November 10, 2026 to November 11, 2026
21st Annual API Cybersecurity Conference for the Oil and Natural Gas Industry
Avoid Attendee List Scams
Please be aware that the American Petroleum Institute (API) does not sell attendee lists for any API events, nor do we authorize third parties to distribute or sell attendee information. If you receive an email offering to sell an API attendee list, please disregard the message and report it as spam, as it is likely fraudulent.
Overview
Download Preliminary Agenda
Protecting Energy Through Cybersecurity
Join us at the 21st Annual API Cybersecurity Conference & Expo and discover methods for thwarting the bad guys, what the scene looks like over the horizon and how the latest technologies can help you counter cyber espionage, address cyber warfare, and make your cyber efforts secure.
Cyber Continuity: Oil and Gas Resiliency in the Digital Era
The API Cybersecurity Conference has been an annual event since 2005. For 21 years it has been the only cybersecurity conference dedicated to the oil and natural gas industry and has a loyal and dedicated attendee base. It is also volunteer-driven, both at the planning committee and speaker level. We consistently produce a compelling conference program, with a focus on safety, best practices, and innovation. In addition, the conference provides an opportunity for attendees to earn CPEs (Continuing Professional Education), maintaining their certifications and required hours. Finally, the conference provides the opportunity for networking and idea exchange, with our dedicated sponsors and exhibitors sharing their latest products and services.
Schedule at a Glance
| Tuesday, November 10, 2026 | |
| 7:00 am – 8:00 am | Registration and Continental Breakfast |
| 8:00 am – 5:30 pm | Keynote, General Session (3 Tracks) |
| 12:00 pm – 1:00 pm | Attendee Lunch |
| 5:30 pm – 6:30 pm | Welcome Reception and Networking |
| Wednesday, November 11, 2026 | |
| 7:30 am – 8:00 am | Registration and Continental Breakfast |
| 8:00 am – 5:15 pm | Keynote, General Session (3 Tracks) |
| 12:00 pm – 1:00 pm | Attendee Lunch |
| 5:15 pm – 6:15 pm | Closing Reception and Networking |
Questions?
- Registration: Veronica White, [email protected]
- Logistics or Sponsorship: Matthew Cunningham, [email protected]
- Program: Suzanne Lemieux, [email protected]
Program Details
Download Preliminary Agenda
The work of the problem-solvers of our industry is never done.
The API Cybersecurity Conference has been an annual event since 2005. For 21 years it has been the only cybersecurity conference dedicated to the oil and natural gas industry and has a loyal and dedicated attendee base. It is also volunteer-driven, both at the planning committee and speaker level. We consistently produce a compelling conference program, with a focus on safety, best practices, and innovation.
The 2026 Conference Program includes over 60 presentations in 3 tracks:
- Leadership Panel: CISO Showdown
- Application Security and SecDevOps
- Compliance / New Regulations
- ICS Cyber Security
- Identity and Access Management
- Cyber Incident Management Workshop
- Next Generation SOC / Security Orchestration
- Generative AI Platform Risks and Security
- Zero Trust
- Threat Hunting and Threat Intelligence
- Cyber Security Insurance
- Addressing the Human Element
- Cyber Incident Management
- Cyber Security Architecture
- API Conference 20th Anniversary Retrospective and Past Chair Panel
Who Should Attend
- IT Management
- IT Security Professionals
- Operational Technology/PCS/ICS/SCADA Professionals
- System Administrators
- Database Administrators
- Data Privacy Specialists
- Application Support Personnel
- Legal
- Human Resources Professionals
- Operational Technology Auditors
- Compliance Officers
- Corporate Security Professionals
- Anyone interested in learning about state of the art security practices and their practical implementation as well as securing their enterprise and its core processes.
Keynote Speakers
Tuesday, November 10th
Sherry Hunyadi
General Manager, Risk Management Operations
Chevron
Sherry Hunyadi is the General Manager of Risk Management Operations for Chevron, a role she assumed in May 2026. Sherry’s team is responsible for cybersecurity governance, risk, and compliance management for the enterprise. She is a member of Chevron’s CISO Leadership Team, which is responsible for overall cybersecurity efforts to secure and protect Chevron’s information and assets while ensuring cyber resiliency.
Throughout her journey of more than 25 years in technology roles, she has led with a rare blend of strategic vision, technical excellence, and authentic purpose. Her contributions have earned industry-wide recognition, including the HoustonCISO ORBIE Super Global Award and the Trace3 Outlier Award; honors that celebrate leaders who not only drive innovation, but inspire others to reach higher and achieve more.
Sherry received her Bachelor of Science degree in Computer Science from Texas A&M University in College Station, Texas. She resides in Spring, Texas with her husband who is a retired Warrant Officer for the Texas Army National Guard.
