8:00 – 8:45
THE SCHEDULE
REGISTRATION
Registration & Welcome coffee
8:45 – 9:00
WELCOME
Opening Industrial Cyber Summit Chile 2026
Digital fortress: building resilience in Industry 5.0
Industrial cybersecurity is no longer a problem of cables and servers: it is the new front in the battle for national sovereignty. In her opening remarks, Flavia Mendez draws a map of a world where the region’s critical assets become strategic targets of conflicts that do not require missiles. A world where the only possible response is to build organizations that absorb the impact without stopping production.
Flavia Mendez
Andrea Obaid
9:00 – 9:15
THE TALK: THE NEW RULES OF THE GAME
Map of Cybersecurity in Chile: the key role of the ANCI
An overview of the new regulatory landscape: Law 21.663, Vital Importance Operators, and the next steps.
Michelle Bordachar Benoit
9:15 – 9:45
THE PANEL: FUTURE SCIENCE & INNOVATION CYBERSECURITY
Quantum, AI and autonomy: the race that redefines tomorrow's security
Researchers and scientists are debating how AI and quantum computing will redefine Chile's first line of digital defense.
Dr. Paulina Assmann
CEO & Co-founder | Sequre Quantum
Founder of Quantum Hub Chile
Dr. Jerónimo Maze
Quantum computing researcher | Catholic University
Tomás Vera
Researcher in Upstream Engineering | University of Chile
Scientific Advisor of Congreso Futuro
Moderator: Flavia Mendez
THE TALK: SANS INSTITUTE
The Attack Surface Is Already Running
Latest threats to OT: how to be prepared.
How long is the window between initial intrusion and physical impact on your plant? Mike Hoffman, SANS Instructor with over 25 years in ICS/OT cybersecurity, outlines the attack patterns he is seeing today in the field, what has changed over the last year, and SANS’ 5 Critical Controls to move from passive compliance to active preparedness—with OT resilience as the most valuable asset to sustain the operation as Chile, the world’s largest copper producer and home to more than 50% of the lithium reserves, consolidates as a strategic target.
Michael Hoffman
THE TALK: CLAROTY + KPMG
Attacks on Cyber-Physical Systems (CPS): Threats to Critical Infrastructures
In this session, we will see some evidence of attacks on critical infrastructure and examples of how some OT components can be attacked, to conclude with a strategic look at the security of cyber-physical systems (CPS).
Pablo Almada
Alonso Bisama
THE TALK: FORTINET + SONDA
How to provide visibility and real control over industrial assets in the convergence of IT/OT.
Gonzalo Rojas
Ernesto Tachoires
COFFEE BREAK & THE EXPO
THE PANEL: ENERGY UNDER SIEGE
The silent challenge: the supply chain as a critical risk for OIVs
A panel of experts analyzes why the supply chain has ceased to be a matter of procurement or compliance: today, Critical Operations are as secure as the least prepared supplier that has access to their critical processes. A strategic debate about how to anticipate before that link becomes the gateway.
Maickol Hazbun Hicks
Pablo Silva
Carlos Godoy
Moderator: Erick Palencia
THE TALK: ZERO TRUST FOR OT
The end of VPNs in OT environments
VPNs have been around for more than 30 years and are no longer sufficient to meet current security and remote access needs. Although for years VPNs were considered a reliable solution, today they are not. Currently, VPNs can expand the attack surface and become one of the main entry points for threats directed at corporate infrastructure. In this presentation, we show why the security associated with VPNs has become a myth and how to truly secure OT environments.
Daniel Rodrigues
THE TALK: WHEN PREVENTION FAILS, RESILIENCE WINS
AI and ransomware: when the threat learns faster than the defense
AI is redefining ransomware, which has ceased to be an attack and has become a system that learns. Increasingly autonomous and silent, it eludes the defenses that once held it back. When prevention arrives too late, resilience is what sustains the operation: immutable backups, rapid recovery, and continuity, even with compromised controls.
Gustavo Dutschmann
Francisco Villalobos
THE PANEL: CRITICAL MINING INFRASTRUCTURE
Digital mining and operational resilience: cybersecurity in the age of automation and autonomy
Chile is the world's largest copper producer and concentrates more than 50% of the global lithium reserves. Its mining industry is not only the engine of the national economy, but also a critical infrastructure with geopolitical projection. And it is undergoing a complete transformation.
Remote operations centers, autonomous trucks, exploration drones, and real-time connectivity from the Atacama Desert have exponentially expanded the attack surface. The convergence of IT/OT in mining has ceased to be merely a roadmap to become an operational reality.
The question this panel addresses is not what to do if mining is attacked. It is whether it is prepared to continue operating when it is. The panelists will discuss how resilience is managed in operations that cannot be stopped, what the new Cybersecurity Act means for the sector, and where an industry that has a lot to lose begins.
Carlos Schipmann
Miguel Ángel Elizondo
Álvaro Pizarro
Moderator: Fernando Lucchini
THE TALK: WHAT THE STANDARD WOULD HAVE STOPPED
OT attack vectors and industrial cyber resilience under ISA/IEC 62443
In this session, Kaspersky reviews the latest cyberattacks recorded by ICS CERT and compares them with the Fundamental Requirements of the ISA/IEC 62443 standard, identifying which points of the standard have blocked or prevented each incident. An analysis of global trends, regional risks, and attack vectors in critical infrastructures.
Ing. Eduardo Capetta
THE TALK: COVERAGE GAP
Validation of detections in OT environments
OT security platform providers deliver thousands of pre-defined detections, but that doesn’t equate to real coverage: not all of them apply to every plant, and those that do depend on specific conditions (for example, unencrypted traffic). The talk raises the question of validating detections as a practice so that security teams understand exactly what triggers each alert, what confirms a true positive, and what to investigate.
