Massachusetts Public Sector Cybersecurity Summit 2026 Banner

Overview

The Massachusetts Public Sector Cybersecurity Summit is where government defends the future.

This public sector-focused event brings together IT security leaders, risk managers, and public officials to tackle the evolving cyber threats facing state and local government. Through expert-led sessions, peer exchange, and real-world case studies, attendees gain practical strategies to strengthen cyber resilience, protect critical infrastructure, and lead with confidence in an age of constant risk. Designed specifically for the public sector, this summit delivers insights you can act on and alliances you can trust!

A message from our Keynote Speaker

For a third year in a row, we are thrilled to convene the Public Sector Cybersecurity Summit, bringing together state and municipal cybersecurity professionals. This collaborative series of speakers and panel discussions will focus on risk management, cyber resilience, incident response, and more, giving participants the opportunity to learn from one another. I look forward to connecting with all of you again in Worcester for this year’s summit!

– Jason Snyder, Secretary, Executive Office of Technology Services and Security, and Chief Information Officer of the Commonwealth of Massachusetts

Speakers

Rachel Wilson

Rachel Wilson

Managing Director and Chief Data Officer, Morgan Stanley Wealth Management and Former NSA Senior Executive

Rachel Wilson is a Managing Director of Morgan Stanley Wealth Management and Chief Data Officer. Her team of security professionals is responsible for protecting all sensitive client data from any type of theft, loss or compromise. She also oversees the resilience of Wealth Management’s critical infrastructure and the continuity of core business processes at times of turbulence. Additionally, Rachel supervises the client fraud risk program, which institutes technical and business controls to help prevent unauthorized access to or misuse of client funds. As a senior subject matter expert, Rachel regularly advises Wealth Management leadership and clients on the cyber threat landscape and mitigation strategies.
From 2017-2020, Rachel served as the first-ever Head of Wealth Management Cybersecurity. In this role, Rachel advised senior business and technology leaders on a range of cybersecurity issues, including secure code development standards, secure network architecture, vendor relationships, advanced persistent threat (APT) detection and mobile security. Her team drove innovation for new cybersecurity and authentication technology in the pursuit of protecting the integrity and confidentiality of firm and client data. In 2019, Rachel was recognized by Morgan Stanley Wealth Management as part of the MAKERS Class, a program that honors women who serve as groundbreakers, innovators and advocates. She was also named one of the Top Women in WealthTech 2020 by ThinkAdvisor.
Prior to joining the firm in 2017, Rachel spent 15 years at the National Security Agency (NSA), where she held several key senior executive-level leadership positions. Between 2008 and 2010, she ran NSA’s counterterrorism operations and led a global enterprise in detecting and disrupting terrorist plotting against the U.S. and its allies. Between 2010 and 2012, Rachel served as NSA’s Chief of Operations in the U.K., working out of the U.S. Embassy in London. In this role, she worked with U.K. intelligence services to counter terrorist and cyber threats to the 2012 Olympics. Returning to the U.S. in 2012, Rachel spent nearly five years leading NSA’s cyber exploitation operations as the Deputy and then Chief of the Remote Operations Center within NSA’s Tailored Access Operations. In this capacity, she led the planning and execution of thousands of cyber exploitation operations against a wide array of foreign intelligence, military and cyber targets, and served as the committing official for many of NSA’s highest risk and most important intelligence gathering activities.
More

Agenda

Thursday, October 29

8:00 am Eastern

Registration and Morning Refreshments in the Exhibit Area

9:00 am Eastern

Welcome and Opening Remarks

Jason Snyder, Secretary of Technology, Executive Office of Technology Services and Security, Commonwealth of Massachusetts

9:30 am Eastern

Keynote – Strengthening the Shield: Insights from the Trenches of National Security

There’s no question - public-sector leaders must continue to strengthen their cyber hygiene, foster cross-sector partnerships, and adapt to the evolving threat landscape. Join Rachel Wilson, former NSA cyber operations leader, for an engaging and action-driven keynote that bridges real-world cybersecurity expertise with the challenges of emerging technologies. Drawing on her experience safeguarding critical systems, Rachel explores the heightened risks posed by AI-enabled threats like ransomware, insider attacks, and credential exploitation. This session is a call to action for everyone, from CIOs to frontline technologists, to embrace a proactive and resilient approach to protecting critical assets in the age of AI.