Wednesday, November 11th
Catharina “Dd” Budiharto
Customer Security Officer
Microsoft
Dd Budiharto is Microsoft’s Customer Security Officer for the US Oil, Gas and Energy industry vertical. Dd is a former CISO and Fractional CISO for Fortune 500 Oil and Gas companies where she partnered with executive teams, business stakeholders, and IT leaders to develop strategy and road map to enhance the organization’s cyber security posture.
Her expertise in IT and OT security has been instrumental in delivering significantly enhanced information and cyber security for companies including ConocoPhillips, Phillips 66, Baker Hughes, Marathon Oil Corporation, and Halliburton. Dd has been a digital security visionary for over 30 years. As an industry leader, she worked closely with the White House on Critical Infrastructure Cybersecurity initiatives.
She served as chairman of the American Petroleum Institute (API) IT Security Subcommittee, where she collaborated with the White House, and is currently a Governing Member of Gartner and SecureWorld CISO Executive.
Mario Chiock
CISO/Fellow Emeritus – SLB (Previously Schlumberger)
Principal & Founder – Squiggle Cyber LLC
Chief of Staff Itegriti Corporation
Mario Chiock possesses over 40 years of experience in OilField operations, IT, Cyber-Security, Risk, Privacy and Auditing. Prior to his current role Mario was the CISO at Schlumberger where he was responsible for developing the company’s worldwide, long-term cyber security strategy. He is recognized for his leadership and management in all aspects of cybersecurity throughout the company as well as within the community.
He serves in Executive & Technical Advisory boards of many security companies such as Paloalto Networks , Qualys & Onapsis.
Mario is a Platinum ISACA member (more than 15 years) has a CISSP,CISM & CISA Certifications, he is also an instructor for CISAM, CRISC, CISA, CISSP, Security+ and is past chair for the American Petroleum Institute (API) Cybersecurity Sub-Committee and was involved in the formation of the ONG-ISAC ISAC.
In 2026 he won the Houston CISO Orbie Leadership award.
Keynote Session
AI Made Me Do It: Confessions of an AI-Era CISO
Sponsor & Exhibitor Information
The 2026 API Annual Cybersecurity Conference exhibit hall is sold out as of September 23. Please email [email protected] to be put on the waitlist, and the contact list for 2027.
Download the 2026 Sponsor and Exhibitor Prospectus
Download 2026 Exhibitor Floorplan
Download the Sponsor & Exhibitor Terms & Conditions
| Opportunity | Cost |
| Platinum Sponsor – Sold Out | $20,000 |
| Gold Sponsor – Sold Out | $15,000 |
| Silver Sponsor – Sold Out | $12,500 |
| Exhibitor – Sold Out | $7,500 |
| Additional Sponsor/Exhibitor | $495 |
Deadline for Sponsor and Exhibitor Cancellations and Refunds: Friday, September 11, 2026
Payment is due in full at the time of registration. If you require an invoice, your payment is due thirty (30) days from the receipt of your invoice. Sponsor and Exhibitor full payments must be received to API no later than Friday, September 11, 2026.
Sponsors and Exhibitors may cancel their obligation up to Friday, September 11, 2026. However, 50% of the fee for Sponsors and for Exhibitors is nonrefundable. Notice of cancellation must be submitted in writing to [email protected]. Refunds will not be given on cancellations received after Friday, September 11, 2026.
Additional Exhibitor Staff Registration
Please log into your Exhibitor Portal register your exhibit staff.
This $495 “Additional Sponsor/Exhibitor” fee is for the registration of each additional sponsor/exhibitor after the initial representative from the sponsoring/exhibiting company. Fee includes admission to all conference sessions, exhibit area, lunches, and receptions. We do not have an “Exhibits Only” or “Exhibits Staff Only” registration for this conference. Badges are not transferable. All exhibit staff must register.
To be eligible for the above rate, Additional Sponsor/Exhibitor must be a direct employee of exhibiting or sponsoring company. API will request proof (i.e. business card) of direct employment and ID at the conference registration desk.
Exhibitor Schedule at a Glance
| November 9, 2026 | |
| 3:00 pm – 5:00 pm | Registration Services Open |
| 3:00 pm – 5:00 pm | Exhibitor Set-Up |
| November 10, 2026 | |
| 7:00 am – 5:00 pm | Registration Services Open |
| 6:30 am – 7:00 am | Exhibitor Set-Up |
| 7:00 am – 6:00 pm | Expo Open & Opening Reception in Exhibit Hall |
| November 11, 2026 | |
| 7:00 am – 5:00 pm | Registration Services Open |
| 7:30 am – 2:20 pm | Expo Open |
| 2:20 pm – 5:00 pm | Exhibitor Tear-Down |
| 5:30 pm – 6:00 pm | Closing Reception* |
*Held in Prefunction Area. Exhibitors are welcome to attend.
Exhibitor Portal – Login HERE
All exhibitors must access the exhibitor portal for deadlines, shipping information, and to register your exhibit staff. Login information has been sent from [email protected] to the primary contact that registered for the exhibit booth/sponsorship. Please contact your internal colleague for access.
