Bridging Research and Practice in OT Penetration Testing is a focused, single-day event for professionals involved in operational technology (OT) penetration testing. Whether you work hands-on with assessments, commission them, or are shaping the direction of the field, this event is designed to provoke thought, encourage collaboration, and surface practical insights.
Developed as the culmination of a research fellowship funded by RITICS, the event brings together academic insight, practitioner experience, and strategic perspectives on the future of OT security testing. Attendees can expect clear, direct talks, findings grounded in real-world challenges, and open conversations about where the discipline needs to evolve: technically, operationally, and culturally.
What to Expect
- Open discussion and networking in a focused, practitioner-driven setting
- Insight from both the practitioner and procurer perspectives on OT penetration testing engagements
- A presentation of findings from the RITICS-funded research project, outlining key challenges and areas for development in the discipline
- A practical and progressive tone, with room for critical reflection, shared pain points, and forward-thinking ideas
Featured Speakers (with more to be announced)
- Adam A, NCSC
- John Fitzpatrick, Founder of Lab539, reflecting on why conventional IT security models fall short in OT, and how long-held assumptions about pentesting and patching may be blinding us to what actually works in critical environments
Who Should Attend
This event is for those working to advance the practice of OT penetration testing, whether by doing the work, commissioning it, studying it, or influencing its development through policy or strategy. If you are actively engaged with OT security and want to contribute to a better collective understanding of how testing is done and where it needs to go, this is your space.
Please note: spaces are limited to keep the event focused and useful. Register only if you are actively involved in this space, have a clear and relevant interest, and fully intend to attend on the day.
0930: Arrivals and networking
1000: Ric Derbyshire and Chris Hankin – Opening Remarks
1015: Adam A , To present NCSC’s cyber-physical problem book
1030: Coffee
1100: John Fitzpatrick, Lab539 – OT penetration testing
1200: Lunch break
1300: Ric Derbyshire to present RITICS results
1400: Networking