Ireland’s water, energy, transport and aviation operators are being asked a question they cannot easily answer: what is monitoring the operational network? Most can describe the IT side in detail. The plant side tends to run on segmentation, a firewall and the assumption that nobody has crossed the boundary, because the equipment sitting there frequently cannot be patched on demand, cannot host an agent, and cannot be taken offline to be fixed.

That gap has become a board matter. NIS2 puts accountability on management personally, and the questions arriving from insurers, auditors and customers now ask what is watching the operational estate rather than what policy covers it. The AI Act adds a second layer, because the AI being used to close the gap is itself becoming something that has to be accounted for. The regulatory timelines shifted over the summer, which has caused some confusion about what still applies and when.

In this session, Nothreat will explain how detection that learns on the device changes the position on estates full of equipment that will not be replaced this decade. Rather than waiting for a signature to arrive from outside, the platform adapts to new attacks as it encounters them, with no update needing to cross the segmentation boundary and no human intervention in the training loop. The model retrains itself on new attacks without an analyst having to write or approve a rule. Every detection remains logged, reviewable and overridable. Nothreat will also share findings from their analysis of over 16 million automated attacks, showing what is actually reaching industrial IoT and web infrastructure right now.

Who should attend

CISOs, CTOs, CIOs and IT directors within critical national infrastructure, utilities, energy, water, transport, aviation and public sector bodies. Heads of OT security, SCADA and control systems engineering leads, and network and security architects responsible for operational estates. Compliance and risk leaders carrying NIS2 or AI Act accountability. Senior technical leadership at MSPs and integrators supporting entities designated essential or important.

Key Takeaways

In this session, you will learn:

• Where NIS2 and the EU AI Act now stand for Irish infrastructure operators, and what changed over the summer
• Why detection that depends on updates arriving struggles on segmented and air-gapped estates, and what works instead
• How protection can be placed onto IIoT and edge devices as software, without new hardware or a scheduled outage
• How deception technology captures attacker behaviour without exposing a single production system
• What evidence a self-learning platform produces when a regulator, an insurer or a customer’s risk team asks how the operational network is monitored
• How data residency is handled when decoys are isolated from production, no data is collected from live systems, and deployment is available on-premise or in sovereign cloud
• What questions to put to any vendor selling AI-driven security, covering accuracy claims, logging and human oversight

Agenda:

11:00 – Welcome and Introduction, Michael Conway, Renaissance

11:05 – Where NIS2 and the AI Act leave Irish infrastructure operators, Vladan Todorovic, Nothreat

11:20 – ThreatScape: what 16 million automated attacks reveal, Nothreat

11:45 – Q&A

12:00 – Close