3 Mar 2025 | A Year In OT Security
It’s critical to know what your organization is trying to achieve and how success is measured if you are going to meaningfully contribute to cyber risk management decisions. This week’s task is to identify your organization’s most important 3 to 5 key mission...
1 Mar 2025 | A Year In OT Security
Beginning in March we shift for the rest of this book from a focus on your career to a focus on your company’s OT security and cyber risk management program. A common mistake is to begin by selecting and deploying security controls. You find a standard or...
24 Feb 2025 | A Year In OT Security
One last, but not least, task to complete your S4 month is to plan what area you will focus your career growth on over the next year. Hopefully your S4x25 experience and the tasks over the past two weeks have given you some insight on what both will inspire you and...
25 Jun 2024 | 2024, Metrics
This is fourth in a series of suggested metrics governments could (should?) use to measure OT security posture, incidents, and risk … something desperately needed and consistently avoided. Metric 1: Impacted People Days Metric 2: Leading Indicator Metrics Metric...
28 May 2024 | 2024, Metrics
This is third in a series of suggested metrics governments could use to measure OT security posture, incidents, and risk … something desperately needed and consistently avoided. Metric 1: Impacted People Days Metric 2: Leading Indicator Metrics Metric 3:...
21 May 2024 | 2024, Metrics
Part 1 of this article is from my S4x24 Keynote: Believe!. Part 2 is the suggested related metrics for the US and other governments. Are some of you having trouble with Total Recordable Incident Rate? Or the SEC material incident rate? Or these outage pie charts. I...