Rachel Wilson, Managing Director and Chief Data Officer, Morgan Stanley Wealth Management and Former NSA Senior Executive

10:30 am Eastern

Cyber Hackathon Kickoff

This hands-on session kicks off the Summit’s hackathon experience, introducing the environment, rules of engagement, and safety expectations. Attendees will jump into starter challenges designed to build an attacker’s mindset while reinforcing ethical practices. The lab stays open throughout the event, offering continued access to challenges, mentoring, and real-time coaching as you sharpen your skills.

10:45 am Eastern

Networking Break in the Exhibit Area

11:15 am Eastern

Concurrent Sessions

Governing AI Before It Governs You

AI adoption is accelerating faster than governance. This session explores practical strategies for managing AI safely, including AI governance, Shadow AI, agentic AI, and risk management. Learn how organizations at different stages of AI maturity can embrace innovation while protecting systems, data, and public trust.

Building a Security Program That Survives an Audit

Cybersecurity audits are becoming an expected part of doing business in government. Learn how to prepare for IT and cybersecurity audits by documenting governance, assigning risk and control ownership, addressing common findings, and leveraging Massachusetts resources that help organizations strengthen their security posture before auditors arrive.

Session Leader: Jenny Hedderman, Assistant Comptroller for Statewide Risk Management and Compliance Office of the Comptroller, Commonwealth of Massachusetts

Modern Vulnerability Management from Detection to Remediation

Finding vulnerabilities is only the beginning. This session explores practical approaches to vulnerability management, remediation, automation, patch management, endpoint detection and response (EDR), and configuration best practices to help organizations reduce risk before attackers exploit weaknesses.

Identity Is the New Front Line

As identity-based attacks continue to rise, protecting people, accounts, and machine identities has become essential. Learn how to strengthen identity and access management, understand the growing impact of non-human identities, and leverage existing tools to reduce risk from AI-driven attacks and credential compromise.

12:15 pm Eastern

Lunch

1:15 pm Eastern

Concurrent Sessions

Preparing for the Next Wave of Cyber Risk

Emerging technologies including frontier AI models, quantum computing, automation, and evolving attack techniques are changing cybersecurity faster than ever. This forward-looking session examines what's coming next, how adversaries are adapting, and the steps public-sector organizations should take today to prepare for tomorrow's cyber risks.

Protecting Critical Infrastructure in an Era of Growing Cyber Risk

Water systems, transportation, utilities, and other critical infrastructure face increasing cyber threats fueled by geopolitical tensions and interconnected technologies. This session explores how IT, operational technology, and public works leaders can collaborate to strengthen resilience, improve preparedness, and protect essential services across Massachusetts.

Knowing What Matters Most: Data Protection in the Age of AI

You can't protect what you don't understand. This session explores practical approaches to data classification, helping organizations identify their most critical information, reduce unnecessary exposure, and strengthen cybersecurity strategies as AI expands access to data across the enterprise.

Stronger Together Building a More Secure Massachusetts

Cybersecurity is a shared responsibility. This panel explores how state agencies, municipalities, regional partners, insurers, and cybersecurity organizations are working together to share intelligence, expand resources, improve incident reporting, and build a stronger, more resilient cybersecurity ecosystem across the Commonwealth.

2:15 pm Eastern

Networking Break in the Exhibit Area

2:45 pm Eastern

General Session - Navigating Cyber Incidents Together

When a cyber incident occurs, knowing where to turn matters. This session highlights Massachusetts' incident reporting resources, including the State Security Operations Center, Fusion Center, MIIA, and other partners, while exploring practical guidance for coordinated response, information sharing, and recovery across state and local government.

