The Top20 Secure PLC Coding Practices Top 20 Secure PLC Coding Practices are featured in NATO's GUIDE FOR PROTECTING INDUSTRIAL AUTOMATION AND CONTROL SYSTEMS AGAINST CYBER INCIDENTS! 🥳 Thanks Vytautas Butrimas for putting together this guide incl an extensive ICSsec toolbox. Link: enseccoe.org/data/public/up…

Top 20 in Turkish! 🤗🇹🇷

In 2020, Frumious Scadateer said about secure PLC programming at S4x20 News: "Nobody learns this at school." 2 years later, here's proof of Agustín Valencia teaching the Top 20 Top 20 Secure PLC Coding Practices coding practices. At school. Yay! 🥳

The Top 20 Secure PLC Coding Practices are now available in Spanish!Don't you agree that "Prácticas seguras de codificación de PLC" sounds way more elegant? ❤️🇪🇸 Thanks to CENTRO DE CIBERSEGURIDAD INDUSTRIAL for the translation! plc-security.com/content/Top_20…

PLC TOP20 training is on at #S4x22 with Vivek & Josh ! Let's spread the best practices

That's a big milestone we've been working towards. It's been difficult to get vendors and integrators to join the conversation on PLC security. I hope many others will follow GRANTEK's example. Asset owners will love you for being transparent about PLC security, I promise!

The German translation of the Top20 Secure PLC Coding Practices is now available!

…and a brand new one focused on the Top 20 Secure PLC Coding Practices (👋 Top 20 Secure PLC Coding Practices ) on Friday afternoon forum.defcon.org/node/241810 & eventbrite.com/e/arnaud-soull…

If we understand (ICS) security by design as integrating security into an existing engineering workflow, I expected us to end up with.....some new kind of workflow. Well...we didn't. Here's a first intro to our security by design decisions approach. link.medium.com/Xb2aJi5Lprb

Just discovered there is a graphic recording of my talk on PLC code security at the SANS ICS Summit, thanks Ashton Rodenhiser & SANS ICS !

One year since the Top 20 Top 20 Secure PLC Coding Practices Coding Practices have been published! It's a good time to clarify a few things: What the Top 20 are, what they are not, and what you should do with them (as an asset owner, integrator, or vendor). fluchsfriction.medium.com/one-year-of-to…

Starting to apply the Top 20 secure PLC coding practices does not need to be a daunting task. Integrating secure coding into your cybersecurity practice will take some time to align the culture. A sample vendor policy example is now available for download. plc-security.com/#download

Muy buen post de Sarah Fluchs respecto a qué es y qué no es el proyecto Top20 Secure PLC Coding Practices, y algunos detalles sobre lo que sucedió desde que salió a la luz: fluchsfriction.medium.com/one-year-of-to… Vale la pena recordar que desde CCI colaboramos en la versión en Español

New use cases for Siemens and Grantek are up for and available for download. These use cases are helpful for referencing which practices your peers are implementing. plc-security.com/index.html#app…

My workshop at BruCON is about to start!