This is a must read for anyone interested in devices, industrial control systems (ICS), and the like. My colleague, George Shea, and Randi Tomasek (cybersecurity operations analyst for the electrical industry) do an excellent job of acknowledging the required separation of IT and OT while recognizing the touch points.
Personally, I love the recognition that breaches happen and the recognition that we cannot rely on protection alone. We must detect early, limit the blast radius, and recover quickly.
Not sure if you are familiar with FDD. FDD is a think tank focused on national security and foreign policy. They are at the center of the policy, legislation, and regulation we are seeing in the areas of Cybersecurity, Artificial Intelligence (AI), and Critical Infrastructure Protection.
https://www.linkedin.com/posts/alex-sharpe-3rd_sign-up-linkedin-activity-7089588282564456448-_C8l?utm_source=share&utm_medium=member_desktop
------------------------------
Alex Sharpe
Principal
Sharpe42
[email protected]Co-Chair Philosophy & Guiding Principles Working Group
Co-Chair Organizational Strategy & Governance Working Group
------------------------------