Fundamentals of IEC 62443 Speaker Line-Up

Gabriel Faifman

Co-convener, TC65 WG10

Highly qualified with diverse experience as Director, Manager and Senior Consultant in Information Systems and Network Security on many projects within Schneider Electric; Wurldtech; GE; Accenture; BC Hydro; YVR (Vancouver International Airport); France Telecom; BellSouth; Deloitte & Touche, and Coca Cola. US Patented Invention for ‘Automated Certification Based on Role’. Product & System Security Office member, in charge of the Cybersecurity Strategic Domain at Schneider Electric;

Formerly Director of Strategic Programs and Principal Technical Product Manager with Wurldtech (acquired by GE Digital) for over 7 years. Electronic Engineer UBA, specialized in Industrial Automation; CSS1 Infosec professional; Advanced trained at INL.  Serving as co-convenor for IEC TC 65 WG 10 since 2020. Serving as an SME for the TC65 working group on the IEC 62443 international standards project since 2011, representing Canada (Canadian Delegate). Created and executed the original conformance criteria adopted by IECEE on the current IEC 62443-2-4 certification program. IEC 62443-2-4 certifier for: Schneider Electric’s substation automation solution; Siemens Substation Automation; Siemens PCS7; Emerson DeltaV & SIS; Yokogawa Centum VP among others. ISASecure – Steering committee member, representing Schneider Electric since 2019.

Siv Houmb

Senior Adviser, Statnett

Dr. Siv Hilde Houmb has a PhD in cybersecurity and decision theory and more than 25 years’ experience in cybersecurity and critical infrastructure. She has a long and extensive industry background (more than 20 years), and her experience covers risk assessment, security protocols development, attack protection strategies, ethical hacking (penetration testing) and monitoring and surveillance technology for cybersecurity. She has engineered several security protocols and technical security solutions covering hardware, operating systems, applications and communications. She has worked as a security researcher both nationally and internationally and has published more than 50 scientific papers and articles on information security and risk assessment. Dr. Houmb has over the last 10 years focused on cybersecurity challenges for critical infrastructure, including Advanced Persistent Threats (APT) and how they could be used to severely impact a Nation’s core infrastructure.

Michael Knuchel

Head of SAS Engineering, Swissgrid

Michael Knuchel graduated in Electronics Engineering and has a Master at the ETH in Management, Technology and Economics. He is working as Head of Engineering SAS for Swissgrid and is additionally responsible for the Cyber Security Projects in the OT environment. He was Project Manager and one of the Authors of the Cyber Security Framework of Swissgrid for substations. Michael Knuchel has gathered experience in the OT field leading international commissioning teams for Substation Automation Systems for five years for ABB worldwide. He is Chairman of the cyber security task force of the Electricity Industry Association.

Rishikesh Sahay

Assistant Professor in Cybersecurity, Oregon Institute of Technology

Rishikesh Sahay is an Assistant professor in Cybersecurity at Oregon Institute of Technology, USA. He is a certified IEC/ISA 62443 Cyber Risk Assessment Specialist. Before moving to academia in the US he has worked in industry with companies like Orsted and MAN Energy Solutions as a cybersecurity specialist in Denmark. There he has worked in cyber risk assessment & mitigation and compliance according to the IEC 62443 cybersecurity and NERC-CIP. He did his Postdoctoral research at the Technical University of Denmark (DTU). At the DTU, he developed a cyber risk assessment framework for critical infrastructures.

He did his PhD from Sorbonne University in France in 2017. His PhD thesis was focused on autonomic cyber defense using software-defined networking.

His interests include Cyber risk assessment & mitigation, compliance, autonomic cyber defense, policy-based network management, software-defined networking, cyber resilience, and network security.

