Critical infrastructure
Everything I've written on critical infrastructure, with the research pieces first. Each one ends with something you can do on Monday.
Dealing with one of these problems yourself? I work with organizations that need answers, not another slide deck. Let's talk.
What's in a five-angle short
Most subjects here are one page with five short sections, always in this order. Each has its own colour inside the article so you can jump to the one you need.
- 1Where I'd start: the first move I'd make, and the question I'd ask before spending anything.
- 2Where plans fail: where plans on this subject usually break, and the assumption I'd test first.
- 3Beyond the jargon: what the subject actually means once the vendor language is stripped out.
- 4What good looks like: the result that would tell you it worked, and the number I'd watch.
- 5The call leaders can't dodge: the decision leadership has to own, and what it needs on the table to make it.
-
How Can You Test a PLC Backup Without Connecting to the Live Process?
Test PLC backups on isolated equipment, verify firmware and retained state, and distinguish a successful restore from evidence for a safe process restart.
-
How Do You Safely Control and End OT Vendor Remote Access?
Authorize industrial vendor access for specific work, constrain the maintenance path, and verify that access ends without assuming the process is safe.
-
What Evidence Should You Require Before Approving an OT Security Change?
Evaluate OT security changes with operational requirements, representative tests, rollback limits and clear acceptance criteria before production deployment.
-
Which OT Cybersecurity Risks Should You Address First?
Prioritize OT cyber risks by process consequences, credible access paths and protective dependencies. Separate urgent exposure from safe change approval.
-
Energy resilience
I would not begin energy resilience by buying another platform or launching a large programme. I would find the boundary, the accountable owner, and one scen...
-
ICS asset visibility
I would not begin ICS asset visibility by buying another platform or launching a large programme. I would find the boundary, the accountable owner, and one s...
-
Industrial Cybersecurity: Don't Break the Plant to Secure It
In an office, an aggressive security control may annoy somebody or interrupt a meeting. In a plant, water system, or transport environment, the same control ...
-
Industrial patching
I would not begin industrial patching by buying another platform or launching a large programme. I would find the boundary, the accountable owner, and one sc...
-
Industrial remote access
I would not begin industrial remote access by buying another platform or launching a large programme. I would find the boundary, the accountable owner, and o...
-
Medical device security
I would not begin medical device security by buying another platform or launching a large programme. I would find the boundary, the accountable owner, and on...
-
OT exercises
I would not begin OT exercises by buying another platform or launching a large programme. I would find the boundary, the accountable owner, and one scenario ...
-
OT segmentation
I would not begin OT segmentation by buying another platform or launching a large programme. I would find the boundary, the accountable owner, and one scenar...
-
SCADA incident response
I would not begin SCADA incident response by buying another platform or launching a large programme. I would find the boundary, the accountable owner, and on...
-
Safety and security
I would not begin safety and security by buying another platform or launching a large programme. I would find the boundary, the accountable owner, and one sc...
-
The vendor's remote access to your plant
Ask a plant manager who can connect into the control network from outside and you'll usually get a confident answer. Ask for the list and it takes a week. Th...
-
Transportation systems
I would not begin transportation systems by buying another platform or launching a large programme. I would find the boundary, the accountable owner, and one...
Nothing matches. Try another word, or ask me directly.