SCADADiva™

Would you like to debate ICS security topics with me? I'll save you time - you're wrong.

[SCADADiva™ @SCADADiva]

@RobertMLee @bryansowen I shoulda brought the hard hat...

[SCADADiva™ @SCADADiva]

@AlxRogan @pati_gallardo @akolsuoicauqol @jessfraz There’s more. Just let me know where to send them.

[SCADADiva™ @SCADADiva]

Ask if it's "NERC CIP Certified".

[bryan owen @bryansowen]

What line of inquiry is most useful on supply chain risk management questionnaires for ICS software?
Your favorites in comments are welcomed! #S4x20
https://t.co/H3Trtclutd

[SCADADiva™ @SCADADiva]

.@digitalbond #s4x19 unsolicited response
https://t.co/LyVLGPWRsv

[SCADADiva™ @SCADADiva]

.@SCADADiva will be there!

Also stepping outside the ICS/SCADA echo chamber next week for the giant expo in Santa Clara (IoT plus the kitchen sink). Expo tracks are complimentary.
https://t.co/qMHMlcd5Q8

[IEEE Smart Grid Cybersecurity Workshop @SmartGridCyber]

Early bird registration is ending soon. Have you registered yet? IEEE Smart Grid Cybersecurity Workshop #SmartGridCyberCon #SmartGrid #PowerGrid #Cybersecurity #SCADA #NERCCIP #Compliance #infosec #cyber #threatintel #criticalinfrastructure https://t.co/UY24k2KRXn

[SCADADiva™ @SCADADiva]

ICS/SCADAsec savvy workforce has reached critical mass in larger industrial organizations.

Smaller organizations face a chronic lack of resources and other challenges and need tailored advice...
@artconklin "Cybersecurity and Resilience on a Small Scale" < polite nudge to post

[SCADADiva™ @SCADADiva]

Blast from the past with Stuxnet proving 'insecure by design' is almost all that's needed...(once you have access). https://t.co/BuJbTr0AYb

[Kim Zetter @KimZetter]

Exclusive: How Secret Dutch Mole Aided U.S.-Israeli Stuxnet Cyber Attack on Iran. For yrs an enduring mystery has surrounded the Stuxnet attack: How did US/Israel get the malware onto computers at the highly secured uranium enrichment plant? Now we know. https://t.co/iZs0pvRr71

[SCADADiva™ @SCADADiva]

#energysec19 award recipients @ArtConklin @jdchristopher @montaelkins are automatic nominations for @SCADAdiva 2020
cc: @PatrickCMiller

[atlas 0f d00m @at1as]

One friend I'll be missing this weekend is @assante_michael . You fought the good fight, my friend, and are terribly missed. #rip

[SCADADiva™ @SCADADiva]

.@mtoecker analysis worth a browse as printer are commonplace on ICS and SCADA networks < #IoT is a misnomer in this context... printer connected to internet is a big red flag. https://t.co/zKFlH9CifX

[Mɪᴄʜᴀᴇʟ Tᴏᴇᴄᴋᴇʀ @mtoecker]

I had a chance to look at the IOT compromise mentioned in @dangoodin001 's article here: https://t.co/SLkPhkU9xV

[SCADADiva™ @SCADADiva]

@HonkHase @digitalbond +1 Not making the same errors

AND learn from what has worked well in other OT sectors

[SCADADiva™ @SCADADiva]

ICS and SCADAsec pros - has the community 'lost our way' by using IT security questionnaires and boilerplate for CIP supply chain risk management?

[SCADADiva™ @SCADADiva]

@erwinkooi CIP deserves laser focus on addressing ICS/SCADA operational consequences. Incorporate supply chain into CCE, Cyber PHA, EPRI TAM etc. #SecurityEngineering

[SCADADiva™ @SCADADiva]

@NathanSWallace @ian_infosec @ajohnsocyber @SmartGridCyber @SEL_News @ieee_pes_pscc https://t.co/QMllE5UQg9

[SCADADiva™ @SCADADiva]

ICS and SCADAsec pros - has the community 'lost our way' by using IT security questionnaires and boilerplate for CIP supply chain risk management?

[SCADADiva™ @SCADADiva]

Emphasis: "...industrial control system..."

[SCADADiva™ @SCADADiva]

"In Order No. 829, the Commission directed NERC to develop a new or modified Reliability Standard that addresses supply chain risk management for industrial control system hardware, software and computing and networking services associated with bulk electric system operations."

[SCADADiva™ @SCADADiva]

A message from Mike Assante https://t.co/FjBjao3R6z

[SCADADiva™ @SCADADiva]

Rule of 3: ransomware clobbering municipalities is making ICS and SCADASEC look good < does the private sector profit motive result in better risk decisions? #NeverPayTheRansom

[SCADADiva™ @SCADADiva]

@BlakeSobczak Informal poll .@BlakeSobczak nomination for SCADADIVA?

[SCADADiva™ @SCADADiva]

@langnergroup There you go with all that value and sustainability stuff!

Kidding aside it's also time to demand tech compatibility with reasonable security defaults. What good is security if it just gets turned off or ignored?