2026 Auto-ISAC Cybersecurity Summit

We are thrilled to welcome you to the 10th Annual Auto-ISAC Cybersecurity Summit at the Vibe Credit Union Showplace in Novi, MI!

The Summit is an automotive cybersecurity conference that showcases insights from manufacturers, suppliers, thought leaders, lawmakers, practitioners, and other stakeholders and highlights the commitment of members to trust, share, teach, learn, and act.

This year’s program brings together an impressive cross-section of automotive cybersecurity leadership, including CISOs from General Motors, Toyota, Honda, BorgWarner, and Marelli, alongside speakers representing Congress, NHTSA, the FBI, Ford Motor Company, Mazda Motor Corporation, Palo Alto Networks, Booz Allen Hamilton, Southwest Research Institute, Carnegie Mellon University’s Software Engineering Institute, the Alliance for Automotive Innovation, SAE, and more.

The Summit experience extends beyond the sessions, with opportunities to connect throughout the week. Join us for the Awards Ceremony and Welcome Reception on October 6, followed by evening receptions on October 7 and 8, bringing the community together for networking, conversation, and celebration.

Our goal is to foster relationships to enhance cybersecurity resilience for the connected vehicle ecosystem.

Event Theme

The Cost of Vigilance

Automotive cybersecurity leaders are under increasing pressure to justify investment, demonstrate value, and translate cyber risk into business impact. The Cost of Vigilance reflects the ongoing operational, financial, and strategic effort required to sustain resilience while balancing compliance, security maturity, and resource constraints in an evolving threat landscape.

This theme centers on how organizations evaluate, communicate, and prioritize cybersecurity decisions in a world of constrained budgets and expanding attack surfaces. A dedicated technical track will complement this focus by addressing practical engineering and implementation challenges in securing the connected vehicle.

Session One:

Is Compliance Enough?

Regulation is accelerating across the automotive sector, but compliance alone does not equal resilience. This session explores the gap between meeting mandated requirements and achieving real-world cybersecurity effectiveness. Discussions will focus on how organizations can treat compliance as a baseline, align stakeholders around risk, and articulate cybersecurity value beyond checkbox obligations to drive stronger, more resilient outcomes.

Session Two:

Security in Practice

Cybersecurity strategy ultimately succeeds or fails in execution. This session focuses on how organizations translate evolving cyber threats into real business impact, including operational disruption, financial loss, and safety risk. Attendees will explore how decisions are made under real-world constraints such as limited budgets, legacy systems, and competing priorities, with an emphasis on aligning security outcomes to business objectives.

Technical / Engineering Track:

Focuses on implementation, including defensive tooling, incident pathways, and operational realities across vehicle and enterprise environments.

Policy / Management / GRC Track:

Explores governance, risk justification, ROI, and executive decision-making frameworks that shape cybersecurity investment and accountability.

Session Three:

Delivering Globally, Securing Locally

 Automotive cybersecurity strategies are increasingly shaped by geopolitical pressures, export controls, and regional regulatory divergence. Organizations must operate across multiple regulatory environments while maintaining a unified enterprise cybersecurity posture. This session examines how leaders balance global consistency with local requirements, manage data and IP risks, and sustain operational continuity in a fragmented regulatory landscape.

Session Four:

Securing the Supply Chain

Cyber resilience depends on the strength and consistency of the extended supplier ecosystem. This session explores how organizations translate enterprise cybersecurity strategy into scalable supplier oversight, enforceable controls, and measurable risk reduction across multi-tier supply chains. Discussions will address challenges such as uneven supplier maturity, transparency limitations, and the need for consistent standards across global operations.

Technical / Engineering Track:

Covers practical challenges including SBOM implementation, supplier segmentation, validation and verification, and securing OT and manufacturing environments.

Policy / Compliance Track:

Focuses on regulatory expectations, contractual requirements, supplier accountability, and governance frameworks that enable effective oversight at scale.