work signal
all eventICS/OT Cybersecurity Incident Preparedness & Response WorkshopWorkshopParticipant work+
Format · Participant workWorkshopParticipants work on a problem and produce something. The strongest signal of participation architecture.
Evidence basisParticipant work is implied by the formatInferred from format
all eventClint Bodungen - Director, AI/ML Engineering - MorganFranklin CyberPresentationKnowledge transfer+
Format · BroadcastPresentationSpeakers present, the audience receives. Awareness only unless paired with practice or follow-up.
Evidence basisNo participant output visible from this rowRead from source, no work signal
9:00 AM - 4:55 PMHope IIIPresentationKnowledge transfer+
Format · BroadcastPresentationSpeakers present, the audience receives. Awareness only unless paired with practice or follow-up.
Evidence basisNo participant output visible from this rowRead from source, no work signal
all eventApplied ICS Security Training LabWorkshopSkill building+
Format · Participant workWorkshopParticipants work on a problem and produce something. The strongest signal of participation architecture.
Evidence basisParticipant work is implied by the formatInferred from format
all eventDavid Formby - CEO/CTO - Fortiphyd Logic IncPresentationKnowledge transfer+
Format · BroadcastPresentationSpeakers present, the audience receives. Awareness only unless paired with practice or follow-up.
Evidence basisNo participant output visible from this rowRead from source, no work signal
all eventJey Krishnan Pandurengan - EMS Principal Process Control Engineer - Smurfit WestrockPresentationKnowledge transfer+
Format · BroadcastPresentationSpeakers present, the audience receives. Awareness only unless paired with practice or follow-up.
Evidence basisNo participant output visible from this rowRead from source, no work signal
all eventHarminder Singh - Industrial Cybersecurity Consultant - Valmet Inc./Industrial Applications ConsultingPresentationKnowledge transfer+
Format · BroadcastPresentationSpeakers present, the audience receives. Awareness only unless paired with practice or follow-up.
Evidence basisNo participant output visible from this rowRead from source, no work signal
all eventBreakBreakPacing+
Format · LogisticsBreakA pacing or recovery block between sessions.
Evidence basisOutcome inferred from formatInferred from format
all eventMackenize Morris - Principal Industrial Consultant at Dragos - DragosPresentationKnowledge transfer+
Format · BroadcastPresentationSpeakers present, the audience receives. Awareness only unless paired with practice or follow-up.
Evidence basisNo participant output visible from this rowRead from source, no work signal
all eventAhmik Hindman - Sr. Network & Security Solution Consultant - Rockwell AutomationPresentationKnowledge transfer+
Format · BroadcastPresentationSpeakers present, the audience receives. Awareness only unless paired with practice or follow-up.
Evidence basisNo participant output visible from this rowRead from source, no work signal
all eventLunchMealPacing+
Format · LogisticsMealA pacing block. Can carry unstructured networking, not scored as participant work.
Evidence basisOutcome inferred from formatInferred from format
all eventBuild a Resilient OT Cybersecurity Ecosystem: Lessons from Experience in Middle EastPresentationKnowledge transfer+
Format · BroadcastPresentationSpeakers present, the audience receives. Awareness only unless paired with practice or follow-up.
Evidence basisNo participant output visible from this rowRead from source, no work signal
all eventSachin Mohan - Territory Head - OT Cybersecurity - CyberKnightPresentationKnowledge transfer+
Format · BroadcastPresentationSpeakers present, the audience receives. Awareness only unless paired with practice or follow-up.
Evidence basisNo participant output visible from this rowRead from source, no work signal
all eventShibu Thomas - Field CTO for Global Insider Risk Solutions - EverfoxPresentationKnowledge transfer+
Format · BroadcastPresentationSpeakers present, the audience receives. Awareness only unless paired with practice or follow-up.
Evidence basisNo participant output visible from this rowRead from source, no work signal
all eventRandy Petersen - SCADA Superintendent - San Jacinto River AuthorityPresentationKnowledge transfer+
Format · BroadcastPresentationSpeakers present, the audience receives. Awareness only unless paired with practice or follow-up.
Evidence basisNo participant output visible from this rowRead from source, no work signal
all eventAfternoon BreakBreakPacing+
Format · LogisticsBreakA pacing or recovery block between sessions.
Evidence basisOutcome inferred from formatInferred from format
all eventRoger Hill - Founder/CEO - Hillstrong Group Security, Inc.PresentationKnowledge transfer+
Format · BroadcastPresentationSpeakers present, the audience receives. Awareness only unless paired with practice or follow-up.
Evidence basisNo participant output visible from this rowRead from source, no work signal
6:00 PMWelcome ReceptionReceptionOrientation+
Format · LogisticsReceptionA social or hospitality block. Pacing and informal connection, not participant work.
