Waterfall Security Solutions and ICSSTRIVE put out an annual threat report that Dale Peterson believes is the best in OT. Why? It only includes incidents that had physical consequences on systems monitored and controlled by OT.  Dale and Andrew discuss: <ul> <li dir="ltr" aria-level="1"> What is in and out of scope for the report. </li> <li dir="ltr" aria-level="1"> The breakdown of the 68 incidents that occurred in 2023 by industry sector, cause, threat actor and more. </li> <li dir="ltr" aria-level="1"> The impact reporting requirements may have on these numbers in the future. </li> <li dir="ltr" aria-level="1"> What percentage of OT cyber incidents with physical consequences are made public. </li> <li dir="ltr" aria-level="1"> Ransomware on IT causing physical consequences, exfil v. encryption, and what asset owners should do given this represents 80% of the known incidents in the report. </li> <li dir="ltr" aria-level="1"> And more. </li> </ul> Links: <ul> <li dir="ltr" aria-level="1"> 2024 Threat Report: <a href= "https://waterfall-security.com/ot-insights-center/ot-cybersecurity-insights-center/2024-threat-report-ot-cyberattacks-with-physical-consequences/"> https://waterfall-security.com/ot-insights-center/ot-cybersecurity-insights-center/2024-threat-report-ot-cyberattacks-with-physical-consequences/</a>  </li> <li dir="ltr" aria-level="1"> ICSSTRIVE: <a href= "https://icsstrive.com">https://icsstrive.com</a> </li> <li dir="ltr" aria-level="1"> S4 Events YouTube Channel: <a href="https://youtube.com/s4events">https://youtube.com/s4events</a> </li> </ul>

<description>&lt;p dir="ltr"&gt;Waterfall Security Solutions and ICSSTRIVE put out an annual threat report that Dale Peterson believes is the best in OT. Why? It only includes incidents that had physical consequences on systems monitored and controlled by OT. &lt;/p&gt; &lt;p dir="ltr"&gt;Dale and Andrew discuss:&lt;/p&gt; &lt;ul&gt; &lt;li dir="ltr" aria-level="1"&gt; &lt;p dir="ltr" role="presentation"&gt;What is in and out of scope for the report.&lt;/p&gt; &lt;/li&gt; &lt;li dir="ltr" aria-level="1"&gt; &lt;p dir="ltr" role="presentation"&gt;The breakdown of the 68 incidents that occurred in 2023 by industry sector, cause, threat actor and more.&lt;/p&gt; &lt;/li&gt; &lt;li dir="ltr" aria-level="1"&gt; &lt;p dir="ltr" role="presentation"&gt;The impact reporting requirements may have on these numbers in the future.&lt;/p&gt; &lt;/li&gt; &lt;li dir="ltr" aria-level="1"&gt; &lt;p dir="ltr" role="presentation"&gt;What percentage of OT cyber incidents with physical consequences are made public.&lt;/p&gt; &lt;/li&gt; &lt;li dir="ltr" aria-level="1"&gt; &lt;p dir="ltr" role="presentation"&gt;Ransomware on IT causing physical consequences, exfil v. encryption, and what asset owners should do given this represents 80% of the known incidents in the report.&lt;/p&gt; &lt;/li&gt; &lt;li dir="ltr" aria-level="1"&gt; &lt;p dir="ltr" role="presentation"&gt;And more.&lt;/p&gt; &lt;/li&gt; &lt;/ul&gt; &lt;p dir="ltr"&gt;&lt;strong&gt;Links:&lt;/strong&gt;&lt;/p&gt; &lt;ul&gt; &lt;li dir="ltr" aria-level="1"&gt; &lt;p dir="ltr" role="presentation"&gt;2024 Threat Report: &lt;a href= "https://waterfall-security.com/ot-insights-center/ot-cybersecurity-insights-center/2024-threat-report-ot-cyberattacks-with-physical-consequences/"&gt; https://waterfall-security.com/ot-insights-center/ot-cybersecurity-insights-center/2024-threat-report-ot-cyberattacks-with-physical-consequences/&lt;/a&gt; &lt;/p&gt; &lt;/li&gt; &lt;li dir="ltr" aria-level="1"&gt; &lt;p dir="ltr" role="presentation"&gt;ICSSTRIVE: &lt;a href= "https://icsstrive.com"&gt;https://icsstrive.com&lt;/a&gt;&lt;/p&gt; &lt;/li&gt; &lt;li dir="ltr" aria-level="1"&gt; &lt;p dir="ltr" role="presentation"&gt;S4 Events YouTube Channel: &lt;a href="https://youtube.com/s4events"&gt;https://youtube.com/s4events&lt;/a&gt;&lt;/p&gt; &lt;/li&gt; &lt;/ul&gt;</description>

