This is Dale Peterson's weekly article originally published on 1 June 2021. Following the article Dale describes what we are looking for in S4 sessions and provides tips on what to do and not to do to increase your chances of getting on the S4x22 Stage.

S4x22 Call For Presentations: s4xevents.com/cfp

Subscribe to Dale's Friday News & Notes friday.dale-peterson.com/signup

Rob Lee of Dragos joins Dale Peterson on the Unsolicited Response show to discuss:

The Biden Administration efforts on OT Cybersecurity. What they are; the pro's and con's of these efforts; and where they might be successful.

Rob and Dale talk about their disagreement on where Detection products, and to a lesser extent threat intel, like Dragos and others offer should be considered in relation to other security controls and solutions.

The prospects for an entry level and mid level ICS Security Professional in 2021 and the upcoming years.

Subscribe to Dale's ICS Security Friday News and Note: https://friday.dale-peterson.com/signup

Dale's weekly article published on 25 May 2021 talks is triggered by a World Economic Forum report that on Resilience in the Oil and Gas sector.

Tweetme: @digitalbond

Sign Up For My Newsletter: https://friday.dale-peterson.com/signup

The episode begins with some announcements then

4:15 - Dale's Monologue/Rant on the Colonial Pipeline Incident. The increase it brings in attention, resources and expectations on a macro level. And the real action asset owners should be taking for this specific set of circumstances.

12:20 - Joel Langill joins the show and brings his experience on pipelines systems and their operations, plus a quick discussion on his new training.

30:45 - Rob Caldwell joins Joel and Dale. We talk about incident response in OT, and then answer questions from the LinkedIn and YouTube audience.

Links:

• Joel's S4x19 Session Video on an ICS Investigation
• Joel's ICSCSI training site
• FireEye article on OT systems being added to malware kill lists

Six months since my Dec 2020 update ... the biggest change is major demand drivers; where is the Claroty and Nozomi funding round? and big cloud / enterprise products and services continue to introduce and up their offerings.

My weekly article published 18 May 2021.

Subscribe to my ICS Security: Friday News & Notes email: friday.dale-peterson.com/signup

Dale Peterson talks with Ulf Lindqvist and Laura Tinnel of SRI International about the recent LOGIIC report on the (in)security of safety instrumentations systems. Particularly the IMS/AMS components that configure and manage smart instruments.

They go over the three main findings, which are deadly serious and two have actionable mitigations.

They finish with a discussion of why there is not a hard recommendation to not allow the IMS/AMS to be on or accessible from the PCN.

Get the report at: https://www.logiic.org

See the S4x15 video on testing 114 DTM's at: https://youtu.be/qbno2woz7p4

Subscribe to Dale's ICS Security Friday News & Notes at: https://friday.dale-peterson.com/signup

The Colonial Pipeline incident highlights the need for an Enterprise Network Compromised Playbook. This and two other must haves are described in this article orginally published on 11 May 2021.

Patrick Miller joins Dale Peterson to discuss the months top three stories and then give their prediction, win and fail for the month. The stories

1) What to make of the US Government's efforts in ICS security in the first 100 days of the Biden administration.

2) The Pulse Secure VPN vulnerabilities and active exploitation, the impact on ICS asset owners, and what should be done.

3) ICS Security Training ... with Joel Langill back in the game Patrick and Dale look at the offerings.

TweetMe: @digitalbond

Get my Friday News & Notes: https://friday.dale-peterson.com/signup

Dale's article published on 4 May 2021. It shows how the Industrial Edge parallels Level 1 devices in capabilities using AWS as an example. And leaves a hanging question at the end. 

TweetMe: @digitalbond

Sign Up For My Friday Newsletter at https://friday.dale-peterson.com/signup

The ICS CYBERSEC 2021 event in Israel challenged speakers by limiting sessions to ten minutes. So Dale Peterson went with the theme and focused on how doing less in two important areas can actually help improve OT and ICS security.

1) Requiring less of engineers and operators (security is not everyone's responsibility)

2) Less cyber hygiene, more efficient risk reduction driven action

TweetMe: @digitalbond

Sign Up To My Friday Newsletter: https://friday.dale-peterson.com/signup