Where does cyberspace end, and the physical world begin?
For years, cyber security was about protecting information. Today, it is increasingly about protecting the systems people rely on without even noticing.
Payments, heating, water, healthcare, transportation, and the factory shift that starts before dawn all depend on infrastructure that few people think about until it becomes unavailable. When these systems stop, a part of ordinary life stops with them. Not permanently, and rarely in ways that are immediately visible, but a surgery is postponed, a production line goes quiet, a shipment is delayed, a family waits.
The consequences of a cyber incident are no longer measured only in records exposed, but in hours of life that never happen.
Automation and artificial intelligence are increasing this exposure in an unexpected way: they are revealing decades of accumulated technical debt. The systems that underpin critical infrastructure were built for isolation, not for connectivity, visibility, or autonomous decision-making. What was once a tolerable engineering compromise is now becoming an operational liability. As these technologies become increasingly embedded into critical services, long-standing weaknesses are becoming harder to ignore.
The conference explores the convergence of IT and operational technology, the resilience of critical infrastructure, and incidents in which cyber threats have produced physical effects, alongside the regulatory, operational, and engineering realities faced by the organisations that operate these systems. Sessions address compliance, risk management, security operations, engineering, and executive decision-making.
Join us as we explore one of the defining questions facing our industry today: how do we secure a world where cybersecurity has physical consequences?
What We're Looking For
As digital technologies become embedded in the systems that power our society, cyber security is no longer only about protecting information. It is increasingly about protecting the essential services, processes, and infrastructure that people rely on every day.
For Span Cyber Security Arena 2027, we invite security professionals, engineers, researchers, regulators, risk practitioners, compliance experts, technology leaders and decision makers to share practical experiences, lessons learned, innovative approaches, and real-world case studies.
We are particularly interested in presentations that explore the intersection of cyber security, operational resilience, critical infrastructure, and emerging technologies.
Important information
Acceptance Notification: 1 March 2027
Suggested topics
Critical Infrastructure & OT Security
Industrial Control Systems (ICS) and Operational Technology (OT) Security
Critical Infrastructure Protection
Energy, Transportation, Water and Healthcare Security
Smart Manufacturing and Industry 4.0
IT/OT Convergence
Industrial Incident Response
Cyber Resilience & Operational Resilience
Cyber Resilience Strategies
Operational Resilience
Business Continuity and Disaster Recovery
Crisis Management
Resilience Testing and Exercises
Governance, Risk & Regulation
Governance, Risk and Compliance (GRC)
NIS2, DORA and the Cyber Resilience Act
Regulatory Readiness and Implementation
Third-Party and Supply Chain Risk Management
Risk Assessment and Quantification
Privacy and Data Protection
Security Operations & Threat Management
Detection Engineering
Threat Hunting
Security Operations Centre's (SOC)
Threat Intelligence
Incident Response
Adversary Simulation and Red Teaming
AI, Automation & Future Systems
AI Governance and AI Risk Management
Security of AI Systems
Agentic AI and Autonomous Operations
AI in Critical Infrastructure
Automation in Security Operations
Human-Machine Decision Making
Security Engineering & Architecture
Cloud and Hybrid Infrastructure Security
Zero Trust Architectures
Secure-by-Design Engineering
Identity Security
Application Security
Infrastructure Security
We Especially Welcome
Real-world case studies
Lessons learned from incidents and recovery efforts
Research with practical applicability
Cross-disciplinary perspectives
Presentations that connect cyber security with business, engineering, operational or societal outcomes
Privacy notice
Span d.d. (as the organiser of Span Cyber Security Arena 2027) processes the personal data provided through your speaker application, including your name, contact details, professional information, biography, photograph, LinkedIn profile, speaking experience and session information, for the purposes of reviewing and managing speaker applications, communicating with speakers, and organising and administering the event.
Span Cyber Security Arena 2027 will be photographed and audio/video recorded. Speakers will be individually photographed and recorded during their presentations and may also be invited to provide short statements or interviews related to the event. Photographs, audiovisual recordings and statements will be used for documenting and promoting Span Cyber Security Arena, future editions of the event and related communication and marketing activities, including publication on Span's websites and social media channels.
For more information about how Span d.d. processes your personal data, please see Span's Privacy Policy.
For more details on travel and accommodation arrangements, please visit: https://spanarena.eu/en/call-for-speakers/
If you haven't logged in before, you'll be able to register.
Using social networks to login is faster and simpler, but if you prefer username/password account - use Classic Login.