What you'll leave with
A working blueprint — not another threat-landscape overview.
This is a build session for the people who own the exposure. We walk the full arc of a multi-year OT cyber risk program and show where each decision gets anchored to a number.
Baseline
Exposure in dollars
Establish where your OT cyber risk actually sits and express it as financial exposure — annualized loss and tail scenarios, not a color on a heat map.
$ expected lossRoadmap
Sequence the mitigation
Turn the baseline into a multi-year plan: which controls move risk the most, in what order, and where the next dollar of spend earns its return.
3-yr horizonReporting
Report to the board
Translate the program into the language executives price — exposure, reduction over time, and defensible confidence — on a page they'll actually read.
board-ready
Your speakers
Two practitioners, one working session.
Host
Kevin Hamman
Product Delivery Manager, DeNexus
Guest
Scott Hooper
Director, Cybersecurity, Clearway
Working-session agenda
From baseline exposure to board-level reporting.
01
Baseline the exposure
Establishing OT cyber risk in financial terms — what to measure first and how to make the number defensible.
02
Prioritize the mitigation
Sequencing controls across a multi-year horizon by risk reduction, not compliance checklists.
03
Track reduction over time
Measuring whether the program is working — control ROI and year-over-year risk movement.
04
Report to the board
Turning the program into executive-ready reporting, plus live Q&A with Kevin and Scott.