Sponsors
Platinum Sponsors
Gold Sponsors
Silver Sponsors
Exhibitors
Download Exhibitor Floorplan
| Booth Number | Sponsors & Exhibitors | |
| 1 | Cycode, Inc. | |
| 2 | Booz Allen Hamilton | |
| 3 | Fortinet | |
| 4 | Ernst & Young (EY) | |
| 5 | Accenture | |
| 6 | Ping Identity | |
| 7 | SUBNET Solution Inc. | |
| 8 | Concentric AI | |
| 9 | PwC | |
| 10 | Noma | |
| 11 | Varonis | |
| 12 | Axonius, Inc | |
| 13 | Astelia | |
| 14 | Island | |
| 100 | Xage Security | |
| 101 | iboss | |
| 102 | Proofpoint | |
| 103 | Obsidian Security | |
| 104 | Illumio | |
| 106 | Halcyon | |
| 107 | Reach Security | |
| 108 | Zscaler | |
| 109 | ACRONIS INC | |
| 110 | Censys | |
| 200 | Horizon3 | |
| 201 | Cloudflare | |
| 202 | Datadog | |
| 203 | Zafran Security | |
| 206 | Nozomi Networks | |
| 207 | Utimaco Inc | |
| 208 | Forescout Technology, Inc. | |
| 209 | Onyx | |
| 300 | Dragos | |
| 301 | ReversingLabs | |
| 302 | Expel | |
| 303 | Airlock Digital | |
| 306 | ARMADIN | |
| 307 | Corelight | |
| 308 | Microsoft | |
| 309 | Dispel | |
| 400 | OPSWAT | |
| 401 | ExeQut | |
| 402 | Veracode | |
| 403 | ONE-ISAC | |
| 405 | ThreatModeler | |
| 406 | Armexa | |
| 407 | Onapsis | |
| 408 | Junto | |
| 409 | Eclypsium |
Hotel
The Woodlands Waterway Marriott
1601 Lake Robbins Dr.
The Woodlands, Texas 77380
Call: 281-367-9797
Room Rate: $264/night: Mention API Cybersecurity Conference
Reservation Deadline: Monday, October 19, 2026 at 5pm EST, or until room block is sold out
Online Reservations
Cancellation Policy:
You may cancel your reservation for no charge before 11:59 PM local hotel time 3 day[s] before arrival. Cancellations after the deadline will incur a fee determined by the length of the reservation.
Avoid Housing Scams
Note: API has not contracted with any third party for hotel arrangements and will not call or email you directly to make housing arrangements on your behalf.
Should you receive a call or email from a third-party provider, please collect as much information as you can and let us know immediately. “Room Poachers” have been known to act as representatives of API, or authorized providers of API, to offer room discounts or alternative accommodations to our attendees – often to the attendee’s detriment. These companies are not affiliated with API, and reservations made through these companies for our meeting cannot be guaranteed.
How It Works
This deceptive practice (called “room poaching”) is carried out by third‐party companies that act as travel agencies, wholesalers, or even API to solicit registrants for room reservations. The poacher might inform registrants that the hotel room block is “sold out,” and that if you do not book with them immediately, you may not get a room. Room poachers make it more difficult for us to meet our room block commitments and expose us to penalties and increased room rates for our events. Room poachers often don’t deliver on promises to customers. When customers arrive, reservations are non‐existent, or the hotels are not conveniently located. Sometimes the rooms have been cancelled and hefty cancellation fees have been placed on the customer’s credit card.
Don’t Be Deceived
If you are contacted by anyone asking if you need a room for the API Conference, please get as much information as you can (their name, company name, phone number, etc.) and pass it along to [email protected]. Always make your room reservation directly with the information provided by API or a trusted source.
API will use all legal means possible to prevent these groups from operating.
Please contact [email protected]with any questions.
Registration Fees & Details
Register Now
| Register By Friday, September 25 |
Register After Friday, September 25 |
|
| API Member | $795 | $895 |
| Non-Member | $895 | $995 |
| Government/Academic | $595 | $595 |
Cancellation Deadline: Friday, October 9, 2026
Cancellation Fee: Less $100 of your registration fee.
Cancellations, Refunds, and Substitutions:
Cancellations and request for refunds must be made in writing and sent to [email protected] by Friday, October 9, 2026. Cancellation shall be effective, final, and binding upon receipt by API. Cancellation requests received by Friday, October 9, 2026, will receive a refund of the registration fee less a $100 cancellation fee, and will be processed in the original form of payment. Refunds are not provided for cancellation requests received after Friday, October 9, 2026. Registration fees are non-transferable to other API meetings. Substitutions within the same event may be made at any time by written request to [email protected].
Additional Resources
 |
API MembershipInterested in Becoming an API Member? |
 |
Download the API Events App! We have an updated events app! Access the program agenda; stay up to date with the latest announcements; create your personal schedule; create your event profile; view list of attendees; and more! Download for Apple Users Download for Android Users |
