Security Weekly
Enterprise Security WeeklySubscribe
Distributed Workforce, Threat Management

Florida Water Treatment Facility Hack, and the Convergence of OT & IT – Damon Small – ESW #227

What lessons can others still learn from the attack on the Florida water treatment facility? How does this incident shine a light on cybersecurity risks associated with the convergence of OT and IT? And what can be done to mitigate these risks?

Segment Resources:
https://newsroom.nccgroup.com/news/insight-florida-citys-water-supply-attack-420952 https://www.cnn.com/2021/02/13/us/florida-hack-remote-access/index.html

Full episode and show notes

Announcements

  • Don't miss any of your favorite Security Weekly content! Visit https://securityweekly.com/subscribe to subscribe to any of our podcast feeds and have all new episodes downloaded right to your phone! You can also join our mailing list, Discord server, and follow us on social media & our streaming platforms!

  • We're always looking for great guests for all of the Security Weekly shows! Submit your suggestions by visiting https://securityweekly.com/guests and completing the form!

Guest

Damon Small
Technical Director of Security Consulting at NCC Group

Damon Small, MSc.IA, CISSP, is Technical Director of Security Consulting at NCC Group North America (https://www.nccgroup.com/us/), where he consults with global leaders in critical infrastructure defense with specialty in oil and gas, aerospace and healthcare. He’s a founding member of the Operational Technology Cyber Security Alliance (https://otcsalliance.org/wp-content/uploads/2019/10/Introduction-to-the-OTCSA.pdf) and has deep expertise in operational technology.

Hosts

Principal Researcher at The Defenders Initiative
Principal Security Evangelist at Eclypsium
VP Traceable.ai, Cyber Angel Investor and Advisor at 90 Degree Ventures

Related

Operational Technology (OT) and the Art of War – Glenn Kapetansky – CSP #168

Operational Technology (OT) security is concerned with protecting embedded, purpose-built technologies enabling our industrial processes. You also may have heard “adjacent” buzzwords like Internet of Things (IOT) and Fog (like “cloud” but close to the ground). OT security has significant challenges in terms of cost/size/weight, capability, ability ...
Why cyber hygiene requires curious talent – Clea Ostendorf – ESW #355

Many years ago, I fielded a survey focused on the culture of cybersecurity. One of the questions asked what initially drew folks to cybersecurity as a career. The most common response was a deep sense of curiosity. Throughout my career, I noticed another major factor in folks that brought a lot of value to security teams: diversity. Diversity of ...