BY INVITATION ONLY

 

2025 North American
Critical Infrastructure Transportation
Cybersecurity Consortium
Wednesday, November 12 - Friday, November 14, 2025
2 Broadway, New York, NY 10004

About

 

Collaborate

Knowledge Sharing

Standards


This in-person event brings together cybersecurity industry leaders and transportation sector experts to share insights, knowledge, and real-world experiences. Our participants include the following:

  • Critical Infrastructure Partners
  • Public Transportation Entities
  • US Regulating Entities
  • Law Enforcement
  • Policy Makers

This year’s agenda will feature key insights and progress in the transportation systems security with a focus on:

  • Current state of security in the rail and bus sectors, including emerging trends, technological innovations, and operational shifts
  • Perspectives from executive and operational transportation leaders, reflecting on successes, challenges, and strategic developments over the past year
  • Live OT Penetration Test Simulation and workshops to learn about the challenges and solving real world problems
  • In-depth discussions on regulatory requirements and the broader implications for the transportation industry

Agenda

 

Banner

Day One: Wednesday, November 12

8:15 am - 9:00 am Check-in and Breakfast
9:00 am - 9:15 am Welcome
9:15 am - 9:45 am Opening Remarks: Joseph DeLorenzo, FTA Associate Administrator and Chief Safety Officer
9:45 am – 10:15 am Panel 1: Beyond Tech – The Strategic Role of HR, Finance, Procurement & Law in Cybersecurity

Members:
Lisette Camilo, MTA Chief Administrative Officer
Paige Graves, MTA General Counsel
10:15 am – 10:45 am Case Study: Integrating Cybersecurity into Railcar Procurement Programs – Tak Ishigami, Kawasaki Director of Engineering
10:45 am – 11:00 am MORNING BREAK
11:00 am – 11:45 am Presentation: Demystifying Artificial Intelligence (AI) Security Misconceptions – Craig Porter, Gartner Director Analyst
11:45 am – 12:30 pm Panel 2: Securing the Commute: Government Roles in Protecting Public Transportation Through Partnership

Members:
Colin Ahern, New York State Chief Cyber Officer
Kelly Moan, New York City CISO
12:30 pm – 1:15 pm LUNCH BREAK
1:15 pm – 1:45 pm Presentation: Industry Outlook: Trends, Challenges, and Opportunities – Katell Thielemann, Gartner VP Distinguished Analyst
1:45 pm – 2:30 pm Panel 3: Protecting Revenue and Fare Collection Systems

Members:
Allison C. de Cerreño, MTA B&T Chief Operating Officer
Rafi Khan, NJ Transit CISO
Amy Linden, MTA Senior Director of New Fare Payment Systems
2:30 pm – 3:00 pm Case Study: Cybersecurity @ Rail Infrastructure - Andres Gonzalez Guilarte, Siemens Head of the Mobility Cybersecurity Center of Excellence and Global Product & Solution Security Officer – Rail Infrastructure
3:00 pm – 3:15 pm AFTERNOON BREAK
3:15 pm – 3:45 pm Case Study: Supply Chain - Eddy Thesee, Alstom VP Products & Solutions Cybersecurity
3:45 pm – 4:45 pm Panel #4: Supply Chain Security Challenges & Solutions in Transportation

Members:
Benoit Bruyere, Hitachi Rail Cybersecurity Authority
Polly Hanson, APTA, Senior Director
Andreas Hilmer, Siemens Vice President Cybersecurity
Kimberly Luckey-Witsell, MTA Deputy General Counsel
Eddy Thesee, Alstom, VP, Products & Solutions Cybersecurity
4:45 pm Day One Closing Remarks
5:00 pm – 7:00 pm Networking Mixer at Continental Sports Lounge @ 82 Beaver Street
Banner

Day Two: Thursday, November 13

8:15 am - 9:00 am Check-in and Breakfast
9:00 am - 9:15 am Day Two Opening Remarks
9:15 am – 10:15 am Panel 5: Cybersecurity Developments in Rail Infrastructure: An OT Leadership Update