3:10 pm Eastern

Closing Session – The Cyber State of the Commonwealth

Gain a comprehensive update on Massachusetts' evolving cybersecurity landscape, including the latest threats, statewide initiatives, and emerging risks facing agencies and municipalities. Learn how stronger intelligence sharing, regional collaboration, and a "better neighbors" approach can help organizations prepare for and respond to today's rapidly changing threat environment.

Detective Lieutenant Edward Keefe, Unit Commander, Criminal Information Section, Commonwealth Fusion Center, Massachusetts State Police

3:55 pm Eastern

Hackathon Results

4:00 pm Eastern

Networking Reception in the Exhibit Area

Network with your colleagues and discuss technology solutions with the event exhibitors.

4:30 pm Eastern

End of Conference

Conference times, agenda, and speakers are subject to change.

DCU Center

50 Foster St.
Worcester, MA 01608
(508) 755-6800

Get Directions To
DCU Center

Planning Committee

Representatives

Erica Bradshaw
Deputy Secretary
Executive Office of Technology Services and Security
Commonwealth of Massachusetts

Nicholas Butts
Outreach Manager
MassCyberCenter

Donald Chamberlain
Chief Operating Officer, Assistant Secretary for Security and Operations
Executive Office of Technology Services and Security
Commonwealth of Massachusetts

Jenny Hedderman
Assistant Comptroller Risk/Compliance
Office of the Comptroller
Commonwealth of Massachusetts

Edward Keefe
Lieutenant, Commonwealth Fusion Center
Massachusetts State Police
Commonwealth of Massachusetts

Greg McCarthy
Chief Information Security Officer
City of Boston

Maria Michalski
Chief Information Officer
Executive Office of Public Safety and Security
Commonwealth of Massachusetts

Matthew Moran
Assistant Secretary and Chief Engagement Officer
Executive Office of Technology Services and Security
Commonwealth of Massachusetts

Thomas Myers
Chief Privacy Officer and General Counsel
Executive Office of Technology Services and Security
Commonwealth of Massachusetts

Anthony O'Neill
Chief Information Security Officer and Chief Risk Officer
Executive Office of Technology Services and Security
Commonwealth of Massachusetts

John Petrozzelli
Director
MassCyberCenter

Jessica Powers
Director of Internal Communications
Executive Office of Technology Services and Security
Commonwealth of Massachusetts

Scott Range
Law Enforcement Advisor
Executive Office of Public Safety and Security
Commonwealth of Massachusetts

Cheri Rolfes
Chief of Staff
Executive Office of Technology Services and Security
Commonwealth of Massachusetts

Jason Snyder
Secretary and Commonwealth Chief Information Officer
Executive Office of Technology Services and Security
Commonwealth of Massachusetts

Tracy Sullivan
Director of Municipal Information Systems
Town of Weston

Susan Terrey
Deputy Secretary
Executive Office of Public Safety and Security
Commonwealth of Massachusetts

Matt Whitten
Chief Information Security Officer
Executive Office of Energy and Environmental Affairs
Commonwealth of Massachusetts

Jarrett Wright
Chief Information Security Officer
Massachusetts Port Authority
Commonwealth of Massachusetts

Registration Information / Contact Us

Event Date: October 29, 2026

Open to Public Sector only.

Registration - Free

If you represent a Private Sector organization and are interested in Sponsorship Opportunities, please contact Heather Earney.

This event is open to all individuals who meet the eligibility criteria, without regard to race, color, religion, gender, gender identity, age, disability, or any other protected class. We are committed to fostering an inclusive and welcoming environment for all participants.

Contact Information

Need help registering, or have general event questions? Contact:

Audrey Houser
Government Technology
A division of e.Republic
Phone: (916) 932-1420
E-mail: ahouser@erepublic.com

Already a sponsor, but need a hand? Reach out to:

Mireya Gaton
Government Technology
A division of e.Republic
Phone:(916) 296-2617
E-Mail: mgaton@erepublic.com

Want to sponsor and stand out? Reach out to explore opportunities!

Heather Earney
Government Technology
A division of e.Republic
Phone: (916) 365-2308
E-mail: heather.earney@erepublic.com

Venue

DCU Center

50 Foster St.
Worcester, MA 01608
(508) 755-6800