The Massachusetts Public Sector Cybersecurity Summit is where government defends the future.
This public sector-focused event brings together IT security leaders, risk managers, and public officials to tackle the evolving cyber threats facing state and local government. Through expert-led sessions, peer exchange, and real-world case studies, attendees gain practical strategies to strengthen cyber resilience, protect critical infrastructure, and lead with confidence in an age of constant risk. Designed specifically for the public sector, this summit delivers insights you can act on and alliances you can trust!
For a third year in a row, we are thrilled to convene the Public Sector Cybersecurity Summit, bringing together state and municipal cybersecurity professionals. This collaborative series of speakers and panel discussions will focus on risk management, cyber resilience, incident response, and more, giving participants the opportunity to learn from one another. I look forward to connecting with all of you again in Worcester for this year’s summit!– Jason Snyder, Secretary, Executive Office of Technology Services and Security, and Chief Information Officer of the Commonwealth of Massachusetts
Thursday, October 29 |
|
8:00 am Eastern |
Registration and Morning Refreshments in the Exhibit Area |
9:00 am Eastern |
Welcome and Opening RemarksJason Snyder, Secretary of Technology, Executive Office of Technology Services and Security, Commonwealth of Massachusetts |
9:30 am Eastern |
Keynote – Strengthening the Shield: Insights from the Trenches of National SecurityThere’s no question - public-sector leaders must continue to strengthen their cyber hygiene, foster cross-sector partnerships, and adapt to the evolving threat landscape. Join Rachel Wilson, former NSA cyber operations leader, for an engaging and action-driven keynote that bridges real-world cybersecurity expertise with the challenges of emerging technologies. Drawing on her experience safeguarding critical systems, Rachel explores the heightened risks posed by AI-enabled threats like ransomware, insider attacks, and credential exploitation. This session is a call to action for everyone, from CIOs to frontline technologists, to embrace a proactive and resilient approach to protecting critical assets in the age of AI.
Rachel Wilson, Managing Director and Chief Data Officer, Morgan Stanley Wealth Management and Former NSA Senior Executive |
10:30 am Eastern |
Cyber Hackathon KickoffThis hands-on session kicks off the Summit’s hackathon experience, introducing the environment, rules of engagement, and safety expectations. Attendees will jump into starter challenges designed to build an attacker’s mindset while reinforcing ethical practices. The lab stays open throughout the event, offering continued access to challenges, mentoring, and real-time coaching as you sharpen your skills.
|
10:45 am Eastern |
Networking Break in the Exhibit Area |
11:15 am Eastern |
Concurrent SessionsGoverning AI Before It Governs YouAI adoption is accelerating faster than governance. This session explores practical strategies for managing AI safely, including AI governance, Shadow AI, agentic AI, and risk management. Learn how organizations at different stages of AI maturity can embrace innovation while protecting systems, data, and public trust.
Building a Security Program That Survives an AuditCybersecurity audits are becoming an expected part of doing business in government. Learn how to prepare for IT and cybersecurity audits by documenting governance, assigning risk and control ownership, addressing common findings, and leveraging Massachusetts resources that help organizations strengthen their security posture before auditors arrive.
Session Leader: Jenny Hedderman, Assistant Comptroller for Statewide Risk Management and Compliance Office of the Comptroller, Commonwealth of Massachusetts Modern Vulnerability Management from Detection to RemediationFinding vulnerabilities is only the beginning. This session explores practical approaches to vulnerability management, remediation, automation, patch management, endpoint detection and response (EDR), and configuration best practices to help organizations reduce risk before attackers exploit weaknesses.
Identity Is the New Front LineAs identity-based attacks continue to rise, protecting people, accounts, and machine identities has become essential. Learn how to strengthen identity and access management, understand the growing impact of non-human identities, and leverage existing tools to reduce risk from AI-driven attacks and credential compromise.
|
12:15 pm Eastern |
Lunch |
1:15 pm Eastern |
Concurrent SessionsPreparing for the Next Wave of Cyber RiskEmerging technologies including frontier AI models, quantum computing, automation, and evolving attack techniques are changing cybersecurity faster than ever. This forward-looking session examines what's coming next, how adversaries are adapting, and the steps public-sector organizations should take today to prepare for tomorrow's cyber risks.
Protecting Critical Infrastructure in an Era of Growing Cyber RiskWater systems, transportation, utilities, and other critical infrastructure face increasing cyber threats fueled by geopolitical tensions and interconnected technologies. This session explores how IT, operational technology, and public works leaders can collaborate to strengthen resilience, improve preparedness, and protect essential services across Massachusetts.
Knowing What Matters Most: Data Protection in the Age of AIYou can't protect what you don't understand. This session explores practical approaches to data classification, helping organizations identify their most critical information, reduce unnecessary exposure, and strengthen cybersecurity strategies as AI expands access to data across the enterprise.
