I begin with a brief discussion of the George Floyd murder and not enough. While not ICS security, it is impossible to review the month of May without discussing this. Then at 7:15 Patrick Miller joins me to discuss the Executive Order, the rumored supply chain manipulation of a transformer, COVID impact on the ICS security community, and ICS ATT&CK evaluations. We finish with Wins and Fails from the month and a Bold Prediction.

This is a shorter solo-sode rather than the typical interview format. I wanted to hold off on making any COVID-19 analysis or comments until the rawness and shock of the event had subsided somewhat. In this episode I discuss how COVID-19 affects:

- my S4x20 statement that "this is a great time to be in the ICS security business"

- companies, especially start-ups and early stage ICS security companies

- careers and personal behavior

- S4x21

Ralph Langner of Langner, Inc. and Zach Tudor of INL join me on the S4x20 Closing Panel. This is always one of the most fun and highly rated session at S4.

We cover a lot of ground in this free-wheeling discussion including ... What are what not talking about that we should be?

No sophisticated OT attacks in two years. Why?

How much should the average worker in operations have to do to achieve OT security?

What should be the metrics of success for 2020?

This podcast is the audio from my S4x20 Main Stage interview with electric sector and ICS legend Ed Schweitzer. He was the perfect person to interview related to the event theme: Create The Future in OT and ICS security. It's a wide ranging and fun interview. (Ed has a great sense of humor).

Dr. Edmund O. Schweitzer, III, is recognized as a pioneer in digital protection and holds the grade of Fellow in the IEEE, a title bestowed on less than one percent of IEEE members.

Bryan and I were scheduled to go skiing prior to ICSJWG in Park City. With that squashed we decided to record a podcast instead. Bryan and I begin with what winning the Michael J. Assante Lifetime Achievement award meant to him. Then we discuss the challenge and methods in which an ICS product vendor tries to develop and deploy a secure solution.

We finish up with a discussion on engineers in OT & ICS security. Do they required cybersecurity training, & are they essential to securing OT/ICS.

Marty Edwards has worked for an ICS asset owner, INL, DHS, ISA and late last year he made the move to a security product vendor, Tenable. This happened at the same time that Tenable acquired Indegy for $78M, indicating they are serious about OT security space. I talk with Marty a bit about his past career and then focus on why he moved to Tenable and what Tenable's strategy is for the OT space.

A big challenge facing any team trying to deal with OT and ICS cyber risk is getting executive leadership and the Board of Directors support and leadership on this issue. The problems that arise tend to be related to communication styles, understanding of what is truly important to the company, and reducing business risk as determined by the executives and Board.

I talk with Thomas Parenty of the Archefact Group about the Board of Directors' responsibility in business risk management.

Sergio began his career doing threat intelligence in the US Government's NSA and now is the VP of Threat Intel at Dragos. We focus in this episode on where the data for threat intel is obtained, how the threat intel product is created, and how it should be used by an ICS asset owner.

In this episode Dale Peterson interviews Sandworm author and Wired Senior Writer Andy Greenberg on the S4x20 Main Stage. They focus on the ICS issues in the story. Who is Sandworm? What did Sandworm do? How was the West's response to these attacks? and much more.

The tables are turned in this episode of the Unsolicited Response podcast with Kelly Jackson Higgins of Dark Reading interviewing Dale in the S4x20 Green Room. Kelly has been coming to S4 and covering the ICS security space for over seven years, and this experience lets her write and edit articles with important information and minimal hype.