Waterfall Security Solutions and ICSSTRIVE put out an annual threat report that Dale Peterson believes is the best in OT. Why? It only includes incidents that had physical consequences on systems monitored and controlled by OT.  Dale and Andrew...

2024 Threat Report – OT Cyber Attacks with Physical Consequences

Patrick Miller has OT cybersecurity experience as an asset owner, PacificCorp. As a regulator and one of the first NERC CIP auditors with WECC. As a community organizer creating and leading EnergySec and the BeerISAC. And as an entrepreneur creating and leading a number of consulting practices. He is currently the Founder of Ampyx Cyber.   In this episode Patrick and Dale discuss: <ul> <li dir="ltr" aria-level="1"> Why Patrick changed the company name and selected Talinn as the location for the new European office. </li> <li dir="ltr" aria-level="1"> The major differences in approaches to OT cybersecurity and risk management between Europe and the US. (more than just regulatory differences) </li> <li dir="ltr" aria-level="1"> What has the EU learned or improved on regulation from NERC CIP. </li> <li dir="ltr" aria-level="1"> What is the current state of NERC CIP regulatory risk? Are the regulated entities understanding and meeting the standards’ requirements? </li> <li dir="ltr" aria-level="1"> The challenge of slow NERC CIP modifications, eg virtualization and cloud. </li> <li dir="ltr" aria-level="1"> Bad standard & good regulator v. good standard & bad regulator. </li> <li dir="ltr" aria-level="1"> Should water follow the NERC CIP model as recommended by AWWA? </li> <li dir="ltr" aria-level="1"> How Patrick is dealing with AI. </li> </ul>   Links <ul> <li dir="ltr" aria-level="1"> Ampyx Cyber: <a href= "https://ampyxcyber.com">https://ampyxcyber.com</a> </li> <li dir="ltr" aria-level="1"> Patrick’s Critical Assets Podcast: <a href= "https://amperesec.com/podcast">https://amperesec.com/podcast</a> </li> <li dir="ltr" aria-level="1"> Subscribe to Dale’s ICS Security Friday News & Notes: <a href= "https://friday.dale-peterson.com/signup">https://friday.dale-peterson.com/signup</a> </li> <li dir="ltr" aria-level="1"> Advertise on Unsolicited Response: <a href= "https://dale-peterson.com/advertising/">https://dale-peterson.com/advertising/</a>  </li> </ul>

