AI for Industrial Security Day

Third-party vendors are critical to business success, but they can also introduce operational, financial, and reputational risks—and may require FOCI mitigation. Discover platforms, tools, and best practices that leverage automation to streamline vendor onboarding and management while helping your team work more efficiently.

• Scoring suppliers based on key risk factors
• Assessing vendor ownership and control
• Automating due diligence workflows to enhance team capabilities
• Enabling fast, effective, data-driven decision-making
• Identifying, prioritize, and act on critical vulnerabilities before they impact the business
• Attesting what is included in the software

Ensuring appropriate guardrails are in place to prevent data compromise. Currently, generative AI models used in some classified environments can answer questions but do not learn from the data they process but changes may be on the horizon. In this session explore:

• Security risks associated with allowing models to train on or learn from classified data
• Assessing model accuracy and performance when trained only on unclassified data
• Managing access to classified information, including distinctions between classification levels and information requirements
• Replicating an analyst’s ability to detect subtle visual cues and link new data with historical or other relevant contexts
• Evaluating the risks of AI tools while balancing them against the benefits of large language models

Taking the pulse on the business sectors! Join this interactive session where delegates will participate in problem solving, benchmarking and small group activities. Organizations must move quickly to adopt AI, technology and automation while maintaining trust, security, and compliance. This session brings together practitioners to share practical AI adoption strategies including agentic AI, security and oversight.

• Group 1: Examining risk management approaches
• Group 2: Policy design best practices
• Group 3: Accountability models
• Group 4: Steps to empower secure responsible and scalable AI adoption
• Group 5: AI for Insider Threat Awareness

Extensive review of Affiliated Operations Plans (AOPs) and Electronic Communication Plans (ECPs) processes reveals many moving pieces, highlighting the need for better automation and integration. This session will delve into how automation can improve efficiency.

• Improving tracking and reporting mechanisms to ensure generated data is consistently captured and used for decision-making
• Streamlining form generation processes (e.g., affiliate visits, foreign visitor requests) to reduce manual effort and errors
• Evaluating how AI/ML can be leveraged to eliminate redundancy, with a focus on cost reduction and operational efficiency
• Modernizing the visit request process across all interaction types (in-person, Teams, phone) through AI-enabled automation
• Reducing reliance on manual coordination by automating how data, approvals, and touchpoints are stitched together across systems

• Balancing build vs. buy decisions by weighing flexibility, scalability, cost, and long-term ownership when choosing between in-house solutions and external vendors
• Assessing whether tools can keep up with evolving regulatory requirements, and how much adaptability and configurability matter over time
• Defining “fit for purpose” across stakeholders (security, operations, legal, IT, supply chain), including usability, system integration, and impact on daily workflows
• Clarifying regulatory expectations for AI-enabled tools, including what must be controlled, documented, and validated regardless of build or buy approach
• Accounting for the ongoing burden of maintenance, customization, and updates—and how these factors shape initial purchasing decisions
• Benchmarking how peers evaluate vendor claims versus real-world performance, including where tools may overpromise or require more internal support than expected

The cloud threat landscape is fundamentally different from that of traditional on-premises environments. As organizations rely more heavily on cloud services, they encounter new complexities and security challenges—making these environments an increasingly attractive target for adversaries. While cloud adoption can improve efficiency and strengthen security, these benefits are only realized when it is properly implemented.

• Utilizing cloud identity and access management processes.
• Enforcing secure automated deployment practices through infrastructure as code
• Cloud systems may offer a range of applications, raising questions about vendor selection
• Clarifying the vendor vetting process and required standards
• Determining how vendors demonstrate operability within government cloud environments
• Understanding the level of due diligence performed during evaluation
• Identifying what contractors must provide or achieve to meet compliance requirements

• Implementing a three-level structure of the CMMC cybersecurity framework
• Examining compliance levels and their purpose the rational “why” they exist
• Defining boundaries and segmenting networks
• Using secure enclaves for handling CUI
• Logging, monitoring, and maintaining continuous compliance
• Security core documentation: SSP, POA&M, incident logs
• Practical handling of CUI (find, process, store, transmit)
• Determining data residency and cloud deployment considerations
• Analyzing ITAR/EAR overlap with CUI requirements
• Avoiding legal and compliance risks of mishandling CUI