Control Systems Cybersecurity USA (8th annual live) Control Systems Cybersecurity USA (8th annual live)

OT Cyber Risk Management

Thursday, September 23, 2021

- EDT
Executive Order Impacts on OT Security (Physical)
Pedro Serrano
Pedro Serrano
Grand River Dam Authority, Chief Information Security Officer (CISO)

A discussion on the parameters of the EO, the impacts on operational technology, what end users can expect and current thinking on what it does and not cover for us! 

- EDT
Targeted Ransomware requires New Approaches to OT Cyber Risk Management (Physical Live)
Michael Firstenberg
Michael Firstenberg
Waterfall Security Solutions, Director of Industrial Security

Targeted ransomware has emerged as a major threat to industrial operations / OT systems. The Colonial Pipeline and JBS shutdowns are only the latest incident - in 2020, 53 industrial sites were shut down by targeted ransomware. The trend is likely to worsen - today's targeted attacks use tools and techniques comparable to those used exclusively by nation states only a half decade ago. 

Operational Technology (OT) cyber risk manages cyber threats to physical operations. Some enterprise security mechanisms are very costly to apply in OT systems because of extended safety, equipment protection and other OT risk management programs. We see emergency risk avoidance mechanisms which are unique to the OT space, but are under-utilized by enterprise risk management and security practitioners. 

This presentation highlights three such innovative cyber risk management approaches and examines their effectiveness against the pervasive threat of targeted ransomware with particular attention on the operations risk. The presentation will outline a simple and robust approach to managing OT cyber risks, including Security PHA Review (SPR), Consequence-Driven, Cyber-Informed Engineering (CCE), and Secure Operations Technology (SEC-OT). Secure sites in the industry are improving protection for their operations by cherry-picking techniques from these new methodologies. Join us for a whirlwind tour of trends in OT and industrial operations attacks and defenses.