🔥The 9th Round of Easy Loan, Earn $40 Reward is in progress❗️ ⏰ Promotion Period: January 15th - Feburary 15th, 2025 👉 Register now and check more details at gate.io/campaigns/358

Hear why OT cyber knowledge brings more value to executives from j.d.christopher, and a rundown of #SCADA terms and what they mean from David Foose and Mark Urban--on Control Loop Podcast. x.com/thecyberwire/s… #otsecurity #icscsecurity #industrialcybersecurity #controlloop

Another proof-of-concept, but I <3 this one too... because "air gap." Nothing totally new about exfiltrating data using acoustic or optical methods, but I like the addition of an infected phone to do the dirty work: thehackernews.com/2022/08/new-ai…

...wait, you guys _haven't_ been doing risk-based vulnerability management? Uh oh. cpomagazine.com/cyber-security…

I've got a busy couple of weeks coming up! A few webinars of interest for folks below, as well as a LiveOnline run of SANS Institute ICS418. Want to chat in person? You can catch me at both the NationalCyberSummit in Huntsville, AL or at BSides Charlotte later this month!

Me: Post-COVID, I will never wear a tie again. Be happy I’m wearing shoes. Every federal defense contractor at their first cyber conference in 2+ years:

Federal cyber contractor bingo in full force right now. An hour in and “zero-trust,” “machine learning,” “artificial intelligence,” & “quantum encryption” have all been pitched as ways to automate reduction in cyber risk. It’s too early for this drinking game.

There will be a great lineup of Dragos presenters at the 17th Annual American Petroleum Institute Cybersecurity Conference for the #oilandgas industry in The Woodlands, TX, on November 8-9. Mark your calendars! Learn more: buff.ly/3RPTsCZ. #ICSsecurity

Curious about how to measure the effectiveness of your ICS security program? Check out my latest SANS Institute blog on what to measure, how, and what your team should look like:

You'll want to check this one out-- expect some great discussion around measuring OT cyber risk, some memes, and more than a few actionable tools that you can immediately apply. What more could you ask for?

🗞️ SANS #CyberSecurity Blog 📈 How to Mature ICS Security with #Metrics j.d.christopher breaks down the Basic #ICS/ #OT Security Metric Implementation Process. 📕 Read Blog In Full: sans.org/u/1nGl

I know we’re saying “farewell”, but the chemistry between Jump Little Children (Jay especially) and Frances Cone has me DYING for more.

I don’t post much any more, but want to plug my SANS ICS research project on ICS/OT visibility. Looking for some input on industrial orgs with SOC capabilities (both IT and OT). Provide insights, help the community, & maybe win a $250 Amazon gift card! sans.org/u/1pqp

The evolving role of industrial CISOs is something Dean Parsons and I discuss in the SANS Institute #ICS418 course. Happy to get a chance to explore it more in this week's #ControlLoop podcast!

Sorry, had to be done…

This could get fun: schneier.com/blog/archives/…

In 2013, I was the federal energy sector lead for the NIST Cybersecurity Framework, which included a robust discussion on cybersecurity incentives. Ten years later, the landscape has shifted significantly, but it still comes down to insurance: lawfaremedia.org/article/if-cyb…

At #GridSecCon2023? Be sure to check out the SANS ICS booth! Both cutaway & I are here to talk about our courses, grid security, & the future of ICS workforce development. Also be sure to check out the SANS-Dragos CtF tonight & my session on “future-proofing” NERC CIP tomorrow!

…what if ICS/OT security professionals got an annual “wrapped” summary for 2023 like Spotify provides? Industrial cybersecurity sometimes feels like an uphill battle, but I promise you— we are constantly improving and doing better. What metrics would be in your 2023 wrapped?

A warm welcome to j.d.christopher! You’re going to be a valuable asset to our company, and we can’t wait to see all that you accomplish.

Coming up: Panel discussion with EIP's j.d.christopher at the DOE (U.S. Department of Energy) Energy Transition Summit, discussing future clean energy applications for the cloud and the technical, regulatory, standards, and/or best practices to ensure secure cloud adoption. #energytransition