Another ICS security acquisition this week – GE buys Wurldtech. Wurldtech is known most for their Achilles fuzz testing tool and certification. It was an early entrant in ICS fuzzing and has strong relationships with Shell and other asset owners and vendors in oil and gas. Like the Industrial Defender acquisition, terms were not disclosed and likely will not be disclosed because it is not a material event for the very large acquiring company.
NERC members voted to approve the NERC CIP-014 Physical Security standard. This standard was ordered by FERC after the shooting at the PG&E Metcalf substation received publicity from a WSJ article.
The DHS sponsored ICSJWG Spring Meeting is coming up June 3-5 in Indianapolis. The agenda is not public yet (less than a month away?), but speakers have been notified of their slots. At 9AM on Wednesday I’ll be presenting “The Cloud Needn’t Lead To ICS Storms”. I’ve been looking for somewhere to present some thoughts and ideas on the Big Data, Cloud Computing and Storage, and Internet of Things, and this will be it. It’s important that the ICS security community focus on the right risks and focus, and I have some very pertinent positive and negative examples.
Jacob Kitchel and Indy local Landon Lewis are putting on the first SCADASides even the day after ICSJWG, June 6th. The SCADASides call for papers is now open.