<description>&lt;p dir="ltr"&gt;Patrick Miller has OT cybersecurity experience as an asset owner, PacificCorp. As a regulator and one of the first NERC CIP auditors with WECC. As a community organizer creating and leading EnergySec and the BeerISAC. And as an entrepreneur creating and leading a number of consulting practices. He is currently the Founder of Ampyx Cyber.&lt;/p&gt; &lt;p&gt;&lt;strong&gt; &lt;/strong&gt;&lt;/p&gt; &lt;p dir="ltr"&gt;In this episode Patrick and Dale discuss:&lt;/p&gt; &lt;ul&gt; &lt;li dir="ltr" aria-level="1"&gt; &lt;p dir="ltr" role="presentation"&gt;Why Patrick changed the company name and selected Talinn as the location for the new European office.&lt;/p&gt; &lt;/li&gt; &lt;li dir="ltr" aria-level="1"&gt; &lt;p dir="ltr" role="presentation"&gt;The major differences in approaches to OT cybersecurity and risk management between Europe and the US. (more than just regulatory differences)&lt;/p&gt; &lt;/li&gt; &lt;li dir="ltr" aria-level="1"&gt; &lt;p dir="ltr" role="presentation"&gt;What has the EU learned or improved on regulation from NERC CIP.&lt;/p&gt; &lt;/li&gt; &lt;li dir="ltr" aria-level="1"&gt; &lt;p dir="ltr" role="presentation"&gt;What is the current state of NERC CIP regulatory risk? Are the regulated entities understanding and meeting the standards’ requirements?&lt;/p&gt; &lt;/li&gt; &lt;li dir="ltr" aria-level="1"&gt; &lt;p dir="ltr" role="presentation"&gt;The challenge of slow NERC CIP modifications, eg virtualization and cloud.&lt;/p&gt; &lt;/li&gt; &lt;li dir="ltr" aria-level="1"&gt; &lt;p dir="ltr" role="presentation"&gt;Bad standard &amp; good regulator v. good standard &amp; bad regulator.&lt;/p&gt; &lt;/li&gt; &lt;li dir="ltr" aria-level="1"&gt; &lt;p dir="ltr" role="presentation"&gt;Should water follow the NERC CIP model as recommended by AWWA?&lt;/p&gt; &lt;/li&gt; &lt;li dir="ltr" aria-level="1"&gt; &lt;p dir="ltr" role="presentation"&gt;How Patrick is dealing with AI.&lt;/p&gt; &lt;/li&gt; &lt;/ul&gt; &lt;p&gt;&lt;strong&gt; &lt;/strong&gt;&lt;/p&gt; &lt;p dir="ltr"&gt;Links&lt;/p&gt; &lt;ul&gt; &lt;li dir="ltr" aria-level="1"&gt; &lt;p dir="ltr" role="presentation"&gt;Ampyx Cyber: &lt;a href= "https://ampyxcyber.com"&gt;https://ampyxcyber.com&lt;/a&gt;&lt;/p&gt; &lt;/li&gt; &lt;li dir="ltr" aria-level="1"&gt; &lt;p dir="ltr" role="presentation"&gt;Patrick’s Critical Assets Podcast: &lt;a href= "https://amperesec.com/podcast"&gt;https://amperesec.com/podcast&lt;/a&gt;&lt;/p&gt; &lt;/li&gt; &lt;li dir="ltr" aria-level="1"&gt; &lt;p dir="ltr" role="presentation"&gt;Subscribe to Dale’s ICS Security Friday News &amp; Notes: &lt;a href= "https://friday.dale-peterson.com/signup"&gt;https://friday.dale-peterson.com/signup&lt;/a&gt;&lt;/p&gt; &lt;/li&gt; &lt;li dir="ltr" aria-level="1"&gt; &lt;p dir="ltr" role="presentation"&gt;Advertise on Unsolicited Response: &lt;a href= "https://dale-peterson.com/advertising/"&gt;https://dale-peterson.com/advertising/&lt;/a&gt; &lt;/p&gt; &lt;/li&gt; &lt;/ul&gt; &lt;p&gt; &lt;/p&gt;</description>

Patrick Miller has OT cybersecurity experience as an asset owner, PacificCorp. As a regulator and one of the first NERC CIP auditors with WECC. As a community organizer creating and leading EnergySec and the BeerISAC. And as an entrepreneur creating...

State Of NERC CIP, European Update and OT Security Community

Book Interview: Introduction To SBOM And VEX

S4x24 Closing Panel

Emma Stewart joins Dale to discuss the 3 big OT & ICS security stories from the first quarter. They end by giving their win, fail and prediction for Q1.

<description>&lt;p&gt;Emma Stewart joins Dale to discuss the 3 big OT &amp; ICS security stories from the first quarter. They end by giving their win, fail and prediction for Q1.&lt;/p&gt;</description>

Emma Stewart joins Dale to discuss the 3 big OT & ICS security stories from the first quarter. They end by giving their win, fail and prediction for Q1.

Q1: ICS Security In Review

Dale Peterson interviews the innovators in ICS / SCADA cyber security as well as the top talent in related fields. It is the podcast for those who want more information similar to what is presented at the annual S4 event each January in Miami South Beach.

Unsolicited Response

Details

Recent Episodes