Peter Lund of Industrial Defender joins Dale to discuss SOAR in ICS.

• Examples of early big wins for SOAR in ICS
• Can you mix and match your SIEM and SOAR from different vendors?
• Partial v Full Automation ... will there always be a person in the loop? - Does SOAR need to be customized for OT to be of real use in OT?

They finish the conversation with a bit on Industrial Defender's recently announced OT Machine Learning Language.

Check Out The S4x22 Agenda

My weekly article looks at the work and risk related to cyber maintenance of the ICS edge devices (when they get the needed DPI)

Check out the S4x22 Agenda

• Susan Peterson Sturm and Dale Peterson talked about the future at Cognite's Ignite event. They discussed:
• what changes can we expect when architectures base on the Purdue mode are dying
• trust and restricted capabilities between service providers and assets owners
• how data ops coming online now can help secure OT and leverage IT / OT convergence
• cultural convergence - the promise of process variable anomaly detection

Check Out S4x22

Dale's weekly article published on 19 October 2021.

Subscribe to Dale's ICS Security: Friday News & Notes

My weekly article. The cybersecurity team needs to be careful about overselling the supply chain cybersecurity risk in an environment where real, large supply chain disruptions are occurring. 

My article originally published on 12 October 2021.

Joel Langill joins Dale in this Live episode. The stories:

- CISA's Performance Goals and Objectives for Critical Infrastructure ICS (and a bit on TSA's 2nd Security Directive)

- Moody's moving from Visible Risk to Bitsight for Cyber Security Ratings, and the difficulty to create and possible use of Cyber Security Ratings

- Who performs what tasks in "OT"

Plus Wins, Fails and Predictions.

Links:

S4x22: https://s4xevents.com

Joel's Training: https://icscsi.org

In my weekly article published on 5 Oct 2021, I muse on how hard it is to discuss the zero trust concept in OT when there seems to be no effort to address the Total Trust or Trust All nature of PLC's, Controllers and other Level 1 devices.

Mark Hyman, a recruiter with the Verge Management Group who focuses on OT / ICS Security candidates, joined Dale Peterson on the Unsolicited Response Show to answer listeners questions on starting and growing an ICS Security Career.

There were three main areas of questioning:

1) Getting Into The ICS Security Field

2) Career Growth For An Experienced ICS Security Professional

3) Working With Recruiters

Prior to 2021 there was a substantial amount of ICS security standards and guidelines. The Biden administration has tripled down on this. To what effect?