Members:
Russ Auerbach, MTA LIRR Assistant Chief Engineer
Matthew Doyle, BCRTC VP of Maintenance and Engineering
Adisha Jayaratne, MTA C&D SVP Signals Train Control
Muhammad Najam-Ud-Din, MTA MNR Assistant Chief Engineer
10:15 am – 10:45 am Presentation: FRA Updates - Carolyn Hayward-Williams, FRA Director of Railroad Systems and Technology
10:45 am – 11:15 am Presentation: Effects-based Approaches to Securing Public Transit - Danielle Jablanski, STV OT Cybersecurity Program Lead
11:15 am – 11:30 am MORNING BREAK
11:30 am – 12:30 pm Panel 6: How AI is Redefining Cybersecurity

Members:
Mark Hughes, IBM Global Managing Partner Cybersecurity
Tas Jalali, AC Transit CISO
Raf Portnoy, MTA CTO
12:30 pm – 1:15 pm LUNCH BREAK
1:15 pm – 1:45 pm Presentation: Segmenting OT Systems Using Virtual Zoning - John Ballentine, Port Authority NY & NJ ICS Cyber Security Program Lead
1:45 pm – 2:15 pm Panel 7: Electric Bus and Charging Systems Security

Members:
Ahsan Baig, AC Transit CIO
Peter Giang, MTA Cybersecurity Engineer
Jorge Lemus, New Flyer/MCI Vehicle Cybersecurity Engineering Lead
Michael Mi, New Flyer/MCI Chief Engineering Manager
2:15 pm – 2:45 pm Case Study: Adding Access Control to Legacy Systems - Aaron Amorim, Hitachi Rail Chief Software Architect
2:45 pm – 3:00 pm AFTERNOON BREAK
3:00 pm – 3:30 pm Case Study: Securing Transit in the Digital Age - David Gierke, Cisco National Public Sector CISO
3:30 pm – 4:15 pm Panel 8: Integrating Cybersecurity into Rail and Infrastructure Projects

Members:
Jaco Cronje, WSP Director
Alireza Edraki, HNTB Associate Vice President
David Gierke, Cisco National Public Sector CISO
Danielle Jablanski, STV OT Cybersecurity Program Lead
Eddy Thesee, Alstom, VP, Products & Solutions Cybersecurity
4:15 pm – 4:45 pm Case Study: Securing Hybrid Transit Networks: A Cybersecurity Risk Assessment - Manpreet Mann, AECOM Senior Transit Systems Program Manager
4:45 pm Day Two Closing Remarks
Banner

Day Three: Friday, November 14

8:15 am - 9:00 am Check-In and Breakfast
9:00 am - 9:05 am Day Three Opening Remarks
9:05 am – 9:45 am Panel 9: State of Collaboration: CIO, CISO and OT Executives

Members:
Matthew Doyle, BCRTC VP, Maintenance and Engineering
Rob Galvin, Port Authority NY & NJ CIO
Randi Levin, Sound Transit CIO
Scott Margolis, MBTA CISO
9:45 am – 11:15 am Workshop #1: Defining and Building Incident Detection on Rail Infrastructure Systems
11:15 am – 11:30 am MORNING BREAK
11:30 am – 1:00 pm Workshop #2: Access Control Across All Rail Infrastructure
1:00 pm – 1:45 pm LUNCH BREAK
1:45 pm – 3:00 pm OT Penetration Test Simulation (Limited Attendance) - Public Transportation Review Findings Outcomes
3:00 pm Event Wrap Up

Honored Guests

 

Colin Ahern
Colin Ahern
Chief Cyber Officer
New York State
Lisette Camilo
Lisette Camilo
Chief Administrative Officer
Metropolitan Transportation Authority (MTA)
Cerreno
Allison C. de Cerreño
Chief Operating Officer
MTA Bridges & Tunnels (MTA B&T)
Joseph P. DeLorenzo
Joseph P. DeLorenzo
Associate Administrator and Chief Safety Officer
Federal Transit Administration (FTA)
Paige Graves
Paige Graves
General Counsel
Metropolitan Transportation Authority (MTA)
Carolyn Hayward-Williams
Carolyn Hayward-Williams
Director, Office of Railroad Systems and Technology, Federal Railroad Administration (FRA)
Mark Hughes
Mark Hughes
Global Managing Partner Cybersecurity
IBM
Kelly Moan
Kelly Moan
Chief Information Security Officer
New York City - Office of Technology & Innovation
Rafail Portnoy
Rafail Portnoy
Chief Technology Officer
Metropolitan Transportation Authority (MTA)

