#InfosecurityEurope2022: The Power of Narrative in Highlighting OT System Risks

In the course of this Geek Street roundtable discussion on the second day of InfoSecurity Europe 2022, Nigel Stanley, director of cybersecurity at Jacobs, and other security leaders talked over how to regulate operational technology (OT) system dangers, create incident management procedures and make use of risk transfer remedies to better defend critical infrastructure sectors.

Stanley started with a standard definition of what OT is composed of in observe, which was articulated as “computers that handle or keep track of actual physical matters.” This was followed by a glance into the present-day tendencies driving cyber-dangers. Stanley believes that companies are dealing with a “perfect storm,” consisting of 3 items: an maximize in attack surface spot, increasingly “motivated, sophisticated and progressively destructive” adversaries who are likely soon after OT devices and various corporations that have minor visibility into their OT risk nor a enough understanding of their OT belongings.

The dialogue then focused on the affect of OT on business risk, with Stanley stressing the worth of building OT networks that interface correctly with IT and outlining the want for excellent network segmentation and a DMZ. The emphasis of the discussion then shifted to the need for efficient recruitment of personnel with applicable skills, a complicated endeavor, especially recruiting people who have an intuitive comprehension of equally the OT and IT worlds.

Toward the close of the session, the roundtable centered around the major issues with measuring OT risk and the need to have to deal with this holistically, with things to consider of how greatest to merge quantitative and qualitative methodologies to give a complete photo when evaluating and being familiar with OT risk.

The key issue of arrangement in the session arrived when discussing most effective methods for increasing recognition of OT risk, with the audience agreeing that organizations will need an “inclusive mechanism of comprehending OT” from the “bottom-up.” The primary mechanism suggested was the “power of story,” which could enable articulate the entire extent of OT program risks in an powerful and captivating way. The home believed this could support noticeably in educating staff and enterprises and that this solution could also be strengthened by including popular OT security incidents, illuminating the need to have for a sturdy OT cyber incident response system through narrative to prevent reputational hurt, production reduction, share benefit loss and any affect on the regional local community. 

Some sections of this article are sourced from:
www.infosecurity-magazine.com