Evidence basisOutcome inferred from formatInferred from format
all eventWindsor CDE (Main Stage) Windsor C (Strategy Breakout) Windsor DE (Technical Breakout) Trippe Room (Breakouts) Hope IIPresentationPacing+
Format · BroadcastPresentationSpeakers present, the audience receives. Awareness only unless paired with practice or follow-up.
Evidence basisNo participant output visible from this rowRead from source, no work signal
8:00 AMWindsor CDE (Main Stage)PresentationKnowledge transfer+
Format · BroadcastPresentationSpeakers present, the audience receives. Awareness only unless paired with practice or follow-up.
Evidence basisNo participant output visible from this rowRead from source, no work signal
all eventBreakfast & RegistrationMealPacing+
Format · LogisticsMealA pacing block. Can carry unstructured networking, not scored as participant work.
Evidence basisOutcome inferred from formatInferred from format
all eventWhat Does the Data Reveal About Modern Advanced Threats and How to Counter Them?PresentationKnowledge transfer+
Format · BroadcastPresentationSpeakers present, the audience receives. Awareness only unless paired with practice or follow-up.
Evidence basisNo participant output visible from this rowRead from source, no work signal
all eventKeith Casey - Cybersecurity & Identity Strategist, Product Marketing - KeystrikePresentationKnowledge transfer+
Format · BroadcastPresentationSpeakers present, the audience receives. Awareness only unless paired with practice or follow-up.
Evidence basisNo participant output visible from this rowRead from source, no work signal
all eventPanel: OT Security Successes, Failures, and the Road AheadPanelDiscussion+
Format · BroadcastPanelExperts discuss while the audience watches. Surfaces perspective but rarely creates participant work.
Evidence basisNo participant output visible from this rowRead from source, no work signal
all eventBrian Schleifer - Southeast Regional System Security Engineer & Cybersecurity SME - Modern Technology Solutions Inc (MTSI)PresentationKnowledge transfer+
Format · BroadcastPresentationSpeakers present, the audience receives. Awareness only unless paired with practice or follow-up.
Evidence basisNo participant output visible from this rowRead from source, no work signal
all eventBenjamin Stirling - Director Cybersecurity & Operational Technology - JacobsPresentationKnowledge transfer+
Format · BroadcastPresentationSpeakers present, the audience receives. Awareness only unless paired with practice or follow-up.
Evidence basisNo participant output visible from this rowRead from source, no work signal
all eventKyle Robinson - Industrial Network Cybersecurity Analyst - Tallgrass EnergyPresentationKnowledge transfer+
Format · BroadcastPresentationSpeakers present, the audience receives. Awareness only unless paired with practice or follow-up.
Evidence basisNo participant output visible from this rowRead from source, no work signal
all eventChris Wiwczaroski - Enterprise Architect - OT Infrastructure - Metropolitan St. Louis Sewer DistrictPresentationKnowledge transfer+
Format · BroadcastPresentationSpeakers present, the audience receives. Awareness only unless paired with practice or follow-up.
Evidence basisNo participant output visible from this rowRead from source, no work signal
all eventTraining: Cyber Attack Methods for Cyber-Physical Systems (Day 1)TrainingSkill building+
Format · Participant workTrainingGuided skill building where participants practice. Counts as participant work and learning transfer.
Evidence basisParticipant work is implied by the formatInferred from format
all eventFailure to Accelerate - How to Re-ignite the Spark to Sustain OT Security ProgramsPresentationKnowledge transfer+
Format · BroadcastPresentationSpeakers present, the audience receives. Awareness only unless paired with practice or follow-up.
Evidence basisNo participant output visible from this rowRead from source, no work signal
all eventVivek Ponnada - SVP Growth & Strategy - FrenosPresentationKnowledge transfer+
Format · BroadcastPresentationSpeakers present, the audience receives. Awareness only unless paired with practice or follow-up.
Evidence basisNo participant output visible from this rowRead from source, no work signal
all eventMorning BreakBreakPacing+
Format · LogisticsBreakA pacing or recovery block between sessions.
Evidence basisOutcome inferred from formatInferred from format
all eventNavigating Complexities in Global Oil and Gas Projects: A Fireside Chat on ICS SecurityFireside chatDiscussion+
Format · BroadcastFireside chatA conversational stage format. Engaging to watch, still a broadcast format for the audience.
Evidence basisNo participant output visible from this rowRead from source, no work signal
all eventBrad Nash - OTCRM SOC Supervisor - ExxonMobilPresentationKnowledge transfer+
Format · BroadcastPresentationSpeakers present, the audience receives. Awareness only unless paired with practice or follow-up.
Evidence basisNo participant output visible from this rowRead from source, no work signal
all eventRon Ahasan - Project Manager - ExxonMobilPresentationKnowledge transfer+
Format · BroadcastPresentationSpeakers present, the audience receives. Awareness only unless paired with practice or follow-up.
