THE SCHEDULE

⏰ 8:00 – 8:45

REGISTRATION

Registration & Welcome coffee

⏰ 8:45 – 9:00

WELCOME

Opening Industrial Cyber Summit Chile 2026

Digital fortress: building resilience in Industry 5.0

Industrial cybersecurity is no longer a problem of cables and servers: it is the new front in the battle for national sovereignty. In her opening remarks, Flavia Mendez draws a map of a world where the region’s critical assets become strategic targets of conflicts that do not require missiles. A world where the only possible response is to build organizations that absorb the impact without stopping production.

⏰ 9:00 – 9:15

THE TALK: THE NEW RULES OF THE GAME

Map of Cybersecurity in Chile: the key role of the ANCI

An overview of the new regulatory landscape: Law 21.663, Vital Importance Operators, and the next steps.

⏰ 9:15 – 9:45

THE PANEL: FUTURE SCIENCE & INNOVATION CYBERSECURITY

Quantum, AI and autonomy: the race that redefines tomorrow's security

Researchers and scientists are debating how AI and quantum computing will redefine Chile's first line of digital defense.

⏰ 09:45 – 10:05

THE TALK: SANS INSTITUTE

The Attack Surface Is Already Running
Latest threats to OT: how to be prepared.

How long is the window between initial intrusion and physical impact on your plant? Mike Hoffman, SANS Instructor with over 25 years in ICS/OT cybersecurity, outlines the attack patterns he is seeing today in the field, what has changed over the last year, and SANS’ 5 Critical Controls to move from passive compliance to active preparedness—with OT resilience as the most valuable asset to sustain the operation as Chile, the world’s largest copper producer and home to more than 50% of the lithium reserves, consolidates as a strategic target.

⏰ 10:05 – 10:20

THE TALK: CLAROTY + KPMG 

Attacks on Cyber-Physical Systems (CPS): Threats to Critical Infrastructures

In this session, we will see some evidence of attacks on critical infrastructure and examples of how some OT components can be attacked, to conclude with a strategic look at the security of cyber-physical systems (CPS).

⏰ 10:20 – 10:35

THE TALK: FORTINET + SONDA

How to provide visibility and real control over industrial assets in the convergence of IT/OT.

⏰ 10:35 – 11:05

COFFEE BREAK & THE EXPO

⏰ 11:05 – 11:35

THE PANEL: ENERGY UNDER SIEGE

The silent challenge: the supply chain as a critical risk for OIVs

A panel of experts analyzes why the supply chain has ceased to be a matter of procurement or compliance: today, Critical Operations are as secure as the least prepared supplier that has access to their critical processes. A strategic debate about how to anticipate before that link becomes the gateway.

⏰ 11:35 – 11:50

THE TALK: ZERO TRUST FOR OT

The end of VPNs in OT environments

VPNs have been around for more than 30 years and are no longer sufficient to meet current security and remote access needs. Although for years VPNs were considered a reliable solution, today they are not. Currently, VPNs can expand the attack surface and become one of the main entry points for threats directed at corporate infrastructure. In this presentation, we show why the security associated with VPNs has become a myth and how to truly secure OT environments.

⏰ 11:50 – 12:05

THE TALK: WHEN PREVENTION FAILS, RESILIENCE WINS

AI and ransomware: when the threat learns faster than the defense

AI is redefining ransomware, which has ceased to be an attack and has become a system that learns. Increasingly autonomous and silent, it eludes the defenses that once held it back. When prevention arrives too late, resilience is what sustains the operation: immutable backups, rapid recovery, and continuity, even with compromised controls.

⏰ 12:05 – 12:35

THE PANEL: CRITICAL MINING INFRASTRUCTURE

Digital mining and operational resilience: cybersecurity in the age of automation and autonomy

Chile is the world's largest copper producer and concentrates more than 50% of the global lithium reserves. Its mining industry is not only the engine of the national economy, but also a critical infrastructure with geopolitical projection. And it is undergoing a complete transformation.

Remote operations centers, autonomous trucks, exploration drones, and real-time connectivity from the Atacama Desert have exponentially expanded the attack surface. The convergence of IT/OT in mining has ceased to be merely a roadmap to become an operational reality.

The question this panel addresses is not what to do if mining is attacked. It is whether it is prepared to continue operating when it is. The panelists will discuss how resilience is managed in operations that cannot be stopped, what the new Cybersecurity Act means for the sector, and where an industry that has a lot to lose begins.

⏰ 12:35 – 12:50

THE TALK: WHAT THE STANDARD WOULD HAVE STOPPED

OT attack vectors and industrial cyber resilience under ISA/IEC 62443

In this session, Kaspersky reviews the latest cyberattacks recorded by ICS CERT and compares them with the Fundamental Requirements of the ISA/IEC 62443 standard, identifying which points of the standard have blocked or prevented each incident. An analysis of global trends, regional risks, and attack vectors in critical infrastructures.

⏰ 12:50 – 13:10

THE TALK: COVERAGE GAP

Validation of detections in OT environments

OT security platform providers deliver thousands of pre-defined detections, but that doesn’t equate to real coverage: not all of them apply to every plant, and those that do depend on specific conditions (for example, unencrypted traffic). The talk raises the question of validating detections as a practice so that security teams understand exactly what triggers each alert, what confirms a true positive, and what to investigate.

