

When a Cyberattack Stops the Business
Protecting Operations and Managing Business Disruption
BeeGlobal Executive Panel | 90 Minutes
About Event
A cyber incident can disrupt business operations even when production systems are still running. Orders may be ready but impossible to dispatch, and essential services may become unavailable.
This BeeGlobal executive panel brings together cybersecurity, operational technology (OT), and business continuity perspectives to explore how organizations can prevent disruption, respond effectively to incidents, and recover safely.
Through a fictional manufacturing scenario, contributors will examine the decisions leaders face, from the first security alert to containment, continuity, recovery, and the resumption of operations.
Who should attend
CEOs, managing directors, and business executives
CIOs, CTOs, CISOs, and cybersecurity leaders
COOs and operations managers
Risk and business continuity professionals
Leaders in manufacturing, industrial organizations, and critical infrastructure
Topics covered
From cyber incident to business disruption: Understanding the impact on production, deliveries, and customer commitments.
Protecting IT and OT: Managing dependencies between corporate systems and industrial processes.
Containment without unnecessary disruption: Balancing security measures with operational and safety requirements.
Decision-making under pressure: Clarifying who authorizes containment, operational restrictions, and recovery.
Business continuity: Identifying critical activities, acceptable disruption limits, and alternative arrangements.
Recovery and resumption: Establishing the checks required before restoring systems and operations.
What you will take away
A practical framework for identifying critical business activities and dependencies.
Insights into coordinating cybersecurity, operations, and management teams.
Guidance on containment decisions and operational continuity.
A clearer understanding of recovery priorities and restart requirements.
Actionable steps to strengthen incident response and business continuity plans.
Agenda
16:00–16:30 | Registration
16:30–16:40 | Opening and Preparation - Introduction to the scenario, business dependencies, and decision-making responsibilities.
16:40–16:55 | First Alert - A ransomware incident disrupts planning and dispatch while production continues. What is known, and what needs immediate attention?
16:55–17:15 | Containment and Continuity - Assess security risks, operational consequences, safe operating limits, and alternative arrangements.
17:15–17:30 | Recovery and Resumption - Explore recovery priorities, backup validation, operational readiness, and approval procedures.
17:30–17:50 | Audience Discussion - Apply the scenario to participants’ organizations and discuss practical challenges.
17:50–18:00 | Practical Closing - Each contributor shares one priority action for business leaders.
18:00–19:30 | Networking & Partner Conversations
Speakers and Contributors
Raluca Anton - Senior Manager | Cyber Strategy & Transformation at Deloitte Romania
Alexandru Suditu - Co-founder & CEO SentryOT
Korab Keqekolla - Sales Engineer at Cynet
Session moderated by: Eduard Bîsceanu - Global CISO & Head of Technology Consulting at CYBER RANGES
The Scenario: When Production Continues but the Business Cannot Deliver
A manufacturing company experiences a ransomware incident that makes its planning and dispatch applications unavailable. Production continues, but deliveries are interrupted.
A potentially affected remote maintenance service creates additional uncertainty. Restricting access could reduce exposure but also limit remote support to the plant.
The panel will explore three stages:
First alert: Assess the impact, establish what is known, and determine immediate actions.
Containment and continuity: Decide which connections to restrict and which activities can safely continue.
Recovery and resumption: Validate systems, confirm operational readiness, and restore business activities.
Throughout the discussion, contributors will connect technical findings to business consequences and management decisions.
Practical Next Steps
After the event, attendees should be better equipped to:
Identify critical business activities and their dependencies.
Review protection and response arrangements with security and operations teams.
Clarify decision-making authority and escalation procedures.
Test alternative operating arrangements.
Define recovery priorities and restart criteria.
Assign owners and deadlines to identified gaps.
The objective is not simply to restore technology, but to restore business operations safely and efficiently.
Organized by BeeGlobal 🌍
BeeGlobal is a global ecosystem that empowers technology companies to scale and collaborate across borders. Active across Europe, North America, and the Middle East, BeeGlobal connects founders, investors, and technology leaders through events, partnerships, and shared opportunities.
GDPR Notice Regarding Photography
Photographs may be taken during the event for use on BeeGlobal's website, affiliated channels, and promotional materials. Applicable photography and data protection information will be provided to attendees in accordance with relevant requirements.
Add a clear registration call to actionMake the opening more executive-focused