Deniz Tugcu

Lead OT Security Specialist, Vattenfall

Lead Senior Principal Security Consultant, trapped first cyber criminals (industry spies) back in 1994 by building his own dual bastion host with a breadcrumb honey net. Created (OT Security) results in various business sectors and companies, ranging from finance, United Nations to Global Renewable Energy. Eclectic and curious, looking for new ways to grow and improve security and the world. Currently piloting “FacOTry” enabling Security Automation and Orchestration, for scalable and efficient defence and operation of OT assets. Lives in Copenhagen, enjoys: running , exploration of craftsmanship (ha-ha. Known by co-workers as the CPH pitbull).

Lead Senior Principal Security Consultant, trapped first cyber criminals (industry spies) back in 1994 by building his own dual bastion host with a breadcrumb honey net.

Tahir Saleem

Senior Specialist, OT Security - DEWA

Tahir commands over a decade of professional experience in OT/ ICS domains with proven expertise in security strategy development, architecture design & engineering, mission-critical operation support, commissioning and maintenance of security services for owners and operators of critical infrastructure services covering: power & water, mining, transport (rail), and oil & gas products.

Tahir is currently working with the Dubai Electricity & Water Authority to build, develop and continually improve the OT security capability for the organization.

Christopher Robinson,

Principal Consultant, Applied Risk

Chris is a Principal Consultant at Applied Risk/DNV where he applies his expertise to various ICS cybersecurity projects to ensure solutions meet the needs of a modern industrial control system. In addition, Chris performs various red team activities such penetration testing, network architecture reviews, and firewall configurations. Chris holds both a Bachelor and Master of Science in Computer Science and maintains multiple certifications, including the GICSP, OSCP, GPEN, CISSP, GISP, GISF, and CEH. Chris has taught SANS MGT414, MGT415, and ICS410 courses and is one of the co-authors of ICS612. He currently resides in London, UK.

Dale Geach

Technology and Innovation Manager, Siemens

Dale is a business lead with an engineering background and over 29 years’ experience within the energy sector, working with industry customers and partners to understand the challenges faced in delivering a secure and sustainable transition to a cleaner, distributed, and digitalised energy system.  As Head of Digitalisation, IOT and Cybersecurity for the Electrification and Automation unit within the Siemens Smart Infrastructure business, Dale is responsible for secure portfolio and services development which serves not only the current needs of industry, but more importantly the technology and service needs of the evolving digitalised and cyber resilient Smart Grid.

Maarten Hoeve

Researcher, ENCS

Maarten Hoeve works at ENCS, a cooperative owned by different TSOs and DSOs to share knowledge on cybersecurity. He has helped many of ENCS’s members with performing risk assessments for their OT systems, and with setting security requirements in procurement projects. He was part of the drafting team for the upcoming network code on cybersecurity, where he worked on supply chain security and risk management.

Kelly Stich

Chief Cyber Security Architect, SUBNET Solutions Inc.

Kelly Stich is a registered Professional Engineer in British Columbia, Canada. Kelly has expertise in the domains of protection, control, automation, and OT cybersecurity. He worked at BC Hydro for over 16 years where he held roles such as Technical Lead for Transmission NERC CIP compliance and Specialist Engineer in Protection and Control Planning. Kelly has developed system architectures for secure remote access, arc flash mitigation, distribution protection and automation using GOOSE messaging, and established the programs for substation security patching and change management. At SUBNET, he is currently supporting NERC CIP, IEC 62443, and NIST CSF implementations for our utility partners.

Hariharan Ramachandran

Principal Security Assurance, Ofgem

Hari is a professional chartered Engineer with 20 years of experience in Engineering, Operations Management, Compliance, and Regulations. He has worked on a multitude of high-profile global engineering projects from conceptual, through FEED and detailed design, to site construction, commissioning, and follow-on operational support, in a wide range of highly critical industrial sectors. His special field of expertise comprises Instrumentation, Functional Safety, and Cyber security of Industrial Automation and Control systems. He is a member of the Cyber Special Interest group, InstMC, and a member of the IEC 62443 standards working group(WG) 10 and 20. He is currently pursuing his Doctorate in Industrial CyberSecurity at De-Montfort University, UK.