You Too Can Secure OT
summary
Step-by-step blueprint for securing OT: inventory devices with a combo of OT IDS with passive+active discovery (spanning, external sensors, edge protocol scans) to identify legacy PLC‑5s and 40‑year controllers, correlate firmware to CVEs, and prioritize by IEC‑62443 risk for safety/availability. Deploy segmentation via iDMZ, zone firewalls, MACsec/802.1x where supported, and device‑level auth using CIP Security (TLS/DTLS) and X.509 certificates. Use FactoryTalk/AD role‑based controls, OT backup (Asset Center), and integrate Cisco Cyber Vision, Dragos or Claroty for detection.
AI-written summary · about
chapters (6)
- 0:00Start
- 0:59Migrating Legacy Networks to a Segmentate Network
- 5:17Leveraging a Holistic Approach
- 14:33High Level Risk Assessment - Risk Matrix
- 16:49ICS Security Zone and Countermeasure Deployment
- 34:31OT Incident Response Retainers
related talks
50mHarmonizing IT and OT Security in the Era of Convergence
52mPanel: Industrial Systems In The Crosshairs: What It Really Takes To Defend OT
53mCXO Panel: OT & IoT Risk Management Strategy For CISOs
45mNavigating Third-Party Risk in OT Environments
39mTo Patch or Not to Patch OT— A Risk Management Decision
32mThere and Back Again: Discovering OT Devices Across Protocol Gateways
57mDon’t Forget the Little Guy: Vulnerability Management in Operational Technology
51mPreparing for and Defending OT Systems from Ransomware