After a lot of thought and consideration I decided to join the military again, this time in the Army National Guard. The Guard provides me the appropriate flexibility to be able to continue my roles as CEO of Dragos and SANS ICS Practice Director while getting to serve my country and community once again in…
Hi all, Well candidly here’s a blog I hate to have to write but I appreciate the show of support from the cybersecurity community; in all the social media posts/Twitter/etc. any negative comment was outweighed 20:1 by comments noting my actions didn’t sound wrong at all. On a very difficult day I just want to…
Tomorrow (Jan 16th 2022) I’ll be speaking at the free virtual conference PancakesCon 3 on “Structuring Intelligence Assessments and Gin Cocktails.” The conference’s format is to introduce material to students or new folks to a topic in the first half of the presentation and in the second half do something completely not work related, my second…
This is a blog I originally published on the World Economic Forum’s website here. ___________________________________________________________ • Safety engineering practices can be readily applied to cybersecurity. • Developing safety ‘scenarios’ helps build a more comprehensive response to cyberthreats. • Scenarios are also useful for communicating cybersecurity best practice to professionals outside the field. A cybersecurity strategy…
“ICS cybersecurity? What’s that? Is it worth doing? Can it be done? No it cannot, I heard…Even if you did the market isn’t large enough to support it long term” Dragos, Inc. announced today its C-Series financing which is the largest investment ever into an industrial control system (ICS) / operational technology (OT) cybersecurity company. The investment…
In this blog post I want to explain what the Grid Resilience for National Security (GRNS) subcommittee is and some thoughts that I have on the role of the committee in our broader electric system community. I will try to demystify and add context to what these types of committees are as well. The Department…
This is a blog I’ve wanted to write for a long time but every time I sat down to do it I found it difficult to capture the nuance of my intent here and also difficult to keep it from turning into a 50k word thesis paper. However, I keep getting the question “Should governments…
On April 30th, 2020 there will be an entirely free, really exciting, industrial control system (ICS) capture the flag (CTF) hosted by Dragos, Inc. and the SANS Institute. Following that there will be an entirely free day long virtual conference with speakers from SANS and Dragos, Inc. covering topics from building your own ICS range,…