Unsolicited Response

The concept and utility of a digital twin is easy to grasp, but how do you build a digital twin? How much does it cost? How long does it take? Are we going to see digital twins in all sectors? Are all digital twins the same. I ask Mike Aylott of KBC these and other digital twin questions.

Tweet Me! @digitalbond

Friday Newsletter: https://mailchi.mp/f53b1c8c2da0/friday

This week's episode is my interview with Matt Wyckhouse, founder and CEO of Finite State. We talk about testing ICS firmware, what asset owners do with the results, and business models for providing this info. Plus startup life, raising money and working with VC's.

Tweet Me! @digitalbond

Friday Newsletter: https://mailchi.mp/f53b1c8c2da0/friday

I begin with a brief discussion of the George Floyd murder and not enough. While not ICS security, it is impossible to review the month of May without discussing this. Then at 7:15 Patrick Miller joins me to discuss the Executive Order, the rumored supply chain manipulation of a transformer, COVID impact on the ICS security community, and ICS ATT&CK evaluations. We finish with Wins and Fails from the month and a Bold Prediction.

This is a shorter solo-sode rather than the typical interview format. I wanted to hold off on making any COVID-19 analysis or comments until the rawness and shock of the event had subsided somewhat. In this episode I discuss how COVID-19 affects:

- my S4x20 statement that "this is a great time to be in the ICS security business"

- companies, especially start-ups and early stage ICS security companies

- careers and personal behavior

- S4x21

Ralph Langner of Langner, Inc. and Zach Tudor of INL join me on the S4x20 Closing Panel. This is always one of the most fun and highly rated session at S4.

We cover a lot of ground in this free-wheeling discussion including ... What are what not talking about that we should be?

No sophisticated OT attacks in two years. Why?

How much should the average worker in operations have to do to achieve OT security?

What should be the metrics of success for 2020?

This podcast is the audio from my S4x20 Main Stage interview with electric sector and ICS legend Ed Schweitzer. He was the perfect person to interview related to the event theme: Create The Future in OT and ICS security. It's a wide ranging and fun interview. (Ed has a great sense of humor).

Dr. Edmund O. Schweitzer, III, is recognized as a pioneer in digital protection and holds the grade of Fellow in the IEEE, a title bestowed on less than one percent of IEEE members.

Bryan and I were scheduled to go skiing prior to ICSJWG in Park City. With that squashed we decided to record a podcast instead. Bryan and I begin with what winning the Michael J. Assante Lifetime Achievement award meant to him. Then we discuss the challenge and methods in which an ICS product vendor tries to develop and deploy a secure solution.

We finish up with a discussion on engineers in OT & ICS security. Do they required cybersecurity training, & are they essential to securing OT/ICS.

Marty Edwards has worked for an ICS asset owner, INL, DHS, ISA and late last year he made the move to a security product vendor, Tenable. This happened at the same time that Tenable acquired Indegy for $78M, indicating they are serious about OT security space. I talk with Marty a bit about his past career and then focus on why he moved to Tenable and what Tenable's strategy is for the OT space.

A big challenge facing any team trying to deal with OT and ICS cyber risk is getting executive leadership and the Board of Directors support and leadership on this issue. The problems that arise tend to be related to communication styles, understanding of what is truly important to the company, and reducing business risk as determined by the executives and Board.

I talk with Thomas Parenty of the Archefact Group about the Board of Directors' responsibility in business risk management.

Sergio began his career doing threat intelligence in the US Government's NSA and now is the VP of Threat Intel at Dragos. We focus in this episode on where the data for threat intel is obtained, how the threat intel product is created, and how it should be used by an ICS asset owner.