Unsolicited Response

In my weekly article published on 5 Oct 2021, I muse on how hard it is to discuss the zero trust concept in OT when there seems to be no effort to address the Total Trust or Trust All nature of PLC's, Controllers and other Level 1 devices.

Mark Hyman, a recruiter with the Verge Management Group who focuses on OT / ICS Security candidates, joined Dale Peterson on the Unsolicited Response Show to answer listeners questions on starting and growing an ICS Security Career.

There were three main areas of questioning:

1) Getting Into The ICS Security Field

2) Career Growth For An Experienced ICS Security Professional

3) Working With Recruiters

Prior to 2021 there was a substantial amount of ICS security standards and guidelines. The Biden administration has tripled down on this. To what effect?

My weekly article published on 21 Sept 2021.

Subscribe to Dale's ICS Security: Friday News & Notes

This episode has two announcements:

1. Dale will begin market coverage and analyis of the OT SBOM market. He describes the market, the players and his plans.
2. Wednesday of S4x22 will be Women In ICS Security Wednesday. Dale describes the events that day, the free ticket for that day, and suggestions for vendors who want to support the effort.

Subscribe to ICS Security: Friday News & Notes

Dale Peterson's weekly article published on 14 Sep 2021.

Sign Up To Dale's ICS Security - Friday News and Notes

In this episode Dale describes in 22 minutes what he likes and doesn't like about the new, Version 3 of API 1164 Pipeline Control Systems Security Standard. And more importantly whether you should spend $200 to buy a copy.

Subscribe to Dale's ICS Security - Friday News & Notes

In his weekly article, Dale discusses the increase in claims, rates and a silly exclusion attempt by his own carrier to deal with this.

It's too early to count cyber insurance as a risk reduction failure, and the insurance industry has found ways to deal with similar new product challenges.

Matt Wyckhouse, CEO and Founder of Finite State, joined Dale Peterson to discuss the top three stories of the month and give a win, fail and prediction.

The first 6:30 Dale announces tickets for S4x22 are on sale and some of the changes to the three stages along the No Limits theme.

6:31 Topic 1 - QNX and Blackberry Vulnerabilities … their impact on OT and IIoT and what an asset owner should do about them.

27:00 Topic 2:  Cyberspace Solarium Annual Report talking about progress to meeting objectives over the last year, https://www.solarium.gov/public-communications/2021-annual-report-on-implementation

38:05 Topic 3 - Sinclair's poll on asset owner's view of IEC 62443 Security Levels, https://otcybersecurity.blog/2021/08/19/results-from-the-poll/

44:21 Wins, Fails and Predictions

Other Links

- S4x22 Tickets https://universe.com/s4x22

- Earlier podcast episode with Matt Wyckhouse https://dale-peterson.com/2020/06/16/podcast-matt-wyckhouse-of-finitestate/ 

- Finite State site https://finitestate.io 

My article orginally published on 31 August 2021.

If convergence, once started, is a powerful force in one direction, then why wouldn’t most of the functionality of the OT visibility/detection management platforms be converged into their enterprise equivalents, such as Splunk or ServiceNow.

S4x22 Tickets Go On Sale Sep 1 at Midnight EDT