Evidence basisNo participant output visible from this rowRead from source, no work signal
all eventDusty Courtney - Industrial Cybersecurity Engineer - ExxonMobilPresentationKnowledge transfer+
Format · BroadcastPresentationSpeakers present, the audience receives. Awareness only unless paired with practice or follow-up.
Evidence basisNo participant output visible from this rowRead from source, no work signal
all eventJason Thompson - OT Cybersecurity Engineering - ExxonMobilPresentationKnowledge transfer+
Format · BroadcastPresentationSpeakers present, the audience receives. Awareness only unless paired with practice or follow-up.
Evidence basisNo participant output visible from this rowRead from source, no work signal
all eventSecurity Fused into the Network to Protect OT at ScalePresentationKnowledge transfer+
Format · BroadcastPresentationSpeakers present, the audience receives. Awareness only unless paired with practice or follow-up.
Evidence basisNo participant output visible from this rowRead from source, no work signal
all eventKevin Holcomb - Technical Marketing Engineer, Industrial IoT Business Unit - Cisco SystemsPresentationKnowledge transfer+
Format · BroadcastPresentationSpeakers present, the audience receives. Awareness only unless paired with practice or follow-up.
Evidence basisNo participant output visible from this rowRead from source, no work signal
all eventClosing the Gaps: No More Easy TargetsClosingOrientation+
Format · BroadcastClosingFormat not classified from the source; treated as a broadcast block by default.
Evidence basisNo participant output visible from this rowRead from source, no work signal
all eventMike Holcomb - Director - ICS/OT Cyber Security - Fluor CorporationPresentationKnowledge transfer+
Format · BroadcastPresentationSpeakers present, the audience receives. Awareness only unless paired with practice or follow-up.
Evidence basisNo participant output visible from this rowRead from source, no work signal
all eventRethinking Cybersecurity with an OT-First ApproachPresentationKnowledge transfer+
Format · BroadcastPresentationSpeakers present, the audience receives. Awareness only unless paired with practice or follow-up.
Evidence basisNo participant output visible from this rowRead from source, no work signal
all eventBrian Deken - Sales Director, Industrial Cybersecurity - Rockwell AutomationPresentationKnowledge transfer+
Format · BroadcastPresentationSpeakers present, the audience receives. Awareness only unless paired with practice or follow-up.
Evidence basisNo participant output visible from this rowRead from source, no work signal
all eventSecuring the Unseen: Transforming OT/IoT Risk Management with Nozomi NetworksPresentationKnowledge transfer+
Format · BroadcastPresentationSpeakers present, the audience receives. Awareness only unless paired with practice or follow-up.
Evidence basisNo participant output visible from this rowRead from source, no work signal
all eventBen Callaway - Regional Sales Director - Nozomi NetworksPresentationKnowledge transfer+
Format · BroadcastPresentationSpeakers present, the audience receives. Awareness only unless paired with practice or follow-up.
Evidence basisNo participant output visible from this rowRead from source, no work signal
all eventSandeep Lota - Global Field CTO - Nozomi NetworksPresentationKnowledge transfer+
Format · BroadcastPresentationSpeakers present, the audience receives. Awareness only unless paired with practice or follow-up.
Evidence basisNo participant output visible from this rowRead from source, no work signal
1:30 PMWindsor C (Strategy Breakout)PresentationPacing+
Format · BroadcastPresentationSpeakers present, the audience receives. Awareness only unless paired with practice or follow-up.
Evidence basisNo participant output visible from this rowRead from source, no work signal
all eventHarnessing AI to Defend and Transform Critical Infrastructure CybersecurityPresentationKnowledge transfer+
Format · BroadcastPresentationSpeakers present, the audience receives. Awareness only unless paired with practice or follow-up.
Evidence basisNo participant output visible from this rowRead from source, no work signal
all eventCarlos Sanchez - Director, OT Systems Engineering Specialist - FortinetPresentationKnowledge transfer+
Format · BroadcastPresentationSpeakers present, the audience receives. Awareness only unless paired with practice or follow-up.
Evidence basisNo participant output visible from this rowRead from source, no work signal
1:30 PM - 2:15 PMWindsor DE (Technical Breakout)PresentationPacing+
Format · BroadcastPresentationSpeakers present, the audience receives. Awareness only unless paired with practice or follow-up.
Evidence basisNo participant output visible from this rowRead from source, no work signal
all eventDefend Your Industrial Network: The Zero-Trust Blueprint You NeedPresentationKnowledge transfer+
Format · BroadcastPresentationSpeakers present, the audience receives. Awareness only unless paired with practice or follow-up.
Evidence basisNo participant output visible from this rowRead from source, no work signal
all eventJohn Filitz - Cybersecurity Product Marketing Manager for Industrial IoT - CiscoPresentationKnowledge transfer+
Format · BroadcastPresentationSpeakers present, the audience receives. Awareness only unless paired with practice or follow-up.
