But We Really Mean It This Time!
Coverage and commentary of the US water utility cyber incidents continue to dominate OT security content, often with suggestions to address the problem (including mine). Most of the suggestions are logical. They aren't "wrong". And most have failed repeatedly over the...
Perspective
The power was out in our area of Maui for over 48 hours due to Hurricane Lala. This is the second time this year that we've experienced a multi-day outage due to storms, and this is a typical year. We've had similar multi-day and even multi-week outages in our water...
Accelerate Your OT Security Career & Personal Brand
Contribute: New, Narrow, and Deep (see opportunity at the bottom of article) When I had an OT security consulting team from 2000 - 2020, I would tell every new member they should be recognized as best in world at something in OT security in less than three years. I...
US Water Sector OT Security Plan(s)
I was glad to be off playing cowboy last week. I missed the noise around the Minnesota, and other states, water sector security incidents, and it gave me time to think about what I wanted to write on the subject. First, there is not and should not be one plan to...
The Other AI Question In OT
AI is dominating conversations in the OT security community. How are the attackers going to use AI? How will AI help in the SOC and other defenders’ tools? Important? Yes, and I’m afraid the OT security community is not working on an equally important issue. How is AI...
Accenture / Dragos Deal Analysis: Part 3 – The Impact On The OT Security Product & Services Market
The Accenture / Dragos / runZero / NetRise deal may be the most significant single event in the OT Security Community & Market since Colonial Pipeline. I tackle this in 3 parts over the next 3 days. Part 1 - Accenture & Dragos Part 2 - The Dragos Product Part...
Accenture / Dragos Deal Analysis: Part 2 – The Dragos Product
The Accenture / Dragos / runZero / NetRise deal may be the most significant single event in the OT Security Community & Market since Colonial Pipeline. I tackle this in 3 parts over the next 3 days. Part 1 - Accenture & Dragos Part 2 - The Dragos Product Part...
Accenture / Dragos Deal Analysis … Part 1
The Accenture / Dragos / runZero / NetRise deal may be the most significant single event in the OT Security Community & Market since Colonial Pipeline. I tackle this in 3 parts over the next 3 days. Part 1 - Accenture & Dragos Part 2 - The Dragos Product Part...
Absolute And Relative Risk Reduction
Deconstructing risk can help focus where we should be spending our time and money to reduce risk. Most security controls in OT reduce the likelihood of a cyber incident that causes an impact on operations. How much of a reduction of likelihood, and consequentially...
Watching Regulation’s Impact On OT Cyber Risk In Europe
Europe has taken the initiative from the US in OT security. The Cyber Resilience Act (CRA) and NIS2 Directive will impact vendors, integrators, and asset owners who are active in the EU. And I'm standing on the outside watching with great interest. I was invited to be...