Host

 

Tariq Habib
Tariq Habib
Chief Cybersecurity Officer
Metropolitan Transportation Authority (MTA)

Presenters

 

Aaron Amorim
Aaron Amorim
Chief Software Architect
Hitachi Rail
John Ballentine
John Ballentine
OT Cybersecurity Lead
Port Authority of New York and New Jersey
David Gierke
David Gierke
Chief Information Security Officer
National Public Sector, Cisco

 

Andres Gonzalez Guilarte
Andres Gonzalez Guilarte
Head of Cybersecurity Center of Excellence
Siemens Mobility
Tak Ishigami
Tak Ishigami
Director of Engineering
Kawasaki
Craig Porter
Craig Porter
Director Analyst
Gartner

 

Eddy Thesee
Eddy Thesee
Vice President, Products & Solutions Cybersecurity
Alstom
Katell Thielemann
Katell Thielemann
Vice President, Distinguished Analyst
Gartner

 

Panelists

 

Russ Auberbach
Russ Auerbach
Assistant Chief Engineer - Communications & Signal
MTA Long Island Rail Road

 

Ahsan Baig
Ahsan Baig
Chief Information Officer
AC Transit

 

Benoit Bruyere
Benoit Bruyere
Cybersecurity Authority
Hitachi Rail

 

 

Jaco Conje
Jaco Cronje
Director
WSP

 

Matt Doyle
Matt Doyle
Vice President, Maintenance and Engineering
British Columbia Rapid Transit Company

 

Alireza Edraki
Alireza Edraki, MASc, LLM, PEng, PMP
Associate Vice President
HNTB

 

Robert Galvin
Robert Galvin
Chief Technology Officer
Port Authority of New York / New Jersey

 

Polly Hanson
Polly Hanson
Senior Director
American Public Transportation Association (APTA)

 

Andreas Hilmer
Andreas Hilmer
Vice President - Cybersecurity
Siemens

 

 

Danielle Jablanski
Danielle Jablanski
OT Cybersecurity Program Lead
STV
Tas Jalali
Tas Jalali
Chief Information Security Officer
AC Transit
Adisha Jayaratne
Adisha Jayaratne
SVP Program Executive
Metropolitan Transportation Authority (MTA)

 

Rafi Khan
Rafi Khan
Chief Information Security Officer
New Jersey Transit

Jorge Lemus
Jorge Lemus
Vehicle Cybersecurity Engineering Lead
New Flyer/MCI

Randi Levin
Randi Levin
Chief Information Officer
Sound Transit

 

 

Amy Linden
Amy Linden
Vice President and Program Executive
Metropolitan Transportation Authority (MTA)

 

Kimberly Luckey-Witsell
Kimberly Luckey-Witsell
Deputy General Counsel
Metropolitan Transportation Authority (MTA)

 

Manpreet Mann
Manpreet Mann
Senior Transit Systems Program Manager
AECOM

 

 

Scott Margolis
Scott Margolis
Chief Information Security Officer
Massachusetts Bay Transportation Authority

 

Michael Mi
Michael Mi, PEng, MBA
Chief Engineering Manager
New Flyer/MCI

 

Sunil Nair
Sunil Nair
Vice President
MTA NYCT - Department of Bus

 

 

Muhammad Najam-Ud-Din
Muhammad Najam-Ud-Din
Assistant Chief Engineer
MTA Metro-North Railroad

 

 

Participants

Transportation Agencies

AC Transit (Oakland California)

Amtrak (Regional)

British Columbia (BC) Rapid Transit Company
Canadian Pacific Kansas City (CPKC)
Central New York Regional Transportation Authority (CENTRO)

Dallas Area Rapid Transit (DART)
Dallas Area Rapid Transit (DART)


Massachusetts Bay Transportation Authority (Boston, MA)
Massachusetts Bay Transportation Authority (Boston, MA)

METRA (Chicago Commuter RR)
METRA (Chicago Commuter RR)


