Bringing Zero Trust to Industrial Control Systems

Explore a comprehensive 44-minute conference talk from RSA Conference on implementing Zero Trust principles in Industrial Control Systems (ICS). Learn about Zero Trust concepts, ICS vulnerabilities, and strategies to integrate these approaches for enhanced cybersecurity readiness. Delve into the history of ICS vulnerabilities, recent security advisories, and common weak points in industrial environments. Examine various paths to Zero Trust implementation, cyber process hazard analysis, and typical attack processes. Discover CISA recommendations for defense, top mitigation steps, and reasons behind the complexity of ICS security. Gain insights on overcoming organizational silos, integrating Managed Service Providers, and follow a step-by-step guide to securing industrial environments. This talk, presented by Bill Malik, VP of Infrastructure Strategies at Trend Micro, offers valuable knowledge for IT security and OT safety professionals seeking a unified approach to threat response and overall cybersecurity improvement.

RSAConference2022 San Francisco Digital June 6 - 9
ICS/CERT Advisories 2010 - 2021
Industrial Control Systems Vulnerabilities - History
Industrial Control Systems Vulnerabilities 2022 CISA Releases Security Advisories for Rockwell Automation Products
Worms, Old and New
Weak Points in the Industrial Environment
Attacks against Automation Software
What is Zero Trust?
Many Paths to Zero Trust
Cyber Process Hazard Analysis
Typical Attack Process and Tools
How to Defend: CISA Recommendations
ICS 410: SANS ICS/SCADA Security Essentials
Top Mitigation Steps - Claroty 1H21 Analysis
Why is ICS Security So Hard?
Organizational Silos Create Attack Surfaces
Integrate MSPs
A Step-by-Step Guide to Securing the Industrial Environment
RSAConference 2022