Stronger Together Building a More Secure MassachusettsCybersecurity is a shared responsibility. This panel explores how state agencies, municipalities, regional partners, insurers, and cybersecurity organizations are working together to share intelligence, expand resources, improve incident reporting, and build a stronger, more resilient cybersecurity ecosystem across the Commonwealth.
|
2:15 pm Eastern |
Networking Break in the Exhibit Area |
2:45 pm Eastern |
General Session - Navigating Cyber Incidents TogetherWhen a cyber incident occurs, knowing where to turn matters. This session highlights Massachusetts' incident reporting resources, including the State Security Operations Center, Fusion Center, MIIA, and other partners, while exploring practical guidance for coordinated response, information sharing, and recovery across state and local government.
|
3:10 pm Eastern |
Closing Session – The Cyber State of the CommonwealthGain a comprehensive update on Massachusetts' evolving cybersecurity landscape, including the latest threats, statewide initiatives, and emerging risks facing agencies and municipalities. Learn how stronger intelligence sharing, regional collaboration, and a "better neighbors" approach can help organizations prepare for and respond to today's rapidly changing threat environment.
Detective Lieutenant Edward Keefe, Unit Commander, Criminal Information Section, Commonwealth Fusion Center, Massachusetts State Police |
3:55 pm Eastern |
Hackathon Results |
4:00 pm Eastern |
Networking Reception in the Exhibit AreaNetwork with your colleagues and discuss technology solutions with the event exhibitors.
|
4:30 pm Eastern |
End of ConferenceConference times, agenda, and speakers are subject to change.
|
Erica Bradshaw
Deputy Secretary
Executive Office of Technology Services and Security
Commonwealth of Massachusetts
Nicholas Butts
Outreach Manager
MassCyberCenter
Donald Chamberlain
Chief Operating Officer, Assistant Secretary for Security and Operations
Executive Office of Technology Services and Security
Commonwealth of Massachusetts
Jenny Hedderman
Assistant Comptroller Risk/Compliance
Office of the Comptroller
Commonwealth of Massachusetts
Edward Keefe
Lieutenant, Commonwealth Fusion Center
Massachusetts State Police
Commonwealth of Massachusetts
Greg McCarthy
Chief Information Security Officer
City of Boston
Maria Michalski
Chief Information Officer
Executive Office of Public Safety and Security
Commonwealth of Massachusetts
Matthew Moran
Assistant Secretary and Chief Engagement Officer
Executive Office of Technology Services and Security
Commonwealth of Massachusetts
Thomas Myers
Chief Privacy Officer and General Counsel
Executive Office of Technology Services and Security
Commonwealth of Massachusetts
Anthony O'Neill
Chief Information Security Officer and Chief Risk Officer
Executive Office of Technology Services and Security
Commonwealth of Massachusetts
John Petrozzelli
Director
MassCyberCenter
Jessica Powers
Director of Internal Communications
Executive Office of Technology Services and Security
Commonwealth of Massachusetts
Scott Range
Law Enforcement Advisor
Executive Office of Public Safety and Security
Commonwealth of Massachusetts
Cheri Rolfes
Chief of Staff
Executive Office of Technology Services and Security
Commonwealth of Massachusetts
Jason Snyder
Secretary and Commonwealth Chief Information Officer
Executive Office of Technology Services and Security
Commonwealth of Massachusetts
Tracy Sullivan
Director of Municipal Information Systems
Town of Weston
Susan Terrey
Deputy Secretary
Executive Office of Public Safety and Security
Commonwealth of Massachusetts
Matt Whitten
Chief Information Security Officer
Executive Office of Energy and Environmental Affairs
Commonwealth of Massachusetts
Jarrett Wright
Chief Information Security Officer
Massachusetts Port Authority
Commonwealth of Massachusetts
Open to Public Sector only.
Registration - Free
If you represent a Private Sector organization and are interested in Sponsorship Opportunities, please contact Heather Earney.
This event is open to all individuals who meet the eligibility criteria, without regard to race, color, religion, gender, gender identity, age, disability, or any other protected class. We are committed to fostering an inclusive and welcoming environment for all participants.
Need help registering, or have general event questions? Contact:
Audrey Houser
Government Technology
A division of e.Republic
Phone: (916) 932-1420
E-mail: ahouser@erepublic.com
Already a sponsor, but need a hand? Reach out to:
Mireya Gaton
Government Technology
A division of e.Republic
Phone:(916) 296-2617
E-Mail: mgaton@erepublic.com
Want to sponsor and stand out? Reach out to explore opportunities!
Heather Earney
Government Technology
A division of e.Republic
Phone: (916) 365-2308
E-mail: heather.earney@erepublic.com