AM-17-51 Cyber security for Operational Technology – Lessons Learned, from Super Majors to Independents

Description:

The news is full of cyber security stories, including a growing number that discuss operational technology and attacks against both legacy and emerging, advanced automation systems; the German steel mill explosion last December and the small dam in New York have carried headlines, spurring a lot of attention on cyber across automation. Many organizations have struggled with protecting these environments – the technologies are often relatively old, often using proprietary and sometimes obscure languages and protocols. Organizations have tried different approaches from the costly platform upgrade, to the technically-difficult approach of trying to apply their IT security patterns to their OT. We have delivered cyber services to OT leadership in numerous refining and manufacturing organizations, identifying 13 key practices for reducing cyber risk as well as assessing the effectiveness of multiple technology-enabled approaches to decrease the cost of reducing cyber risk. Our presentation will share our learnings about these key practices and the approaches that have enabled successful cyber risk reduction across our client base, including organizations spanning from Supermajors to independent facilities.