US Water Sector OT Security Plan(s)
I was glad to be off playing cowboy last week. I missed the noise around the Minnesota, and other states, water sector security incidents, and it gave me time to think about what I wanted to write on the subject. First, there is not and should not be one plan to...
The Other AI Question In OT
AI is dominating conversations in the OT security community. How are the attackers going to use AI? How will AI help in the SOC and other defenders’ tools? Important? Yes, and I’m afraid the OT security community is not working on an equally important issue. How is AI...
Accenture / Dragos Deal Analysis: Part 3 – The Impact On The OT Security Product & Services Market
The Accenture / Dragos / runZero / NetRise deal may be the most significant single event in the OT Security Community & Market since Colonial Pipeline. I tackle this in 3 parts over the next 3 days. Part 1 - Accenture & Dragos Part 2 - The Dragos Product Part...
Accenture / Dragos Deal Analysis: Part 2 – The Dragos Product
The Accenture / Dragos / runZero / NetRise deal may be the most significant single event in the OT Security Community & Market since Colonial Pipeline. I tackle this in 3 parts over the next 3 days. Part 1 - Accenture & Dragos Part 2 - The Dragos Product Part...
Accenture / Dragos Deal Analysis … Part 1
The Accenture / Dragos / runZero / NetRise deal may be the most significant single event in the OT Security Community & Market since Colonial Pipeline. I tackle this in 3 parts over the next 3 days. Part 1 - Accenture & Dragos Part 2 - The Dragos Product Part...
Absolute And Relative Risk Reduction
Deconstructing risk can help focus where we should be spending our time and money to reduce risk. Most security controls in OT reduce the likelihood of a cyber incident that causes an impact on operations. How much of a reduction of likelihood, and consequentially...
Watching Regulation’s Impact On OT Cyber Risk In Europe
Europe has taken the initiative from the US in OT security. The Cyber Resilience Act (CRA) and NIS2 Directive will impact vendors, integrators, and asset owners who are active in the EU. And I'm standing on the outside watching with great interest. I was invited to be...
Cyber-Informed Engineering (CIE) Needs A Jumpstart
One reason new ideas, concepts, and methodologies fail is they take too long to try and get early wins. I think CIE is in danger of becoming a well-documented, good comprehensive methodology, and ultimately failed approach to a problem. This is not an argument against...
Solving The “What Is The Threat To OT Systems” Problem
Recently I wrote about the dichotomy between the reports and experts annually citing a big increase in the cyber threat to OT systems and the year after year tiny actual impact of cyber attacks on OT. Outside of ransomware on IT, not reaching OT, affecting Operations,...
Number Of Cyber Incidents With A Physical Impact Down In 2025
My favorite OT security vendor threat / incident report was released last week: The Waterfall / ICS Strive 2026 OT Cyber Threat Report. It's my favorite because of their criteria of "cyber incidents causing physical impacts" and because they include the data on each...