Proposed Government Metric – Internet Exposed OT

Proposed Government Metric – Internet Exposed OT

This is third in a series of suggested metrics governments could use to measure OT security posture, incidents, and risk … something desperately needed and consistently avoided. Metric 1: Impacted People Days Metric 2: Leading Indicator Metrics Metric 3:...
Leading Indicator Metrics (Inspired by API RP 754)

Leading Indicator Metrics (Inspired by API RP 754)

Part 1 of this article is from my S4x24 Keynote: Believe!. Part 2 is the suggested related metrics for the US and other governments. Are some of you having trouble with Total Recordable Incident Rate? Or the SEC material incident rate? Or these outage pie charts. I...
Proposed Government Metric – Impacted People Days

Proposed Government Metric – Impacted People Days

This is the first in a series of articles on proposed government metrics (US and other) to measure the consequence of critical infrastructure OT cyber incidents. Impacted People Days – – The number of people impacted by an OT cyber incident multiplied by...