Unsolicited Response

President Trump fired CISA Director Chris Krebs. The firing was election related, but CISA is also the lead government agency on ICS security. Dale talked with Marty Edwards about how large changeover like this affects the effort, and what the community should realistically expect from CISA.

Marty is now with Tenable, and he is well known as the longest serving Director of DHS's ICS-CERT.

Tweet Me! @digitalbond

Friday Newsletter: https://mailchi.mp/f53b1c8c2da0/friday

Jason Nations and I go over October's top three stories plus our Win, Fail and Prediction of the month.

1. Six Sandworm attackers from Russia charged.

2. More ICS vendors announced security services (ABB and Siemens).

3. ICS security vendors are creating risk metrics for cyber assets and zones (Claroty and ID announced). How should asset owners view these metrics?

Tweet Me! @digitalbond

Friday Newsletter: https://mailchi.mp/f53b1c8c2da0/friday

This month's stories include:

S4x21's cancellation and S4x22 dates

(7:01) Ransomware in ICS

(12:30) SCIDMark and other ICS cyber incident databases

(16:50) Is the Airgap myth still believed by asset owners?

(21:51) Wins, Fails and Predication

Tweet Me! @digitalbond

Friday Newsletter: https://mailchi.mp/f53b1c8c2da0/friday

In this episode I talk with Otis Alexander of MITRE about ATT&CK for ICS Evaluations. We begin with a discussion on ATT&CK and the ICS version of ATT&CK. If you are familiar with this, skip to 17:09 where we begin our discussion on the upcoming evaluations.

Tweet Me! @digitalbond

Friday Newsletter: https://mailchi.mp/f53b1c8c2da0/friday

OT Detection and Asset Management integration with SIEMs has been limited to pushing alerts/events without context. This changes with Splunk's OT Security Add-On. I talk with Ed Albanese about the benefits of this increased integration and what is still needed in OT integration with the enterprise wide SIEM and Asset Management solutions.

Tweet Me! @digitalbond

Friday Newsletter: https://mailchi.mp/f53b1c8c2da0/friday

We hear it all the time. OT is different than IT, and IT doesn't understand OT. The flip side is also true. OT doesn't understand IT. I talk with Lesley Carhart of Dragos about how OT can better understand OT, and more importantly how IT can help OT.

Tweet Me! @digitalbond

Friday Newsletter: https://mailchi.mp/f53b1c8c2da0/friday

CISA recently released a new strategy and an OT / control system Alert. Dale questions CISA Director Chris Krebs on this and other issues on what CISA will do and how they will measure success.

Tweet Me! @digitalbond

Friday Newsletter: https://mailchi.mp/f53b1c8c2da0/friday

Rob Caldwell joins Dale to discuss the 2 big stories of the month, and then the give their Win and Fail for the month, and finish with a bold prediction.

Tweet Me! @digitalbond

Friday Newsletter: https://mailchi.mp/f53b1c8c2da0/friday

P.W. Singer and August Cole recently published their second work of fiction - Burn In: A Novel About The Real Robotic Revolution. While it is a fiction, it uses over 300 examples of what might happen as robotics and revolution change the world over the next two decades.

Tweet Me! @digitalbond

Friday Newsletter: https://mailchi.mp/f53b1c8c2da0/friday

Michael Toecker joins Dale to discuss the 3 big stories of the month, and then the give their Win and Fail for the month, and finish with a bold prediction.

Tweet Me! @digitalbond

Friday Newsletter: https://mailchi.mp/f53b1c8c2da0/friday