j.d.christopher

stepdad & husband | @dragosinc cyber risk director | STEM do-gooder | @SANSInstitute instructor | fmr. CTO, researcher, & regulator on ICS security | engineer

[j.d.christopher @jdchristopher]

7 Things Every Kid Needs to Hear:

1. I Love You

2. I’m Proud of You

3. I’m Sorry

4. I Forgive You

5. I’m Listening

6. Vulnerability management is only one aspect of cyber risk, which is a complex function including impacts and threats.

7. You’ve Got What It Takes

[Energy Impact Partners @EnergyImpact_]

Coming up: Panel discussion with EIP's @jdchristopher at the DOE (@ENERGY) Energy Transition Summit, discussing future clean energy applications for the cloud and the technical, regulatory, standards, and/or best practices to ensure secure cloud adoption. #energytransition

[j.d.christopher @jdchristopher]

@jfslowik

[Energy Impact Partners @EnergyImpact_]

A warm welcome to @jdchristopher! You’re going to be a valuable asset to our company, and we can’t wait to see all that you accomplish.

[j.d.christopher @jdchristopher]

…what if ICS/OT security professionals got an annual “wrapped” summary for 2023 like Spotify provides?

Industrial cybersecurity sometimes feels like an uphill battle, but I promise you— we are constantly improving and doing better.

What metrics would be in your 2023 wrapped?

[j.d.christopher @jdchristopher]

At #GridSecCon2023? Be sure to check out the @SANSICS booth! Both @cutaway & I are here to talk about our courses, grid security, & the future of ICS workforce development.

Also be sure to check out the SANS-Dragos CtF tonight & my session on “future-proofing” NERC CIP tomorrow!

[j.d.christopher @jdchristopher]

In 2013, I was the federal energy sector lead for the NIST Cybersecurity Framework, which included a robust discussion on cybersecurity incentives.

Ten years later, the landscape has shifted significantly, but it still comes down to insurance:
https://t.co/vLNkb5iXAI

[j.d.christopher @jdchristopher]

This could get fun: https://t.co/dCB0eRzIQo

[j.d.christopher @jdchristopher]

Sorry, had to be done…

[Patrick C Miller @PatrickCMiller]

Understanding metrics to measure SOC effectiveness https://t.co/mKuzk9LXf3

[j.d.christopher @jdchristopher]

The evolving role of industrial CISOs is something @deancybersec and I discuss in the @SANSInstitute #ICS418 course. Happy to get a chance to explore it more in this week's #ControlLoop podcast!

[CyberWire Daily, by N2K @thecyberwire]

Need your #OTcybersecurity news update? #ControlLoop has it. Hear guest @jdchristopher, @DragosInc's Dir of #CyberRisk, discuss #CISO evolution. #LearningLab: @DragosInc's Seth Lacy & Mark Urban on industrial cyber #threatintel & collective intelligence. https://t.co/tQoMCbHK5K

[j.d.christopher @jdchristopher]

I don’t post much any more, but want to plug my @SANSICS research project on ICS/OT visibility. Looking for some input on industrial orgs with SOC capabilities (both IT and OT).

Provide insights, help the community, & maybe win a $250 Amazon gift card!

https://t.co/DxpQ610F77

[Shawnee @ShawneeSays]

I know we’re saying “farewell”, but the chemistry between @theJumpHQ (Jay especially) and Frances Cone has me DYING for more.

[SANS ICS @SANSICS]

🗞️ SANS #CyberSecurity Blog

📈 How to Mature ICS Security with #Metrics

@jdchristopher breaks down the Basic #ICS/ #OT Security Metric Implementation Process.

📕 Read Blog In Full: https://t.co/Va7A80MqT6

[j.d.christopher @jdchristopher]

@brysonbort I actually non-ironically use the "yes, and..." technique in every talk.

Just need to figure out how to better use "I like my AI/ML like I like my coffee... sealed in a dark container before being chopped up."

It doesn't always hit right with the audience..

[j.d.christopher @jdchristopher]

@brysonbort The best presentations are ad hoc and usually involve tap dancing. Somebody missed out there.

[j.d.christopher @jdchristopher]

You'll want to check this one out-- expect some great discussion around measuring OT cyber risk, some memes, and more than a few actionable tools that you can immediately apply. What more could you ask for?

[Jim Gilsinn @JimGilsinn]

Attending the @APIGlobal Cybersecurity Conference this week? Come see @mplorbert and I give our talk called "The Susceptibility Among Us" on industrial cyber risk management on Nov. 8. @DragosInc #ICS #OT #risk

[j.d.christopher @jdchristopher]

@brysonbort @workentin @ImmortanJo3 @kodefupanda …If ever a sector needed a dedicated ISAC.

I’d totally go to a conference featuring “Use Cases of Cupcake Toppers 🧁“

[j.d.christopher @jdchristopher]

Curious about how to measure the effectiveness of your ICS security program? Check out my latest @SANSInstitute blog on what to measure, how, and what your team should look like:

[SANS ICS @SANSICS]

🗞️ SANS #CyberSecurity Blog

📈 How to Mature ICS Security with Metrics.
“If you’re not measuring, you’re just practicing.”

@jdchristopher explains the many reasons why #ICS Security Leaders should implement a metrics program

Read Full Blog: https://t.co/Va7A80MqT6

[Dragos, Inc. @DragosInc]

There will be a great lineup of Dragos presenters at the 17th Annual @APIenergy Cybersecurity Conference for the #oilandgas industry in The Woodlands, TX, on November 8-9. Mark your calendars! Learn more: https://t.co/puMp2s4NKI. #ICSsecurity

[j.d.christopher @jdchristopher]

@seclectech @bryansowen @RobertMLee “Ungrounded GRC” == theoretical physics for ICS security