How should we be measuring the cybersecurity posture of the U.S.: activity, success, achievement? It’s hard to say.
When people talk about secure by design, do they really mean a security floor. Dale Peterson discusses a recent talk on the topic from S4.
Understanding the value of government moves toward secure default configuration, insecure by design and secure by design.
When it comes to cyberattacks on operational technology, should reputational risk be the highest consequence category?
The U.S. government role in reducing OT cyber risk is bad in the short term, but it could be beneficial in the long term.
CISA’s recent push for security by design and security by default could be a long-fought win for the OT community.
The National Cybersecurity Strategy has no approaches for how critical infrastructure will continue to function after a cyber incident.
Looking to sell a security product to the OT market? It should require no changes to the ICS and have no impact on physical processes.
The Cybersecurity and Infrastructure Security Agency (CISA) has always made recommendations along the lines of keeping the attackers out, performing cyber hygiene and detecting attacks, but they have rarely recommended the monitoring and controlling of […]
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) put out a Shields Up advisory in conjunction with Russia’s invasion of Ukraine. It’s probably necessary, as they would have been disparaged if they didn’t, and not […]