Evidence basisNo participant output visible from this rowRead from source, no work signal
all eventMaturing OT Cyber Programs: From Static Defense to Strategic AdvantagePresentationKnowledge transfer+
Format · BroadcastPresentationSpeakers present, the audience receives. Awareness only unless paired with practice or follow-up.
Evidence basisNo participant output visible from this rowRead from source, no work signal
all eventMelanie Hutcheson - Lead Associate - Booz AllenPresentationKnowledge transfer+
Format · BroadcastPresentationSpeakers present, the audience receives. Awareness only unless paired with practice or follow-up.
Evidence basisNo participant output visible from this rowRead from source, no work signal
all eventWhy OT Johnny Can’t EncryptPresentationKnowledge transfer+
Format · BroadcastPresentationSpeakers present, the audience receives. Awareness only unless paired with practice or follow-up.
Evidence basisNo participant output visible from this rowRead from source, no work signal
all eventMatthew Rogers - ICS Cybersecurity Strategy & R&D Lead - CISAPresentationKnowledge transfer+
Format · BroadcastPresentationSpeakers present, the audience receives. Awareness only unless paired with practice or follow-up.
Evidence basisNo participant output visible from this rowRead from source, no work signal
all eventSecure Remote Access for Operational TechnologyPresentationKnowledge transfer+
Format · BroadcastPresentationSpeakers present, the audience receives. Awareness only unless paired with practice or follow-up.
Evidence basisNo participant output visible from this rowRead from source, no work signal
all eventGlen Combe - OT Specialist Systems Engineer - FortinetPresentationKnowledge transfer+
Format · BroadcastPresentationSpeakers present, the audience receives. Awareness only unless paired with practice or follow-up.
Evidence basisNo participant output visible from this rowRead from source, no work signal
all eventDefining, Refining, and Automating Your OT Cyber ProcessesPresentationKnowledge transfer+
Format · BroadcastPresentationSpeakers present, the audience receives. Awareness only unless paired with practice or follow-up.
Evidence basisNo participant output visible from this rowRead from source, no work signal
all eventJoe Cody - Director, OT Cybersecurity and Network Services - EIS CyberPresentationKnowledge transfer+
Format · BroadcastPresentationSpeakers present, the audience receives. Awareness only unless paired with practice or follow-up.
Evidence basisNo participant output visible from this rowRead from source, no work signal
all eventProtecting Critical Infrastructure with the Rigor of Classified NetworksPresentationKnowledge transfer+
Format · BroadcastPresentationSpeakers present, the audience receives. Awareness only unless paired with practice or follow-up.
Evidence basisNo participant output visible from this rowRead from source, no work signal
all eventAdam Maruyama - Field CTO, Digital Transformation & AI - EverfoxPresentationKnowledge transfer+
Format · BroadcastPresentationSpeakers present, the audience receives. Awareness only unless paired with practice or follow-up.
Evidence basisNo participant output visible from this rowRead from source, no work signal
all eventUSA 2026UnknownUnknown+
Format · BroadcastUnknownFormat not classified from the source; treated as a broadcast block by default.
Evidence basisLowRead from source
all eventTrainingTrainingSkill Building+
Format · Participant workTrainingGuided skill building where participants practice. Counts as participant work and learning transfer.
Evidence basisMediumRead from source
all eventPrevious eventsUnknownUnknown+
Format · BroadcastUnknownFormat not classified from the source; treated as a broadcast block by default.
Evidence basisLowRead from source
all eventAgenda 2024UnknownUnknown+
Format · BroadcastUnknownFormat not classified from the source; treated as a broadcast block by default.
Evidence basisLowRead from source
all eventSpeakers 2024UnknownUnknown+
Format · BroadcastUnknownFormat not classified from the source; treated as a broadcast block by default.
Evidence basisLowRead from source
all eventThis event offers unmatched networking opportunities and promises an amazing experience. (All meals and receptions are included with a full conference ticket). Capture the Flag (CTF) competition will take place in the Park Lane room (Tuesday-Wednesday).NetworkingRelationship Building+
Format · LogisticsNetworkingUnstructured mixing. Can carry incidental connection, but is not scored as designed network work.
Evidence basisMediumRead from source
all event(Note : Monday, October 27th is a pre-conference training day that requires registration. Conference sessions begin on October 28th)TrainingSkill Building+
Format · Participant workTrainingGuided skill building where participants practice. Counts as participant work and learning transfer.
Evidence basisMediumRead from source
all eventMondayUnknownUnknown+
Format · BroadcastUnknownFormat not classified from the source; treated as a broadcast block by default.
Evidence basisLowRead from source
all eventTuesdayUnknownUnknown+
Format · BroadcastUnknownFormat not classified from the source; treated as a broadcast block by default.
