A recording of Dale Peterson's 30-minute Keynote at the Fortinet OT Symposium - Manufacturing Day.

Clay Carter, VP and Head of Product Security at Xylem, joins Dale Peterson to discuss the top 3 stories of the month and give their win, fail and prediction. The stories:

• what did CISA's Water & Wastewater Alert mean to those sectors and a broader discussion on what would be helpful to those sectors.
• Drago's raising $200M at a post money valuation of $1.7B.
• Shodan Trends and how it could be used by asset owners and potentially .gov.

This article was originally published on the Tripwire Guest Author page. It highlights an early fail of mine and what I learned.

Peter Lund of Industrial Defender joins Dale to discuss SOAR in ICS.

• Examples of early big wins for SOAR in ICS
• Can you mix and match your SIEM and SOAR from different vendors?
• Partial v Full Automation ... will there always be a person in the loop? - Does SOAR need to be customized for OT to be of real use in OT?

They finish the conversation with a bit on Industrial Defender's recently announced OT Machine Learning Language.

Check Out The S4x22 Agenda

My weekly article looks at the work and risk related to cyber maintenance of the ICS edge devices (when they get the needed DPI)

Check out the S4x22 Agenda

• Susan Peterson Sturm and Dale Peterson talked about the future at Cognite's Ignite event. They discussed:
• what changes can we expect when architectures base on the Purdue mode are dying
• trust and restricted capabilities between service providers and assets owners
• how data ops coming online now can help secure OT and leverage IT / OT convergence
• cultural convergence - the promise of process variable anomaly detection

Check Out S4x22

Dale's weekly article published on 19 October 2021.

Subscribe to Dale's ICS Security: Friday News & Notes

My weekly article. The cybersecurity team needs to be careful about overselling the supply chain cybersecurity risk in an environment where real, large supply chain disruptions are occurring. 

My article originally published on 12 October 2021.

Joel Langill joins Dale in this Live episode. The stories:

- CISA's Performance Goals and Objectives for Critical Infrastructure ICS (and a bit on TSA's 2nd Security Directive)

- Moody's moving from Visible Risk to Bitsight for Cyber Security Ratings, and the difficulty to create and possible use of Cyber Security Ratings

- Who performs what tasks in "OT"

Plus Wins, Fails and Predictions.

Links:

S4x22: https://s4xevents.com

Joel's Training: https://icscsi.org