Unsolicited Response Podcast

Sep 20, 2017

Eric and I had gone at in a series of blogs on whether he was a SCADA Apologist or SCADA Realist. I coined the term SCADA Apologist as someone who:

1. Is highly knowledgeable in ICS and ICS security, often a well recognized expert.
2. Knows the ICS systems, devices and protocols are highly insecure. They are insecure by...

Sep 7, 2017

Almost all discussion around the NERC CIP cybersecurity standards for the electric sector focus on compliance. What do the standards require? How will I be audited? What happens if I fail the audit? Lost in this discussion is the underlying purpose of the standards was to reduce the risk of a cyber incident causing...