Create The Future In ICS Security
Contribute: New, Narrow, and Deep (see opportunity at the bottom of article) When I had an OT security consulting team from 2000 2020, I would tell every new member they should be recognized as best in world at something in OT security in less than three years. I would hand them a copy of [ ] The post Accelerate Your OT Security Career & Personal Brand appeared first on Dale Peterson: ICS Security…
I was glad to be off playing cowboy last week. I missed the noise around the Minnesota, and other states, water sector security incidents, and it gave me time to think about what I wanted to write on the subject. First, there is not and should not be one plan to secure OT, and more [ ] The post US Water Sector OT Security Plan(s) appeared first on Dale Peterson: ICS Security Catalyst .
AI is dominating conversations in the OT security community. How are the attackers going to use AI? How will AI help in the SOC and other defenders’ tools? Important? Yes, and I’m afraid the OT security community is not working on an equally important issue. How is AI going to change the environment we need [ ] The post The Other AI Question In OT appeared first on Dale Peterson: ICS Security…
The post Accenture / Dragos Deal Analysis: Part 3 The Impact On The OT Security Product & Services Market appeared first on Dale Peterson: ICS Security Catalyst .
The Accenture / Dragos / runZero / NetRise deal may be the most significant single event in the OT Security Community Market since Colonial Pipeline. I tackle this in 3 parts over the next 3 days. In Part 1 I wrote how Accenture s acquiring a majority stake in Dragos was a win for Dragos. [ ] The post Accenture / Dragos Deal Analysis: Part 2 The Dragos Product appeared first on Dale Peterson: ICS…
The Accenture / Dragos / runZero / NetRise deal may be the most significant single event in the OT Security Community Market since Colonial Pipeline. I tackle this in 3 parts over the next 3 days. Accenture Dragos Dragos Independence I have been skeptical when both the acquired and acquirer make statements that [ ] The post Accenture / Dragos Deal Analysis Part 1 appeared first on Dale Peterson:…
Deconstructing risk can help focus where we should be spending our time and money to reduce risk. Most security controls in OT reduce the likelihood of a cyber incident that causes an impact on operations. How much of a reduction of likelihood, and consequentially risk, is achieved by the selected security control? There are two [ ] The post Absolute And Relative Risk Reduction appeared first on…
Europe has taken the initiative from the US in OT security. The Cyber Resilience Act (CRA) and NIS2 Directive will impact vendors, integrators, and asset owners who are active in the EU. And I m standing on the outside watching with great interest. I was invited to be on a podcast to discuss the CRA. Pass. [ ] The post Watching Regulation s Impact On OT Cyber Risk In Europe appeared first on Dale…
One reason new ideas, concepts, and methodologies fail is they take too long to try and get early wins. I think CIE is in danger of becoming a well-documented, good comprehensive methodology, and ultimately failed approach to a problem. This is not an argument against anything in CIE, or the related CCE, although I could [ ] The post Cyber-Informed Engineering (CIE) Needs A Jumpstart appeared…
Recently I wrote about the dichotomy between the reports and experts annually citing a big increase in the cyber threat to OT systems and the year after year tiny actual impact of cyber attacks on OT. Outside of ransomware on IT, not reaching OT, affecting Operations, the impact could be characterized as infinitesimal as part [ ] The post Solving The What Is The Threat To OT Systems Problem…