SecureWorld Government & Critical Infrastructure Virtual Conference 2026

Your opportunity to visit our solution vendor partners, whose sponsorship makes SecureWorld possible! Peruse the many downloadable resources each booth has to offer.

Visit the Networking Hall to network with attendees and connect with our supporting solution providers and association partners.

The capability to destroy infrastructure has existed since 2007 and has been rehearsed on Ukraine’s grid with the same vendor products running US plants, yet almost nothing here has been touched. The capability sits idle on purpose because its value lies in being known. An adversary who wants you aware requires different defenses than one who wants you beaten. This is why resilience outperforms deterrence, and the talk closes on what that posture actually looks like for an operator.

Session details to come.

Visit the Networking Hall to network with attendees and connect with our supporting solution providers and association partners.

Enterprise identity can no longer be reduced to a login gate. Modern products span admin consoles, workspaces, APIs, and privileged workflows, often across multiple identity providers and assurance levels. This session presents a vendor-neutral architecture that separates principal eligibility, resource authentication requirements, and session assurance. It examines common failures in coarse-grained SSO and shows how teams can introduce stronger controls using policy evaluation, shadow decisions, decision logging, staged enforcement, and rollback safeguards without causing widespread access failures or creating brittle user experiences.

Attendees will leave with a practical architecture and rollout checklist for building resource-aware authentication and authorization controls across complex enterprise products.

Critical infrastructure is no longer merely a high-value target; it is the front line of modern geopolitical conflict. This session connects the dots between escalating global volatility and immediate risks to cyber-physical systems, operational technology (OT), and public safety. We will examine how nation-state actors and hybrid threat groups are exploiting interdependencies across energy, water, telecommunications, and defense industrial supply chains to execute disruption-first campaigns.

The discussion will pivot to the internal convergence of OT and IT, analyzing the vulnerabilities introduced by edge compute, remote asset telemetry, and the integration of AI-driven industrial automation. From state-sponsored Advanced Persistent Threats (APTs) deploying custom wiper malware against industrial control systems (ICS) to high-extortion ransomware syndicates targeting life-safety environments, we profile the adversaries engineered to disable foundational systems.

Join us for a 2026 outlook that moves beyond standard enterprise compliance, delivering a battle-tested roadmap for cyber-physical resilience, fail-safe architecture, and sovereign asset protection under active operational stress.

As the digital and physical worlds become increasingly interconnected, the risks to critical infrastructure continue to evolve. In this session, we will explore the convergence of cybersecurity and physical security, highlighting the growing threats that target operational technology (OT) controls and essential systems. Attendees will gain insights into the vulnerabilities that arise when cyber and physical security are not aligned and learn best practices for securing critical infrastructure against emerging threats. Join us for an in-depth discussion on how to mitigate risk and enhance resilience in today’s complex security landscape.

Visit the Networking Hall to network with attendees and connect with our supporting solution providers and association partners.

Visit the Networking Hall to network with attendees and connect with our supporting solution providers and association partners.

Are you seeking LCCA certification to assess organizations for compliance with the Cybersecurity Maturity Model Certification (CMMC) requirements? Unlike many other cybersecurity certifications, becoming a Lead CMMC Assessor (LCCA) involves specialized qualifications, responsibilities, and requirements. This interactive session will provide an overview of the CMMC assessment ecosystem, including which organizations may be required to obtain CMMC certification and why compliance is essential for protecting sensitive defense-related information. Participants will also learn how Certified CMMC Professionals (CCPs), Certified CMMC Assessors (CCAs), and Lead CMMC Assessors (LCCAs) contribute to the assessment and certification process. We will conclude with an overview of the pathway to becoming an LCCA, including the key steps, expectations, and considerations for professionals interested in pursuing this role.

We can no longer afford to view the critical infrastructure as two (2) separate domains: 1) Physical and 2) Cyber. Today’s critical infrastructure is interconnected, intertwined, and/or fused where an event in one attribute affects the other simultaneously, or in parallel. Therefore, the modern critical infrastructure must be assessed and governed holistically.

The country needs a hybrid vulnerability assessment and governance framework that finds and closes vulnerabilities before America’s adversaries find them.

Critical infrastructure sectors—from energy grids and water treatment facilities to transportation hubs and healthcare systems—face an unprecedented wave of sophisticated, state-sponsored cyber operations, highly disruptive ransomware, and supply chain intrusions. As traditional operational technology (OT) and industrial control systems (ICS) rapidly converge with hyperscale cloud environments, legacy air-gaps have dissolved, drastically widening the attack surface and introducing severe vulnerabilities across hybrid architectures.

This panel brings together industry leaders to examine the shifting threat landscape targeting essential services and outline modern defense-in-depth strategies. Key areas of focus include:

• Pervasive Network Visibility & Deep Observability: Eliminating blind spots across hybrid IT and OT environments through intelligent traffic monitoring, application metadata extraction, and East-West lateral movement detection.
• Resilient Cloud Infrastructure & Threat Intelligence: Leveraging planetary-scale threat telemetry, zero-trust architectures, and automated cloud-native detection and response to protect centralized management planes and distributed mission-critical workloads.
• Integrated Cyber Protection & Operational Continuity: Unifying endpoint security, AI-powered anti-ransomware defenses, and immutable disaster recovery to guarantee rapid restoration and minimize downtime in the event of an attack.
• OT/ICS Posture Hardening & Attack Surface Management: Implementing rigorous continuous configuration hygiene, micro-segmentation, and proactive risk remediation to safeguard legacy and proprietary industrial field devices.

Attendees will gain actionable insights into how enterprise cloud defenses, deep network telemetry, automated cyber recovery, and industrial system hardening work in concert to build operational resilience against modern cyber threats.

Visit the Networking Hall to network with attendees and connect with our supporting solution providers and association partners.