⏰ 13:10 – 14:30

VIP LUNCH BREAK & THE EXPO

⏰ 14:30 – 14:50

THE INTERVIEW:

The role of the State in the protection of telecommunications as an essential service.

⏰ 14:50 – 15:20

THE TABLETOP: SUPPLY CHAIN UNDER PRESSURE

Hour Zero: Orchestrating continuity and resilience in Industry 5.0

This year we have left behind the phase of Industry 4.0, whose focus was hyperconnectivity and the automation of processes. Today in Chile we are transitioning to Industry 5.0, where the priority is no longer just efficiency but operational resilience. In a hyperconnected ecosystem, we know that the question is no longer whether we will suffer an incident, but when and how our supply chain will withstand the impact. The Cybersecurity Marco Law No. 21.663 ratifies this need, that is, it requires that the country's critical infrastructures have real capabilities to operate without stopping, governing IT/OT risk and protecting vital services.

⏰ 15:20 – 15:35

THE TALK: CAP S.A.

Cyber resilience at scale in complex industrial environments: The Case of Success of CAP S.A.

In industrial environments where IT/OT networks converge, a blind spot in the network can result in the shutdown of processes vital to the country. In this interactive fireside chat session, we will show how Chile’s leading mining and steel group transformed its threat detection and response posture, achieving cost efficiencies.

⏰ 15:35 – 15:50

THE TALK: THE HUMAN LAYER

9.9%: What a click on human risk in the industry reveals

We analyzed +2500 simulations in +150 industrial clients with +100,000 users: 9.9% click, but only 1.4%. What do these numbers tell us about the human factor in the industry, and what changes when generative AI starts manufacturing the lures? Data of our own to rethink the most difficult layer to patch: people.

THE TALK: BEYOND RECOVERABLE

Considerations on the path towards cyber resilience

Cybersecurity seeks to prevent a fire; cyberresilience is measured by how quickly you put it out. Faced with a destructive attack, the true cost is not the attack itself but reinfection: without an adequate response, organizations can recover up to 12 times before they are truly safe. Cohesity shares a proven model for moving from «recoverable» to «resilient» without losing control of the operation.

⏰ 15:50 – 16:20

THE PANEL: CODE BLUE FOR HOSPITAL NETWORKS

Seconds that save lives: simulations and responses to incidents in hospital environments 

When medical infrastructure is targeted, the speed of response is measured in human lives. A practical discussion about the design of response plans, the execution of eexercises of crisis and the preparation of medical and technical teams to mitigate cyberattacks on OT systems, where every minute of downtime directly impacts patient safety. 

⏰ 16:20 – 16:35

THE TALK: ENGINEERING RESILIENCE WHERE DEPENDENCIES HIDE

Industries: Smarter or more fragile? Invisible dependencies

Industry 5.0 promises more connected, autonomous, and efficient operations, but it also creates invisible dependencies between OT, IT, AI, cloud, vendors, and people. This session will show how to identify the vulnerable points that can amplify a disruption and how to turn them into design, governance, and resilience decisions to keep the operation running under adverse scenarios.

THE PANEL: RED HAT + AWS

Agentive AI and automation: governance to reduce operational risk

The presentation addresses the gap between the detection of IT incidents and their manual resolution. Its goal is to demonstrate how to move from passive monitoring to AI-driven, agent-driven automation. This enables mitigating operational risks, accelerating incident remediation, and ensuring human control through traceability, access management, and secure execution.

⏰ 16:35 – 16:50

THE TALK: YOUR NEXT INSIDER THREAT MAY NOT BE HUMAN

Humans and AI agents: risk management in the digital workforce

The modern workforce integrates people and AI agents: any one of them could cause the next security incident. In this session, we will explain how to move from protecting only people to securing the entire digital workforce, addressing the risk where human behavior and AI intersect.

THE TALK: CYBERSECURITY ECOSYSTEM OT/IT

Practical cybersecurity: real risks vs concrete measures

In this session, we will analyze current exposures to industrial networks and threats related to incidents. Attendees will understand recent events and flaws in controls related to the MITRE ICS framework, as well as recommended minimum architectural measures, why and how to protect ICS environments. Finally, they will see the control standards and how to address them from ISA 62443, and their differences with ISO2701.

⏰ 16:50 – 17:10

THE SPOTLIGHT: COMPLIANCE

From compliance to action: how to integrate cybersecurity, data protection, and artificial intelligence

Chile faces a new regulatory phase with the Cybersecurity Marco Law and the upcoming Data Protection Law 21.719. Instead of treating them separately, the challenge is to build an integrated governance model that unifies people, processes, technologies, and corporate responsibility. In this session, attendees will receive a practical roadmap to identify gaps, prioritize risks, and define controls in incidents, continuity, personal data, suppliers, and AI. The necessary steps to move from formal compliance to real resilience.

THE WORKSHOP: HACKING THE MODEL, DEFENDING THE PLANT

When machines learn to attack: AI vs OT

Malicious AI manipulates the data seen by computer vision systems, intelligent sensors, and predictive maintenance models, without touching a single line of code. The result: falsified diagnoses, evaded security systems, and sabotage of quality control. The talk reviews a real case of an attack using this technique, its consequences, the mitigation measures applied, and statistical data on the phenomenon.

⏰ 17:10 – 17:20

THE INTERVIEW

⏰ 17:20- 19:00

SUNSET COCKTAIL