Been looking forward to publishing this podcast for a while: An excellent conversation with Sarah Fluchs as we revisit the Top 20 Secure PLC Coding Practices coding practices list one year in. Check it out here: claroty.com/resources/podc…

This was fun. Mike_Mimoso asked some tough questions so you can hear me thinking aloud 🙈

Top20 now have an interactive dashboard!🥳 You know you have an active community around Top 20 Secure PLC Coding Practices when one of its members (Dan Ricci) reaches out saying "hey, I know a better way of viewing the Top 20 than in a pdf doc" - and already has it implemented. plc-security.com

How Bezos makes decisions: Is it a one-way or two-way door? One-way = can't reverse so make them slowly and carefully Two-way = reversible so make them fast Most big companies die by using the slow one-way door process for a two-way decision. (2015)

🎙 Sarah Fluchs, CTO admeritia, joins the Aperture podcast to discuss the Top 20 Secure PLC Coding Practices list, how engineers are using it to improve PLC security, and more! Mike_Mimoso Listen: okt.to/XcmE9n Download the list Top 20 Secure PLC Coding Practices: okt.to/p0EFP2

15 years ago my PhD advisor taught me One Weird Trick for editing your own writing. Edit **back to front**, paragraph by paragraph. I still use it and it still surprises me how well it works. When I get my students to do it, it often blows their minds. Try it!

Inhaltlich ist zu #Cyberclown alles gesagt. Aber nun, da "Security kritischer Infrastrukturen" zum politischen Kampfbegriff wird, müssen wir darüber reden, wie wir öffentlich über Cybersecurity reden: medium.com/@fluchsfrictio…

Germany removed the president of Federal Office for Information Security BSI: Here's what you need to know. #cyberclown More importantly, we need to talk about hype mechanisms that turn critical infrastructure security into a political battle term. medium.com/@fluchsfrictio…

hi #cybersec bubble, welche cybersec Frauen* sollte man in DE unbedingt auf dem Schirm haben? Lasst mir mal Eure Empfehlungen als reply da, mit u ohne twitter bzw mastodon handle! #followerpower

Yes, so much to be thankful for in the OT community indeed! Thanks for the shoutout Ron Fabela.

One of my fav 🎙 podcasts 🎙 of the year: Sarah Fluchs of the Top 20 Secure PLC Coding Practices coding practices list. okt.to/XcmE9n Claroty

Everyone wants #SecurityByDesign...but what does that mean? And how do you do it? Full research paper at ResearchGate: researchgate.net/publication/36… IEEE Xplore: ieeexplore.ieee.org/document/99684…

From a Sarah Fluchs comment, whenever anyone asks why something is a certain way in ICS I'm just going to tap on this sticker...😂

Also...🇩🇪

Excellent additions for your reading lists 🤓

Finally at S4x20 News #S4x23 again this year! I'm already starting to feel Miami vibes 🌴.

"You will always be lacking something... youre already more technical than you think, it doesn't take a dozen stickers on your laptop" Great advice from Sarah Fluchs admeritia

"You're a human in #ics. Don't feel like you need to be over technical to compensate, don't feel like you need you be all soft skills." Sarah Fluchs offers great advice! admeritia

What is considered a 'High Consequence Event' should be a management decision, and engineers should work towards avoiding them. - Sarah Fluchs of admeritia at #S4x23

The 3rd edition of the Operational Technology Cybersecurity Expert Panel (OTCEP) Forum will be held from 22 to 23 August 2023. Stay tuned for registration details!