Update for 2022

Merry Christmas and a Happy New Year to everyone. Special shout out to those safeguarding civilization in all the many forms this takes. Being on call is not for everyone, is it ? 

My last update was a while back and I am clearly overdue for an update we go into 2023.

So lets cover some of my observations and personal highlights of 2022:

The continued success and growth of EnergiCERT (https://energicert.dk/) is certainly strengthening and benefiting the cyber security of  Danish critical infrastructure. Wonderful team of people, well managed and motivated. Yeah, I am biased ;)

Engarde Security continues to grow and be noticed; now has expanded and with an ics range (https://www.engardesecurity.com/icsrange)  Highly skilled people and the ics range is very well done.

Enjoyed an excellent ICS Security conference in Copenhagen in November:  (https://insightevents.dk/isc-cph/ ) But I still miss CS3 (https://cs3sthlm.se/) for many non technical reasons.

New Job - after a year of working as part of a wonderful managed team of highly skilled and personable security analysts at TDC NET, I was invited to be part of a highly skilled and competent IR team; this time with the focus on developing an IR for OT capability for Improsec (https://improsec.com/), a Danish consulting company. This has been interesting, fun and challenging so far. Very much looking forward to seeing what happens in 2023.

Thankfully, 2022, has been a goldmine of  excellent IR OT material; my favorites are :

Bryan Singer (Accenture) from S4 2022  (https://www.youtube.com/watch?v=luWLgQZngxI)

Leslie Carhart (Dragos) from RSA 2022 (https://www.youtube.com/watch?v=I9qPdFaboU8)

Two other excellent ICS videos you should watch are listed below:

Alexandrine Torrents S4x22 (https://www.youtube.com/watch?v=jzadpM7khWk&t=59s

Joel Langill and Brad Hegrat (https://www.youtube.com/watch?v=KfxPF9xjFrE&t=75s)

A huge shout out to Dale Petersen and the epic S4 event in Florida for releasing all the excellent presentations from the OT Security event  (https://www.youtube.com/watch?v=Lvg1wI8mYNI)

 Not to forget the Dragos team who have spent alot of time explaining what small and medium size OT companies should do to make themselves more resilient to the top threats to ICS security. 

https://www.dragos.com/resources/

No review of ICS Security and or Incident Response would be complete, in my world, with out mentioning two of the old timers who, year after year, continue to provide insightful comments, critical thinking and laser focus in their respective areas. 

For DFIR, I am speaking of Harlan Carvey (Mr RegRipper) and his decades of great posts can be found here : https://windowsir.blogspot.com/

For ICS ; I am referring to Mr. Stuxnet, or Mr OT Asset Management : https://www.youtube.com/results?search_query=ralph+langner+ted+talk

These are just some of the highlights of my 2022 work that I wanted to share. See you all in 2023 !


 


Comments

  1. Thanks for a great year of being you, Buddy

    ReplyDelete
    Replies
    1. Vice versa Martin. Technology is interesting, but the people I get to talk with are the most important and valuable to me.

      Delete

Post a Comment

Popular posts from this blog

Laid off and Looking for the next interesting job...