Reasonable Responses to Credible Threats

Credible consequences define the difference between IT & OT defences. We prevent cyber-sabotage differently than we do espionage. Small shoe factories deserve different protections than do passenger metro switching systems. Numerically, IT breaches cause the most OT outages, but OT breaches cause the most serious consequences. OT AI, cloud services and even cloud operations are realities that must be integrated into reasonable safety, reliability and resilience planning. Analog resilience is future-proof but expensive, and network engineering makes digital resilience more deterministic. The latest UK NCSC guidance is a refreshing perspective on the importance of securing connectivity - as primary, not compensating security measure. And more. In this presentation we survey the latest thinking, challenges and solutions for OT security – consequence, credibility, resilience, safety and clouds – in an increasingly connected, increasingly automated, increasingly exposed world.

Who: Andrew Ginter, VP Industrial Security, Waterfall Security

Bio: At Waterfall Security, Andrew leads a team that works with the world's most secure industrial enterprises. Before Waterfall, he led the development of high-end industrial control system products at Hewlett-Packard, of IT/OT middleware products at Agilent Technologies, and of the world's first industrial SIEM at Industrial Defender. Andrew is the author of three books on industrial or "OT" cybersecurity (with 35,000 copies in print), co-hosts the Industrial Security Podcast and contributes regularly to industrial security standards and best-practice guidance.

Can’t attend in person? This session will also be available online, and a recording will be provided.