Evidence basisLowRead from source
all eventWednesdayUnknownUnknown+
Format · BroadcastUnknownFormat not classified from the source; treated as a broadcast block by default.
Evidence basisLowRead from source
all eventThursdayUnknownUnknown+
Format · BroadcastUnknownFormat not classified from the source; treated as a broadcast block by default.
Evidence basisLowRead from source
all eventTrippe Room (Breakouts) Hope II Hope IIIBreakWellbeing+
Format · LogisticsBreakA pacing or recovery block between sessions.
Evidence basisMediumRead from source
8:00 AMTraining & Workshop DayWorkshopCo Creation+
Format · Participant workWorkshopParticipants work on a problem and produce something. The strongest signal of participation architecture.
Evidence basisMediumRead from source
8:30 AMTrippe Room (Breakouts)BreakWellbeing+
Format · LogisticsBreakA pacing or recovery block between sessions.
Evidence basisMediumRead from source
9AM - 4PMIndustrial Cybersecurity Launchpad ( )UnknownUnknown+
Format · BroadcastUnknownFormat not classified from the source; treated as a broadcast block by default.
Evidence basisMediumRead from source
all eventMike Lennon - Director, ICS Cybersecurity Conference - SecurityWeekUnknownUnknown+
Format · BroadcastUnknownFormat not classified from the source; treated as a broadcast block by default.
Evidence basisLowRead from source
all eventDebbie Lay - Principal Solutions Engineer - TXOne NetworksUnknownUnknown+
Format · BroadcastUnknownFormat not classified from the source; treated as a broadcast block by default.
Evidence basisLowRead from source
9:00 AM - 4:55 PMHope IIUnknownUnknown+
Format · BroadcastUnknownFormat not classified from the source; treated as a broadcast block by default.
Evidence basisMediumRead from source
all eventICS/OT Cybersecurity Incident Preparedness & Response WorkshopWorkshopCo Creation+
Format · Participant workWorkshopParticipants work on a problem and produce something. The strongest signal of participation architecture.
Evidence basisMediumRead from source
all eventClint Bodungen - Director, AI/ML Engineering - MorganFranklin CyberUnknownUnknown+
Format · BroadcastUnknownFormat not classified from the source; treated as a broadcast block by default.
Evidence basisLowRead from source
9:00 AM - 4:55 PMHope IIIUnknownUnknown+
Format · BroadcastUnknownFormat not classified from the source; treated as a broadcast block by default.
Evidence basisMediumRead from source
all eventApplied ICS Security Training LabTrainingSkill Building+
Format · Participant workTrainingGuided skill building where participants practice. Counts as participant work and learning transfer.
Evidence basisMediumRead from source
all eventDavid Formby - CEO/CTO - Fortiphyd Logic IncUnknownUnknown+
Format · BroadcastUnknownFormat not classified from the source; treated as a broadcast block by default.
Evidence basisLowRead from source
all eventJey Krishnan Pandurengan - EMS Principal Process Control Engineer - Smurfit WestrockUnknownUnknown+
Format · BroadcastUnknownFormat not classified from the source; treated as a broadcast block by default.
Evidence basisLowRead from source
all eventHarminder Singh - Industrial Cybersecurity Consultant - Valmet Inc./Industrial Applications ConsultingUnknownUnknown+
Format · BroadcastUnknownFormat not classified from the source; treated as a broadcast block by default.
Evidence basisLowRead from source
all eventBreakBreakWellbeing+
Format · LogisticsBreakA pacing or recovery block between sessions.
Evidence basisMediumRead from source
all eventMackenize Morris - Principal Industrial Consultant at Dragos - DragosUnknownUnknown+
Format · BroadcastUnknownFormat not classified from the source; treated as a broadcast block by default.
Evidence basisLowRead from source
all eventAhmik Hindman - Sr. Network & Security Solution Consultant - Rockwell AutomationUnknownUnknown+
Format · BroadcastUnknownFormat not classified from the source; treated as a broadcast block by default.
Evidence basisLowRead from source
all eventLunchMealWellbeing+
Format · LogisticsMealA pacing block. Can carry unstructured networking, not scored as participant work.
Evidence basisMediumRead from source
all eventBuild a Resilient OT Cybersecurity Ecosystem: Lessons from Experience in Middle EastUnknownUnknown+
Format · BroadcastUnknownFormat not classified from the source; treated as a broadcast block by default.
Evidence basisLowRead from source
all eventSachin Mohan - Territory Head - OT Cybersecurity - CyberKnightUnknownUnknown+
Format · BroadcastUnknownFormat not classified from the source; treated as a broadcast block by default.
Evidence basisLowRead from source
all eventShibu Thomas - Field CTO for Global Insider Risk Solutions - EverfoxUnknownUnknown+
Format · BroadcastUnknownFormat not classified from the source; treated as a broadcast block by default.