Oscar Delgado
VIP LUNCH BREAK & THE EXPO
THE INTERVIEW:
The role of the State in the protection of telecommunications as an essential service.
Romina Garrido Iglesias
Patricio Leyton
THE TABLETOP: SUPPLY CHAIN UNDER PRESSURE
Hour Zero: Orchestrating continuity and resilience in Industry 5.0
This year we have left behind the phase of Industry 4.0, whose focus was hyperconnectivity and the automation of processes. Today in Chile we are transitioning to Industry 5.0, where the priority is no longer just efficiency but operational resilience. In a hyperconnected ecosystem, we know that the question is no longer whether we will suffer an incident, but when and how our supply chain will withstand the impact. The Cybersecurity Marco Law No. 21.663 ratifies this need, that is, it requires that the country's critical infrastructures have real capabilities to operate without stopping, governing IT/OT risk and protecting vital services.
Carolina Eyquem
Pablo Silva
Daniel Soto
César Maldonado
THE TALK: CAP S.A.
Cyber resilience at scale in complex industrial environments: The Case of Success of CAP S.A.
In industrial environments where IT/OT networks converge, a blind spot in the network can result in the shutdown of processes vital to the country. In this interactive fireside chat session, we will show how Chile’s leading mining and steel group transformed its threat detection and response posture, achieving cost efficiencies.
Pedro Pérez
Felipe Bórquez
THE TALK: THE HUMAN LAYER
9.9%: What a click on human risk in the industry reveals
We analyzed +2500 simulations in +150 industrial clients with +100,000 users: 9.9% click, but only 1.4%. What do these numbers tell us about the human factor in the industry, and what changes when generative AI starts manufacturing the lures? Data of our own to rethink the most difficult layer to patch: people.
Nicolás Bruna
THE TALK: BEYOND RECOVERABLE
Considerations on the path towards cyber resilience
Cybersecurity seeks to prevent a fire; cyberresilience is measured by how quickly you put it out. Faced with a destructive attack, the true cost is not the attack itself but reinfection: without an adequate response, organizations can recover up to 12 times before they are truly safe. Cohesity shares a proven model for moving from «recoverable» to «resilient» without losing control of the operation.
Hernán Roth
THE PANEL: CODE BLUE FOR HOSPITAL NETWORKS
Seconds that save lives: simulations and responses to incidents in hospital environments
When medical infrastructure is targeted, the speed of response is measured in human lives. A practical discussion about the design of response plans, the execution of eexercises of crisis and the preparation of medical and technical teams to mitigate cyberattacks on OT systems, where every minute of downtime directly impacts patient safety.
Carolina Pizarro Díaz
CEO | Aura Cybersecurity
President | REDIAC
Cristian Donaire Bustos
CISO | RedSalud
Mario Alday López
CISO | Clínica Alemana
Sergio Mella
CISO | Banmedica Companies Providers
THE TALK: ENGINEERING RESILIENCE WHERE DEPENDENCIES HIDE
Industries: Smarter or more fragile? Invisible dependencies
Industry 5.0 promises more connected, autonomous, and efficient operations, but it also creates invisible dependencies between OT, IT, AI, cloud, vendors, and people. This session will show how to identify the vulnerable points that can amplify a disruption and how to turn them into design, governance, and resilience decisions to keep the operation running under adverse scenarios.
Enrique Poceros
CTO | Roue Consultores
THE PANEL: RED HAT + AWS
Agentive AI and automation: governance to reduce operational risk
The presentation addresses the gap between the detection of IT incidents and their manual resolution. Its goal is to demonstrate how to move from passive monitoring to AI-driven, agent-driven automation. This enables mitigating operational risks, accelerating incident remediation, and ensuring human control through traceability, access management, and secure execution.
Jorge Hansen
Ansible Sales Specialist | Red Hat
THE TALK: YOUR NEXT INSIDER THREAT MAY NOT BE HUMAN
Humans and AI agents: risk management in the digital workforce
The modern workforce integrates people and AI agents: any one of them could cause the next security incident. In this session, we will explain how to move from protecting only people to securing the entire digital workforce, addressing the risk where human behavior and AI intersect.
Nicolas Keeble
THE TALK: CYBERSECURITY ECOSYSTEM OT/IT
Practical cybersecurity: real risks vs concrete measures
In this session, we will analyze current exposures to industrial networks and threats related to incidents. Attendees will understand recent events and flaws in controls related to the MITRE ICS framework, as well as recommended minimum architectural measures, why and how to protect ICS environments. Finally, they will see the control standards and how to address them from ISA 62443, and their differences with ISO2701.
Daniel Zettler
THE SPOTLIGHT: COMPLIANCE
From compliance to action: how to integrate cybersecurity, data protection, and artificial intelligence
Chile faces a new regulatory phase with the Cybersecurity Marco Law and the upcoming Data Protection Law 21.719. Instead of treating them separately, the challenge is to build an integrated governance model that unifies people, processes, technologies, and corporate responsibility. In this session, attendees will receive a practical roadmap to identify gaps, prioritize risks, and define controls in incidents, continuity, personal data, suppliers, and AI. The necessary steps to move from formal compliance to real resilience.
Andrés Pumarino
THE WORKSHOP: HACKING THE MODEL, DEFENDING THE PLANT
When machines learn to attack: AI vs OT
Malicious AI manipulates the data seen by computer vision systems, intelligent sensors, and predictive maintenance models, without touching a single line of code. The result: falsified diagnoses, evaded security systems, and sabotage of quality control. The talk reviews a real case of an attack using this technique, its consequences, the mitigation measures applied, and statistical data on the phenomenon.
Constanza Alarcón Cuevas
17:10 – 17:20