Unsolicited Response

This is a solosode with Dale covering the two top stories from the month plus a win, fail and prediction.

Links

• Schneider Electric SAAS on Azure for DERMS
• Emerson ZEDI for water press release.
• Dept of Transportion document on proposed fine for Colonial Pipeline.
• ICS version of Backdoors & Breaches card deck.

This is the audio from my interview with Dave Lewis, a Global Advisory CISO at Cisco, on the S4x22 Main Stage.

Dave has experience securing both IT and OT (he worked for electric utilities in Canada). Even more interesting is he talks every week with a wide variety of CISO's. 

It's a wide ranging discussion that hits a lot of different areas on how to work and communicate best with CISO's and executive management on ICS security and cyber risk.

My weekly article. Originally published on 24 May 2022.

Zach Tudor of INL and Megan Samford of Schneider Electric join Dale Peterson on stage to close out S4x22. They discuss:

• What the ICS security community isn't talking about that we need to pay more attention to.
• OT cyber workforce issues.
• What should we draw from the OT malware that came out in early 2022 and the response?
• The SBOM market.
• And more

My weekly article, originally published on 17 May 2022.

Unsolicited Response host Dale Peterson has been skeptical of the cost/benefit of accessing the electrical signals between Level 0 and Level 1 and creating a separate network to send that data to a platform for comparison to data at higher levels and analysis. This is a core part of SIGA's offering.

Dale and Ilan discuss what it actually does and doesn't do. What percentage of the Level 0 device communication needs to be monitored to get this information? The cost per sensor. And more. In the end they don't reach the same conclusion, but the decision points are clearer.

They finish discussing the back end processing for process variable anomaly detection, and how SIGA plans to compete with large vendors (GE, Siemens, ...), Azure and AWS, PI and specialized system vendors who have developed models.

Links

SIGA OT Security Site

Dale's Pivot To Process Variable Anomaly Detection article

Dale's weekly article points out the conflict in thinking and posture in miminizing and maximizing surface area. A minimization strategy can help security and hurt creativity. Seems about right with what we see.

Daniel Kapellmann Zafra of Mandiant joins Dale to talk about April's three big stories:

1. INCONTOLLER / PIPEDREAM

2. INDUSTROYER2

3. JCDC ICS

Then they give wins, fails and predictions with a first appearance of conspiracy Dale.

Dale's weekly article also read on this podcast feed.

Start: What are CISA's major goals in ICS Security for 2022/23 and how will they measure progress? Jen goes over people, process and partnerships goals, and highlights the hiring they are doing in the ICS security area. Also, Jen announces the new JCDC ICS.

17:38 When will the Shields Up come down? Since Shields Up is mostly basic cyber hygiene will there be a Shields Way Up?

23:30 Does Jen believe regulation is required to secure private industry owned critical infrastructure? And of course a lot of other things came up in the course of this half hour interview.