talk-data.com talk-data.com

Event

(CS)²AI Replay: Translating Maturity Level Assessment Into OT-ICS Environment

2023-07-05 – 2023-07-05 Meetup Visit website ↗

Activities tracked

1

Please note: Registration at this link is required to attend. https://attendee.gotowebinar.com/register/131094103726512985?source=07052023meetupeventhttps://attendee.gotowebinar.com/register/131094103726512985?source=07052023meetupevent

Very few organizations have the opportunity to create a cybersecurity program from the ground up. Often, cybersecurity programs in the OT/ICS environment start out as rough translations of the IT program into the OT/ICS environment or initiatives resulting from an audit or incident. Assessing the as-is state of an organization’s security posture is usually a combination of a maturity level assessment of their cybersecurity program along with a technical assessment of their implementation. While there have been many discussions about how to conduct a technical assessment in OT/ICS, not much has been discussed about how to conduct a maturity level assessment. Many of the existing maturity level assessment methodologies are IT-focused, developer-focused, or industry-specific, which has made it difficult to use them directly in the broader OT/ICS environment. A way to translate those into the full scope of the OT/ICS world is needed that still has a foundation in the existing methodologies.

Speaker: Jim Gilsinn is Principal ICS Consultant at Dragos and Associate Professor at George Mason University. For over 15 years, he's been working to develop better ways to measure industrial Ethernet performance and to determine how that performance affects the overall system robustness and reliability. He has also been involved in developing standards for ICS cyber security through ISA99 (http://isa99.isa.org). Jim is currently the co-chair of the ISA99 committee and ISA99 working group 2 developing end-user cyber security program requirements. Since 2012, he's been putting both of these skillsets into practice as a consultant, helping to assess, design, and validate ICS in various industries.

Please note: Registration at this link is required to attend. https://attendee.gotowebinar.com/register/131094103726512985?source=07052023meetupeventhttps://attendee.gotowebinar.com/register/131094103726512985?source=07052023meetupevent

--------------------------------------------------------------------------------------------- ## All past seminars and symposiums are available to paid CS2AI.ORG members. Check out the Resources area of our website in the Members Portal https://www.cs2ai.org/

## Certificates for Professional Development/Continuing Education Units (PDUs/CEUs) are available for all registered individuals who attend at least one hour of the event.

## If you're interested in speaking at a future (CS)2AI event\, having your organization become a Strategic Alliance Partner\, or engaging in any of the other ways available\, please contact us on our https://www.cs2ai.org/get-involved

## Please note that (CS)2AI ONLINE events are provided free of charge as educational career development content through the support of our paid members and the generous contributions of our corporate Strategic Alliance Partners. Contact information used in registering for our directly supported seminars may be shared with sponsors funding those specific events. Unless noted on the Gotowebinar registration page, all events are open for direct funding support.

Sessions & talks

Showing 1–1 of 1 · Newest first

Search within this event →

Assessing maturity level and technical assessments for OT/ICS cybersecurity

2023-07-05
talk
Jim Gilsinn (Dragos)

Discussion on combining a maturity-level assessment of an organization's cybersecurity program with a technical assessment in OT/ICS, and translating IT-focused maturity methodologies to OT/ICS environments.