Conference Description
Key Takeaways
- Dedicated to operational technology and critical infrastructure cyber security across Australia and New Zealand
- Targets senior security leaders from energy, mining, utilities, oil and gas, healthcare, and transportation sectors
- Focuses on managed defence strategies, cyber resilience, and IT/OT convergence challenges
- Features keynotes, panel discussions, roundtables, and structured networking opportunities
- CPE-certified programme designed for continuing professional education credits
Introduction
The CS4CA ANZ Summit returns to Perth on 9–10 February 2027, bringing together senior cyber security professionals responsible for protecting operational technology environments and critical infrastructure across Australia and New Zealand. As industrial systems become increasingly connected and threat actors grow more sophisticated in targeting essential services, the summit provides a focused forum for security leaders to examine practical defence strategies and share implementation experiences.
This year’s programme centres on the theme “Managed Defence for OT: Putting into Practice a Cyber-Resilient Future,” reflecting the industry’s shift from theoretical frameworks toward operational implementation of resilience measures. The event draws participants from sectors where cyber incidents carry consequences extending well beyond data breaches—including potential impacts on public safety, environmental protection, and essential service continuity.
About the CS4CA ANZ Summit
The CS4CA ANZ Summit (Cyber Security for Critical Assets Australia & New Zealand) is an executive-level gathering designed specifically for professionals working at the intersection of cyber security and industrial operations. The event maintains a deliberately focused scope, concentrating exclusively on the challenges unique to operational technology environments rather than attempting to address the broader enterprise security landscape.
With attendance comprising over 100 senior stakeholders, the summit creates conditions for substantive peer-to-peer exchange rather than passive consumption of presentations. The programme combines keynote addresses with panel discussions, roundtable sessions, and networking dinners structured to facilitate meaningful professional connections. Participants can earn continuing professional education credits through the CPE-certified programme.
The 2027 edition takes place entirely in person, reflecting the value that security professionals place on direct engagement when discussing sensitive operational matters and evaluating potential solutions.
Operational Technology Security: A Distinct Discipline
Securing operational technology environments presents challenges fundamentally different from those encountered in conventional enterprise IT. Industrial control systems, SCADA networks, and process automation platforms were historically designed for reliability and longevity rather than security, often operating on decades-old architectures never intended for network connectivity. The convergence of IT and OT networks—driven by digital transformation initiatives and the pursuit of operational efficiency—has exposed these systems to threat vectors their designers never anticipated.
The consequences of security failures in OT environments extend beyond the financial and reputational impacts typical of data breaches. Compromised industrial systems can disrupt essential services, create safety hazards for workers and communities, cause environmental damage, and in critical infrastructure contexts, affect national security. These elevated stakes demand security approaches calibrated to the specific characteristics of industrial environments, including extended equipment lifecycles, stringent availability requirements, and the presence of legacy systems that cannot be easily patched or replaced.
The summit addresses this reality by focusing on practical implementation rather than abstract principles, recognising that security leaders in critical infrastructure face constraints and considerations that generic cyber security guidance often fails to accommodate.
Primary Discussion Topics
The programme explores several interconnected themes central to contemporary OT security practice. Managed defence strategies receive particular attention, examining how organisations can establish sustainable security operations capable of detecting, responding to, and recovering from incidents affecting industrial systems. This includes consideration of internal capability development, managed security service partnerships, and hybrid approaches suited to different organisational contexts.
Cyber resilience emerges as a unifying concept throughout the summit, acknowledging that prevention alone cannot guarantee security in complex industrial environments. Building resilient systems requires attention to detection capabilities, response procedures, recovery planning, and the organisational structures necessary to execute these functions under pressure.
The application of artificial intelligence to OT security represents an evolving area of practice, with potential applications in anomaly detection, threat intelligence analysis, and security operations automation. The summit examines both the opportunities and limitations of these technologies in industrial contexts, where false positives can trigger costly operational disruptions and where adversaries may themselves employ AI-enhanced attack techniques.
Secure remote access to industrial control systems has become increasingly important as organisations seek to enable remote monitoring, maintenance, and operations while maintaining appropriate security boundaries. The pandemic accelerated adoption of remote access capabilities, and many organisations continue to refine their approaches to balance operational flexibility with security requirements.
Industry Context and Regional Relevance
Australia and New Zealand face particular challenges in critical infrastructure protection stemming from their economic structures and geographic circumstances. Both nations depend heavily on resource extraction, energy production, and utilities infrastructure distributed across vast distances, creating extensive attack surfaces and complicating security monitoring and incident response.
Regulatory frameworks continue to evolve in response to the growing recognition of cyber threats to essential services. Organisations operating critical infrastructure must navigate compliance requirements while building security programmes that deliver genuine protection rather than mere regulatory satisfaction. The summit provides opportunities to understand how peers are approaching these dual obligations and to learn from implementation experiences across different regulatory contexts.
The concentration of mining, oil and gas, and energy sector participants reflects Perth’s position as a hub for resource industry operations, while representation from utilities, healthcare, maritime, and transportation sectors ensures cross-industry perspective on shared challenges and transferable practices.
Who Should Attend
The summit is designed for senior professionals with direct responsibility for cyber security in operational technology environments or critical infrastructure organisations. Typical participants include Chief Information Security Officers, Heads of Cyber Security, Cyber Security Architects, General Managers of Cybersecurity, OT and ICS Security Engineers, and managers responsible for IT/OT integration.
The executive-level positioning reflects the strategic nature of the challenges under discussion. Decisions about OT security architecture, managed service partnerships, and resilience investments typically require senior leadership involvement, and the summit facilitates direct engagement among professionals operating at this level.
Participants from government agencies responsible for critical infrastructure protection and regulatory oversight also contribute to discussions, providing perspective on policy developments and cross-sector coordination efforts.
Technology and Solution Landscape
The summit brings together established and emerging providers of OT security solutions, offering participants exposure to current market capabilities. Sponsors and exhibitors at the 2027 event include Fortinet, Claroty, Cloudflare, Identifly, Honeywell, Yokogawa, Darktrace, Nozomi Networks, Cyble, Triskele Labs, and ThreatDefence.
This vendor participation enables security leaders to evaluate solutions in context, understanding how different technologies address specific operational requirements and integrate with existing infrastructure. The presence of both pure-play OT security specialists and broader technology providers reflects the diverse approaches organisations take to building comprehensive security programmes.
Building Collaborative Defence
Critical infrastructure security increasingly depends on collaboration extending beyond individual organisational boundaries. Threat intelligence sharing, coordinated incident response, and collective defence initiatives require relationships and trust that develop through sustained professional engagement. The CS4CA ANZ Summit contributes to this collaborative ecosystem by creating regular opportunities for security leaders to build connections with peers facing similar challenges across different organisations and sectors.
The structured networking components of the programme—including dinners and roundtable discussions—recognise that valuable knowledge exchange often occurs in conversational settings rather than formal presentations. For professionals responsible for protecting systems where security incidents could affect public welfare, these peer relationships represent a genuine operational resource.