Secure ICS OT :mastodon:

Secure_ICS_OT@infosec.exchange

Unsolicited posts from an ICS/OT Professional with both GICSP and ISA 62443 Expert. GIAC Advisory and ISA member.Twitter: <a href="https://infosec.exchange/@Secure_ICS_OT" class="u-url mention">@Secure_ICS_OT</a>Bluesky: @secure-ics-ot.bsky.social<a href="https://infosec.exchange/tags/ICS" class="mention hashtag" rel="tag">#ICS</a> <a href="https://infosec.exchange/tags/OT" class="mention hashtag" rel="tag">#OT</a> <a href="https://infosec.exchange/tags/GICSP" class="mention hashtag" rel="tag">#GICSP</a> <a href="https://infosec.exchange/tags/IEC62443" class="mention hashtag" rel="tag">#IEC62443</a>

Posts

Post #4501899
The problem with vendor work is they bring their personal "solution". You then end up with a patch work of various "solutions" that creates more surface area and more stuff to manage.
Post #4450687
So back in the day I had to defend having a router segregating the ICS/OT from the IT network. Some time later the IT department accidentally exposed the routers WAN to the internet. I discovered this because I was able to access it without using their VPN first.
Post #4404866
Post #4400851
Post #4400348
Once again Just because you can Doesn't mean you should
Post #4399634
One of the biggest threats to ICS/OT. "IT/OT convergence" IYKYK
Post #4396992
Post #4380303
Microsoft in the ICS/OT:
Post #4364556
You need to educate yourself on ICS/OT security. Before someone that is not educated on ICS/OT security takes you in the wrong fucking direction.
Post #4209891
Post #4208420
Post #4201295
Wasn't long ago IT and Cisco was trying to sell me on VXLAN. Most definitely don't need VXLAN in my environment. I'm not even sure the corporate needs VXLAN. VXLAN is for datacenters.
Post #4176450
Post #4170168
Post #4169067
Post #4167853
Planning your work week in ICS/OT:
Post #4146387
Visiting the guys on site:
Post #4146349
If you don't know about virustotal, you should totally check it out. Great tool for scanning files. Just don't be stupid and upload sensitive configuration files or documents. https://www.virustotal.com/gui/home/upload
Post #4144256
If you're an ICS/OT engineer you should learn how to configure firewalls. It is easier than configuring a PLC so you should pick it up pretty quick.
Post #4142749
Post #4140057
Post #4137003
This shouldn't have to be said but 1. Nobody should be able to browse the internet from the ICS/OT environment. 2. Nobody should be able to send or receive e-mails in the ICS/OT environment.
Post #4128094
Amazon's package tracking updates are so good they can see into the future.
Post #4124200
The current top firewall alert is from my few Windows machines trying to check on updates.
Post #4097658
Another great read for ICS/OT security is the joint government document: "Principles of Operational Technology Cyber Security" https://www.cyber.gov.au/sites/default/files/2026-06/Principles%20of%20operational%20technology%20cyber%20security%20%28October%202024%29.pdf
Post #4089548
Please pray for me this morning while I struggle with the desire to reply all, and correct the "project manager".
Post #4078749
Post #4053350
If you have ICS/OT firewall alarms going to your inbox. We can be friends.
Post #4052680
I have taken a break from training this year and have just been hitting the books. The best book I have read this year, hands down has been Engineering-Grade OT Security (A manager's guide) by Andrew Ginter. It stands apart from everything else and you should read it. It's only $15CND on Amazon!
Post #4048023
With the MTBF so high on most equipment, having redundancy generally seems like a complete waste of money and only makes things more complicated than they need to be. I'd rather have cold spares on hand, save money and reduce system complexity.