Evidence basisLowRead from source
all eventRandy Petersen - SCADA Superintendent - San Jacinto River AuthorityUnknownUnknown+
Format · BroadcastUnknownFormat not classified from the source; treated as a broadcast block by default.
Evidence basisLowRead from source
all eventAfternoon BreakBreakWellbeing+
Format · LogisticsBreakA pacing or recovery block between sessions.
Evidence basisMediumRead from source
all eventRoger Hill - Founder/CEO - Hillstrong Group Security, Inc.UnknownUnknown+
Format · BroadcastUnknownFormat not classified from the source; treated as a broadcast block by default.
Evidence basisLowRead from source
6:00 PMWelcome ReceptionOpening RemarksOrientation+
Format · BroadcastOpening RemarksFraming or welcome from the stage. Orients the room, not participatory.
Evidence basisMediumRead from source
all eventWindsor CDE (Main Stage) Windsor C (Strategy Breakout) Windsor DE (Technical Breakout) Trippe Room (Breakouts) Hope IIBreakWellbeing+
Format · LogisticsBreakA pacing or recovery block between sessions.
Evidence basisMediumRead from source
8:00 AMWindsor CDE (Main Stage)UnknownUnknown+
Format · BroadcastUnknownFormat not classified from the source; treated as a broadcast block by default.
Evidence basisMediumRead from source
all eventBreakfast & RegistrationMealWellbeing+
Format · LogisticsMealA pacing block. Can carry unstructured networking, not scored as participant work.
Evidence basisMediumRead from source
all eventWhat Does the Data Reveal About Modern Advanced Threats and How to Counter Them?UnknownUnknown+
Format · BroadcastUnknownFormat not classified from the source; treated as a broadcast block by default.
Evidence basisLowRead from source
all eventKeith Casey - Cybersecurity & Identity Strategist, Product Marketing - KeystrikeUnknownUnknown+
Format · BroadcastUnknownFormat not classified from the source; treated as a broadcast block by default.
Evidence basisLowRead from source
all eventPanel: OT Security Successes, Failures, and the Road AheadPanelDeliberation+
Format · BroadcastPanelExperts discuss while the audience watches. Surfaces perspective but rarely creates participant work.
Evidence basisMediumRead from source
all eventBrian Schleifer - Southeast Regional System Security Engineer & Cybersecurity SME - Modern Technology Solutions Inc (MTSI)UnknownUnknown+
Format · BroadcastUnknownFormat not classified from the source; treated as a broadcast block by default.
Evidence basisLowRead from source
all eventBenjamin Stirling - Director Cybersecurity & Operational Technology - JacobsUnknownUnknown+
Format · BroadcastUnknownFormat not classified from the source; treated as a broadcast block by default.
Evidence basisLowRead from source
all eventKyle Robinson - Industrial Network Cybersecurity Analyst - Tallgrass EnergyUnknownUnknown+
Format · BroadcastUnknownFormat not classified from the source; treated as a broadcast block by default.
Evidence basisLowRead from source
all eventChris Wiwczaroski - Enterprise Architect - OT Infrastructure - Metropolitan St. Louis Sewer DistrictUnknownUnknown+
Format · BroadcastUnknownFormat not classified from the source; treated as a broadcast block by default.
Evidence basisLowRead from source
all eventTraining: Cyber Attack Methods for Cyber-Physical Systems (Day 1)TrainingSkill Building+
Format · Participant workTrainingGuided skill building where participants practice. Counts as participant work and learning transfer.
Evidence basisMediumRead from source
all eventFailure to Accelerate - How to Re-ignite the Spark to Sustain OT Security ProgramsUnknownUnknown+
Format · BroadcastUnknownFormat not classified from the source; treated as a broadcast block by default.
Evidence basisLowRead from source
all eventVivek Ponnada - SVP Growth & Strategy - FrenosUnknownUnknown+
Format · BroadcastUnknownFormat not classified from the source; treated as a broadcast block by default.
Evidence basisLowRead from source
all eventMorning BreakBreakWellbeing+
Format · LogisticsBreakA pacing or recovery block between sessions.
Evidence basisMediumRead from source
all eventNavigating Complexities in Global Oil and Gas Projects: A Fireside Chat on ICS SecurityFireside ChatDeliberation+
Format · BroadcastFireside ChatA conversational stage format. Engaging to watch, still a broadcast format for the audience.
Evidence basisMediumRead from source
all eventBrad Nash - OTCRM SOC Supervisor - ExxonMobilUnknownUnknown+
Format · BroadcastUnknownFormat not classified from the source; treated as a broadcast block by default.
Evidence basisLowRead from source
all eventRon Ahasan - Project Manager - ExxonMobilUnknownUnknown+
Format · BroadcastUnknownFormat not classified from the source; treated as a broadcast block by default.
