OT cybersecurity budgets are rarely unlimited. There is always something else that could be improved. Another system that needs attention. Another site. Another control. Another risk somebody wants addressed. So one of the most important questions isn’t: What should we buy next? It’s: Where will the next pound actually make a difference? That sounds obvious.…
Most cybersecurity conversations start with technology. In OT, I think we need to start somewhere else. Earlier this year, I opened the OT Defenders Summit in London with a keynote called The State of OT Defence: From Cyber Controls to Operational Resilience. My job was to set the scene for the day. Rather than talk…
How to shut down a plant remotely in 3 seconds. 3…2…1… and boom! In my hand, I have a remote trigger that can fry the motherboard of any workstation, laptop, server, router, switch, monitor, IP phone, cell phone, firewall, etc. from up to 100 meters away. We can also schedule a date and time when…
Managing Negative PR Implications After a Cyberattack on Critical Infrastructure Guidelines for Effective Crisis Response Cyberattacks on critical infrastructure can have devastating consequences, including negative PR implications for the organization responsible for maintaining the infrastructure. In addition to the immediate risks to public safety, a hack can damage the organization’s reputation, leading to loss of…
Why OT Incident Response is really different? It’s not a secret. There are thousands of companies providing IT incident response, but handful of companies capable of handling OT incident response. Some IT folks believe it’s mission impossible and they are not far from the truth, but the first step is to admit that OT incident…