Skip to main content
ISC2 Security Congress 2024 Main banner
 
Icon Legend
Additional Fee Required
Additional Fee Required
Pre-Registration Required
Pre-Registration Required
Online & Virtual
Online & Virtual
Onsite Only
Onsite Only
Earn CPE Credits
Earn CPE Credits
Livestreamed Session
Livestreamed Session
Included in Guest Pass
Included in Guest Pass
Invite Only
Invite Only
Session Recorded
Session Recorded
Student Experience
Student Experience
Back

On-Site and Virtual

Frameworks, Standards & Guidelines

Cyber-Physical Security of the OT Systems and Components That Perform Critical Processes

Tuesday, October 15, 2024
2:45pm – 3:45pm PT
Location: Milano V - VI
CPE Credits 1
Session Recorded Earn CPE Credits Livestreamed Session Online & Virtual
One of the biggest breaches in Las Vegas occurred via a casino owner's salt-water aquarium. One of the most critical vulnerabilities to military mission-critical facilities comprises HVAC and other smart-building control systems, not the classified systems residing in those buildings.

This panel will discuss how operational Technology (OT) cybersecurity strategies differ from those of traditional IT cyber defense. Key best practices and resources will be offered. Finally, an overview of regulated industries vs. those with recommended best practices (frameworks) will be presented. Some of these are:
~ Energy Sector: North American Energy Reliability Commission and Federal Energy Regulatory Commission, or NERC/FERC
~ Financial Sector: PCI DSS, SOX, GLBA
~ Healthcare: HIPPA, HITECH
~ DoD: UFC 04-010-06
~ Recent Additions: TSA, FRA, et al

Learning Objectives:

  • Explain the differing challenges and strategies between traditional IT and operational (OT) cybersecurity.
  • Understand the difference between regulated vs. "framework" industries and select cybersecurity controls for both.
  • Investigate expanding career opportunities presented by the exponential growth of smart buildings, industrial control systems, and the peripheral specialties emerging as a result.