Evidence basisLowRead from source
all eventDusty Courtney - Industrial Cybersecurity Engineer - ExxonMobilUnknownUnknown+
Format · BroadcastUnknownFormat not classified from the source; treated as a broadcast block by default.
Evidence basisLowRead from source
all eventJason Thompson - OT Cybersecurity Engineering - ExxonMobilUnknownUnknown+
Format · BroadcastUnknownFormat not classified from the source; treated as a broadcast block by default.
Evidence basisLowRead from source
all eventSecurity Fused into the Network to Protect OT at ScaleUnknownUnknown+
Format · BroadcastUnknownFormat not classified from the source; treated as a broadcast block by default.
Evidence basisLowRead from source
all eventKevin Holcomb - Technical Marketing Engineer, Industrial IoT Business Unit - Cisco SystemsUnknownUnknown+
Format · BroadcastUnknownFormat not classified from the source; treated as a broadcast block by default.
Evidence basisLowRead from source
all eventClosing the Gaps: No More Easy TargetsUnknownUnknown+
Format · BroadcastUnknownFormat not classified from the source; treated as a broadcast block by default.
Evidence basisLowRead from source
all eventMike Holcomb - Director - ICS/OT Cyber Security - Fluor CorporationUnknownUnknown+
Format · BroadcastUnknownFormat not classified from the source; treated as a broadcast block by default.
Evidence basisLowRead from source
all eventRethinking Cybersecurity with an OT-First ApproachUnknownUnknown+
Format · BroadcastUnknownFormat not classified from the source; treated as a broadcast block by default.
Evidence basisLowRead from source
all eventBrian Deken - Sales Director, Industrial Cybersecurity - Rockwell AutomationUnknownUnknown+
Format · BroadcastUnknownFormat not classified from the source; treated as a broadcast block by default.
Evidence basisLowRead from source
all eventSecuring the Unseen: Transforming OT/IoT Risk Management with Nozomi NetworksUnknownUnknown+
Format · BroadcastUnknownFormat not classified from the source; treated as a broadcast block by default.
Evidence basisLowRead from source
all eventBen Callaway - Regional Sales Director - Nozomi NetworksUnknownUnknown+
Format · BroadcastUnknownFormat not classified from the source; treated as a broadcast block by default.
Evidence basisLowRead from source
all eventSandeep Lota - Global Field CTO - Nozomi NetworksUnknownUnknown+
Format · BroadcastUnknownFormat not classified from the source; treated as a broadcast block by default.
Evidence basisLowRead from source
1:30 PMWindsor C (Strategy Breakout)BreakWellbeing+
Format · LogisticsBreakA pacing or recovery block between sessions.
Evidence basisMediumRead from source
all eventHarnessing AI to Defend and Transform Critical Infrastructure CybersecurityUnknownUnknown+
Format · BroadcastUnknownFormat not classified from the source; treated as a broadcast block by default.
Evidence basisLowRead from source
all eventCarlos Sanchez - Director, OT Systems Engineering Specialist - FortinetUnknownUnknown+
Format · BroadcastUnknownFormat not classified from the source; treated as a broadcast block by default.
Evidence basisLowRead from source
1:30 PM - 2:15 PMWindsor DE (Technical Breakout)BreakWellbeing+
Format · LogisticsBreakA pacing or recovery block between sessions.
Evidence basisMediumRead from source
all eventDefend Your Industrial Network: The Zero-Trust Blueprint You NeedUnknownUnknown+
Format · BroadcastUnknownFormat not classified from the source; treated as a broadcast block by default.
Evidence basisLowRead from source
all eventJohn Filitz - Cybersecurity Product Marketing Manager for Industrial IoT - CiscoUnknownUnknown+
Format · BroadcastUnknownFormat not classified from the source; treated as a broadcast block by default.
Evidence basisLowRead from source
all eventMaturing OT Cyber Programs: From Static Defense to Strategic AdvantageUnknownUnknown+
Format · BroadcastUnknownFormat not classified from the source; treated as a broadcast block by default.
Evidence basisLowRead from source
all eventMelanie Hutcheson - Lead Associate - Booz AllenUnknownUnknown+
Format · BroadcastUnknownFormat not classified from the source; treated as a broadcast block by default.
Evidence basisLowRead from source
all eventWhy OT Johnny Can’t EncryptUnknownUnknown+
Format · BroadcastUnknownFormat not classified from the source; treated as a broadcast block by default.
Evidence basisLowRead from source
all eventMatthew Rogers - ICS Cybersecurity Strategy & R&D Lead - CISAUnknownUnknown+
Format · BroadcastUnknownFormat not classified from the source; treated as a broadcast block by default.
Evidence basisLowRead from source
all eventSecure Remote Access for Operational TechnologyUnknownUnknown+
Format · BroadcastUnknownFormat not classified from the source; treated as a broadcast block by default.
