IT can't chastise ICS/OT for making the same mistakes that IT commonly makes itself.

TaVonne H (LinkedIn):

Firewalls aren't just for the parameter.

I should really be a ICS/OT software tester! I'm so skilled at crashing ICS/OT software. Wait, is this just bad software?

Training goals should be in the bag before the end of the year.

We are working towards being a zero Cisco shop.

My biggest hack for dealing with my busy work schedule and ADHD: I started planning out my work week in my Outlook calendar. Operations still fucks it up, but at least there is an attempt.

Just because it works in the lab, does not mean it will work in the field.

NYC UN cell service: Secret Service says it dismantled threat share.google/dFjHUEbOeXia...

Your employer checking your LinkedIn profile:

ICS/OT vendors shouldn't be charging extra for secure protocols.

Firewall upgrade at telco linked to deaths in Australia • The Register share.google/oy7cPIuFte8S...

Just to remind everyone. Even large organizations get it wrong sometimes.

Most of the time I rather ask for forgiveness than ask for permission. Except when I'm dealing with something that could cause loss of visibility for an operator, which I always ask for permission before doing.

How many cyber attacks does it take for organizations to realize that the current push to digitize OT is leaving them open to disruption?

Watching IT give someone a new machine with Windows 10.

Department of National Defence using U.S. cloud services - National | Globalnews.ca share.google/R49b1JJJzU6Z...

Tom Lawrence (LinkedIn):

Trust is on the critical path.

Nobody wants to see the OSI model in your presentation.

I really hate having to test code on hardware.

A big threat to ICS/OT. The bad safety system configuration and testing Bob did over 15 years ago. It could cost the organization more than some ransomware attack.

If it impacts OT it's OT. It's that simple.

OTBase (LinkedIn):

My control cabinets are alarmed. Are yours?

Tenable Confirms Data Breach - Hackers Accessed Customers Contact Details share.google/dimsIvRsZr7a...

If the firmware update could not blow away my self-signed certificates that would be great.

The best time to update ICS/OT firmware is during shutdown. Plan on updating everything to a known good version during the window.

Microsoft says Azure affected after cables cut in the Red Sea | TechCrunch share.google/6sDO9M58oBmC...

Your ICS/OT firewall shouldn't have an outbound any-any rule. Your firewall should be heavily filtering both incoming and outgoing traffic.

Tom Lawrence (LinkedIn):