ICS Security Maturity Model (Levels 4 – 6)

ICS Security Maturity Model (Levels 4 – 6)

See Part 1 with Levels 1 – 3. I must admit I switched the order of Basic Detection and eliminate High Consequence Events multiple times in writing this article. As always I welcome your comments including your own maturity levels. Maturity Level 4: Basic...
Sorry, Security Is A Cost

Sorry, Security Is A Cost

After a recent virtual keynote I was asked a perennial hopeful question: How we can make cybersecurity a source of revenue rather than a cost? The short answer for an OT asset owner is, you can’t. The motivation is understandable. Businesses and their executives...
Calamity or Shoulder Shrug

Calamity or Shoulder Shrug

You Must Understand Your Organization’s Risk Management Do you want support and funding for your ICS security initiatives? Then you need to understand what executives view as high, unacceptable consequences that believably could be caused by a cyber or...