Evidence basisLowRead from source
all eventGlen Combe - OT Specialist Systems Engineer - FortinetUnknownUnknown+
Format · BroadcastUnknownFormat not classified from the source; treated as a broadcast block by default.
Evidence basisLowRead from source
all eventDefining, Refining, and Automating Your OT Cyber ProcessesUnknownUnknown+
Format · BroadcastUnknownFormat not classified from the source; treated as a broadcast block by default.
Evidence basisLowRead from source
all eventJoe Cody - Director, OT Cybersecurity and Network Services - EIS CyberUnknownUnknown+
Format · BroadcastUnknownFormat not classified from the source; treated as a broadcast block by default.
Evidence basisLowRead from source
all eventProtecting Critical Infrastructure with the Rigor of Classified NetworksUnknownUnknown+
Format · BroadcastUnknownFormat not classified from the source; treated as a broadcast block by default.
Evidence basisLowRead from source
all eventAdam Maruyama - Field CTO, Digital Transformation & AI - EverfoxUnknownUnknown+
Format · BroadcastUnknownFormat not classified from the source; treated as a broadcast block by default.
Evidence basisLowRead from source
The Full Reading
Why It Ranks This Way +
Calibrated from GES design 41/100 and verified 41/100, then capped for agenda is mostly passive without visible outcome mechanics.
Reader Takeaway. For a reader, this is a comparison record more than a model to copy: it reads as a broadcast-heavy conference, with the strongest visible signal in future-of-work fit and learning transfer and the biggest open question around follow through and participation architecture. The practical test is whether the published agenda connects the room to post-event continuation and evidence.
Strongest signals: Future-of-Work Fit, Learning Transfer, and Problem Specificity. Weakest signals: Follow Through, Participation Architecture, and Personalization.
How This Agenda Could Improve +
- Add named owners, dates, implementation checkpoints, and a visible post-event continuation path.
- Turn passive airtime into participant work: practice, sensemaking, decisions, critique, or artifact creation.
- Create role-based paths, prepared questions, tailored breakouts, or participant-specific next steps.
Fastest next move: Add named owners, dated next steps, and a visible continuation path before treating the event as outcome-ready.
Role-Specific Reading +
Sponsor lens
Look beyond exposure. Strong sponsor value would show qualified interaction, problem work, buyer learning, customer evidence, or follow-up. The practical sponsor move is to look for structured introductions, buyer-seller fit, and relationship persistence.
Designer lens
The agenda is useful as a pattern sample from icscybersecurityconference.com. Redesign attention should go first to the lowest-scoring pillars; in practice, turn the thinnest agenda blocks into participant work.
Executive lens
Treat the visible agenda as an operating plan. The executive move is to require owners, dates, and evidence before treating the event as strategic. If owners, proof, and follow-through are not visible, the public record does not yet prove strategic movement.
Aggregator lens
Treat the source URL as evidence, not decoration. The data-product move is to label the source boundary clearly before ranking the record before ranking or syndicating the record.
What GES Means Here +
The Gathering Effectiveness Score is a strict 0-100 public-evidence reading of the agenda across eight pillars. It rewards visible participant work, follow-through, transfer, network design, and proof mechanisms more than polish, speaker fame, attendance, or satisfaction.
Visible mechanisms: Participant work, Network design, Learning transfer.
Evidence boundary: Scores reflect visible agenda/source evidence and should not be read as proof of causal event impact.
Limitations, Score Caps, and Review Flags +
Limitations
- No visible follow-up, progress monitoring, or longitudinal tracking.
- Passive stage formats dominate the visible agenda.
- No baseline measurement is visible.
Score caps
- 34: Agenda is mostly passive without visible outcome mechanics.
Review flags
- Fourth-loop score cap: Agenda is mostly passive without visible outcome mechanics.
- No source-backed follow-up, validation, baseline, tracking, or impact evidence.
- No tracking, validation, feedback, or impact measurement found in the visible source text.
Is this proof the event worked? +
No. This is a strict public-evidence reading of the agenda. Proof would require baseline, comparison, follow-up, attribution, and impact evidence beyond the listing.
What should a reader inspect first? +
Start with the source URL, then compare the eight pillar scores against the agenda rows. The biggest opportunities usually sit in follow-through, evidence maturity, and participant work.
Why publish weak records? +
Weak records are part of the map. They show where public agendas still describe sessions and speakers more often than outcomes, commitments, transfer, or proof.
How should I use the rows? +
Read the agenda rows as the visible design trace: formats, purposes, and evidence labels show what the public source made inspectable, not everything that happened in the room. This is a source-grounded interpretation of the public agenda record, not a copy of the source, and not an endorsement of the event.
Where To Go Next
Compare this agenda against other Technology / AI / Startup events scored on the same eight pillars.