Unsolicited Response Podcast

Calculating OT Cyber Risk With Ilan Barda of Radiflow

Oct 13, 2021

This episode dives deep into the risk score methodology of Radiflow's Ciara product. It attempts to use interview, asset inventory, and simulation to identify a risk score for a zone or site. It also then uses simulation to determine what security controls would most improve the risk score / reduce risk. Obviously this...

Supply Chain Cybersecurity: Calamity or Shoulder Shrug II

Oct 12, 2021

My weekly article. The cybersecurity team needs to be careful about overselling the supply chain cybersecurity risk in an environment where real, large supply chain disruptions are occurring.

My article originally published on 12 October 2021.

September: ICS Security Month In Review

Oct 6, 2021

Joel Langill joins Dale in this Live episode. The stories:

- CISA's Performance Goals and Objectives for Critical Infrastructure ICS (and a bit on TSA's 2nd Security Directive)

- Moody's moving from Visible Risk to Bitsight for Cyber Security Ratings, and the difficulty to create and possible use of Cyber Security...

(You Should Have) Zero Trust In PLC's

Oct 5, 2021

In my weekly article published on 5 Oct 2021, I muse on how hard it is to discuss the zero trust concept in OT when there seems to be no effort to address the Total Trust or Trust All nature of PLC's, Controllers and other Level 1 devices.

ICS Security Career Q&A

Sep 29, 2021

Mark Hyman, a recruiter with the Verge Management Group who focuses on OT / ICS Security candidates, joined Dale Peterson on the Unsolicited Response Show to answer listeners questions on starting and growing an ICS Security Career.

There were three main areas of questioning:

1) Getting Into The ICS Security Field

2)...