![Checklist v. Risk Based OT Cybersecurity Regulation](https://dale-peterson.com/wp-content/uploads/2024/09/img_09-06-2024.png)
Checklist v. Risk Based OT Cybersecurity Regulation
Why Checklists Win Talk to most security professionals, OT and IT, and they'll tell you that applying a checklist approach to security controls across an industry sector makes no sense. Compliance to a standard or regulation does not equal security. Each company...
![OT Security Is A Great Career](https://dale-peterson.com/wp-content/uploads/2024/08/img_08-28-2024.png)
OT Security Is A Great Career
I was hooked on OT Security from day one. During my first SCADA security assessment in 2000 we went out to see damns, pumping stations, turnouts and other physical systems along a canal. This was much more interesting than sitting in a conference room or a data...
![Questions on AI in OT & ICS Security](https://dale-peterson.com/wp-content/uploads/2024/08/img_08-22-2024.png)
Questions on AI in OT & ICS Security
Unsurprisingly the largest category of submissions to S4x25 CFP have been AI related. Almost all of these submissions could have been written by generative AI. A paragraph or three on how AI is an important, fast growing technology that will have a major impact on OT...
![How Successful Is Your Standard?](https://dale-peterson.com/wp-content/uploads/2024/08/img_08-14-2024.png)
How Successful Is Your Standard?
Thomas Burke, longtime President of the OPC Foundation, had the best answer to this question in a podcast interview with Walker Reynolds. Success is measured by the level of adoption. That's the key, when you go do anything with industry standards they've got to be...
![Embedded PLC Security Is Happening](https://dale-peterson.com/wp-content/uploads/2024/08/img_08-08-2024.png)
Embedded PLC Security Is Happening
From 2001, the advent of ICS security, until 2019 PLC security was a "bump-in-the-line". Place a Tofino or other industrial security solution in the network path to secure network communication to and from the PLC. This was widely understood to be a sub-optimal and...
![How Would You Like Your OT Remote Access?](https://dale-peterson.com/wp-content/uploads/2024/08/img_07-30-2024-720x675.png)
How Would You Like Your OT Remote Access?
You can always count on Waterfall to take a different approach to solving a security need. (this is a good thing). They recently announced their Hardware Enforced Remote Access (HERA). HERA leverages Waterfall’s unidirectional technology (one-way, hardware enforced,...
![FrostyGoop: 2004 Is Calling](https://dale-peterson.com/wp-content/uploads/2024/07/img_07-24-2024-720x675.png)
FrostyGoop: 2004 Is Calling
And Still Awaiting Calls To Replace Unauthenticated Protocols Today Dragos released information on ICS malware they are calling FrostyGoop. The key lines from the release are: "It is the first ICS-specific malware that uses Modbus communications to achieve an impact...
![The Next OT Security Product Market](https://dale-peterson.com/wp-content/uploads/2024/07/img_07-18-2024-720x675.png)
The Next OT Security Product Market
The only OT security product market to date is OT Detection solutions (with a slice of asset inventory). It is led by Armis, Claroty, Dragos and Nozomi. There are another 5 credible vendors and 5 or more niche players. There has been a relatively large amount of...
![Hospitals Are Different](https://dale-peterson.com/wp-content/uploads/2024/07/img_07-10-2024-1080x675.png)
Hospitals Are Different
Hospitals and other medical facilities get lumped into OT and cyber/physical because they have software and firmware that is monitoring and controling physical equipment and processes. It’s not wrong, but I don’t think it’s helpful. The high level, high quality OT...
![SEC Action On R.R. Donnelley – – Much More Concerning Than Solarwinds](https://dale-peterson.com/wp-content/uploads/2024/07/img_07-03-2024-1080x675.png)
SEC Action On R.R. Donnelley – – Much More Concerning Than Solarwinds
Last week R.R. Donnelley (RRD) and the SEC reached a $2.125M settlement on issues related to a December 2021 cybersecurity incident. Coming after Solarwinds and being a resolved issue has led to less cybersecurity industry angst about the SEC’s RRD complaint than the...
GET DALE'S ICS SECURITY NEWS & NOTES EMAIL EVERY FRIDAY
Article Archive By Year
Article Archive By Category
UPCOMING EVENTS
S4x24 ... 4 - 7 March 2024 in Miami South Beach
Save the date. For the biggest and most future focused on ICS Security Event.