NJ Transit
New Jersey Transit
(New Jersey)

OCTA
Orange County Transportation Authority
(Southern CA)
Port Authority of NY NJ
Port Authority of New York and
New Jersey

Regional Transportation District (RTD)

Rochester-Genesee Regional Transportation Authority
Rochester-Genesee Regional Transportation Authority (New York)

Sound Transit
Sound Transit


Southeastern Pennsylvania Transportation Authority (SEPTA)
Southeastern Pennsylvania Transportation Authority

Utah Transit Authority (Ride Utah)
Utah Transit Authority (Ride Utah)


Virginia Railway Express
Virginia Railway Express (VRE)



Other Organizations

AECOM

Alstom

American Short Line and Regional Railroad Association (ASLRRA)
APTA (American Public Transportation Association)
Clever Devices
Clever Devices

CISCO
Cisco

FBI
Federal Bureau of Investigation (FBI)

Federal Transit Administration (FTA)

Gartner
Hardee Brothers
Hatch
Hitachi Rail
Hitachi Rail
Info Tech
Info Tech Research Group
Jacobs
Kawasaki
Kawasaki
Knorr-Bremse
Knorr-Bremse
Mitsubishi Electric
Moxa
New Flyer
Parsons
Rockwell Automation
Schneider Electric
Secheron Hasler
Secheron Hasler
Siemens
Siemens
STV
STV
Technology Advancement Center (TAC)
Technology Advancement Center
Vanasse Hangen Brustlin (VHB)
Vanasse Hangen Brustlin (VHB)
WSP
WSP

Directions


MTA Consortium Address

MTA Headquarters
2 Broadway
New York, NY 10004

Email: cyberconsortium@mtahq.org


Using the Map

  1. Click Directions Directions
  2. Choose your mode of transportation:
    • To get driving directions, click Driving Driving
    • To get transit directions, click Transit Transit
    • To get walking directions, click Walking Walking
    • To get cycling directions, click Cycle Cycling

Tip: To choose another route in any transportation mode, click the corresponding icon. Each route shows the estimated travel time on the map.

 

Accommodations

 

Image 1 Image 2


Hotel: DoubleTree by Hilton NY Downtown
Address: 8 Stone Street, New York, NY
Phone: 212-480-9100

The hotel is conveniently located two blocks from three MTA subway stations:
  • Bowling Green (4 line and 5 line lines)
  • Wall Street/William Street (2 line and 3 line lines)
  • South Ferry (1 line line)
  • Brief 1 minute walk to MTA Headquarters
Reserve your guest room by Saturday, October 11 before midnight to secure our discounted conference rates:
  • King room $329 + tax* per night
  • Double room $349 + tax* per night

Book directly via this link.

  • Group Name: MTA IT Department 2025
  • Group Code: CDT929

* If you are eligible for tax exemption, please bring a copy of your tax-exempt form/certificate to provide at check-in.

Cybersecurity Requirements for
Operational Technology Procurement

 


The North America Transportation Cybersecurity Consortium comprises of 54 public transportation agencies members and is dedicated to improving the security posture of its operational technologies, such as Power, Communications, Signaling, Public Information, and Safety Systems.  This working group of public transportation agencies, cybersecurity leaders, vendors, and manufacturers developed standardized cybersecurity requirements to support a unified strategy for securing all future operational technology systems.
The main objectives of the standard requirements are the following:

  • Minimize potential future costs to public agencies by including cybersecurity requirements upfront
  • Suppliers, manufacturers, and integrators are aware of these baseline requirements from the start
  • Requirements are prescriptive and specific to protect against commonly exploitable components of the Operational Technologies
  • Requirements include technical controls and processes such as asset management, patch management, incident response, incident detection, and recovery to ensure operators know how to run the system securely after it is available in the production environment
  • The requirements are portable to a systems’ component such as Active Directory or a set of system components for instance wireless, virtual servers, network security, rolling stock, etc.
  • The requirements ensure that the production systems are not at the end of life or end of support before they are operational.
  • Following these requirements facilitates compliance with Transportation Security Administration (TSA) Directives

For any questions specific to the requirements, please contact us at mtaocs@mtahq.org.