Doug Wylie directs the SANS Industrials and Infrastructure business portfolio, helping companies fulfill business objectives to manage security risks and develop a security-effective workforce. He also serves on the SANS Technology Institute advisory board for the Industrial Control Systems Security graduate certificate program. His lengthy career spans a wide array of industries. He formerly served as Rockwell Automation’s global director of product security risk management, where he led its industrial cybersecurity and risk management program. Doug works around the world with companies, industry and standards bodies, and government entities to help safeguard converged IT-OT systems from contemporary cybersecurity threats. He holds the CISSP certification and numerous patents, as well as being an accomplished writer, speaker and presenter.
Practical Industrial Control System (ICS) Cybersecurity: IT and OT Have Converged – Discover and Defend Your Assets
This article will explore the issues that arise with the blending of IT and OT into combined cyber-physical systems where risks must be identified and managed. Specifically, it will help you address these questions:
– Why are digital asset inventories critical for IT/OT security risk management?
– How does knowledge about risks and vulnerabilities to IT/OT systems lead to better risk management?
– Can applying even a few of Center for Internet Security (CIS) Controls make a marked difference in the security posture of today’s control systems?
Equipped with answers to these questions, industrial and information system administrators can make more informed decisions about how to build stronger cybersecurity programs to protect IT/OT systems.