ICS Archives - Secudea bv

IEC62443, NIS2 and security testing – a happy marriage?

Secudea — Sat, 15 Feb 2025 10:57:58 +0000

When the NIS2 EU Directive came into effect, I wondered what the implications would be for security testing in industrial environments. After all, a large part of the NIS2 directive focuses on supply chain and...

The post IEC62443, NIS2 and security testing – a happy marriage? appeared first on Secudea bv.

Training – Hardening for ICS environments

Secudea — Tue, 30 Apr 2024 05:48:52 +0000

Hardening is one of the many ways to protect your systems and environment from attack. Be it remote or insider threats that you are protecting against. However, with the increasing connectivity between different IT and...

The post Training – Hardening for ICS environments appeared first on Secudea bv.

Industrial Security controls

Secudea — Wed, 22 Nov 2023 18:12:24 +0000

While preparing for a talk on Industrial Security Controls earlier this year for students of an Executive Master in CyberSecurity, I reflected on these controls and their presence within the different OT environments I had...

The post Industrial Security controls appeared first on Secudea bv.

Cybersecurity testing for ICS – pitfalls and wins

Secudea — Mon, 08 Aug 2022 22:49:43 +0000

This is a (long overdue) followup post of the talk I gave at the SANS ICS Summit in 2021 – a recording of this talk can be found on youtube: https://www.youtube.com/watch?v=Qpl8eI8Tn0s I suggest you to...

The post Cybersecurity testing for ICS – pitfalls and wins appeared first on Secudea bv.

Resources to get into #ICS security

Secudea — Mon, 08 Aug 2022 21:28:34 +0000

Recently I received some questions on what resources I would recommend within the ICS security space to learn more about this. So the question was more specifically about discussion groups, courses, books, certificates and so...

The post Resources to get into #ICS security appeared first on Secudea bv.

Security testing for ICS Owners – Back to Basics – recording

Secudea — Mon, 10 Feb 2020 13:09:34 +0000

The video recording of the https://secudea.be/2019/10/28/security-testing-for-ics-owners-back-to-basics/ presentation that I gave at CS3STHLM last year can be found on Youtube: https://www.youtube.com/watch?v=M8xjylA9rtI Enjoy watching and when performing security tests within ICS environments, don’t forget to look at...

The post Security testing for ICS Owners – Back to Basics – recording appeared first on Secudea bv.

Security testing for ICS Owners – Back to Basics …

Secudea — Mon, 28 Oct 2019 14:55:09 +0000

Why “Back to basics” regarding security testing? Well… during several previous security assessments that I have performed, I have run into a lot of the issues mentioned within the presentation I have given on this...

The post Security testing for ICS Owners – Back to Basics … appeared first on Secudea bv.

Operator Jail breakout

Secudea — Mon, 28 Oct 2019 11:49:06 +0000

In 2018, I gave a presentation at the CS3STHLM conference together with Frank Lycops on Operator Jail breakouts. Operator Jails are meant to prevent process operators from having access to the underlying operating system (OS),...

The post Operator Jail breakout appeared first on Secudea bv.

Upcoming talk @CS3STHLM – Operator Jail Breakouts

Secudea — Thu, 06 Sep 2018 12:53:37 +0000

In a few weeks I’ll be giving a talk together with Frank Lycops ( https://asvalis.com) on the hidden dangers of Operator Jail breakouts, how to test these issues, and how to prevent them. The talk will...

The post Upcoming talk @CS3STHLM – Operator Jail Breakouts appeared first on Secudea bv.

Importance of data integrity for safety in industrial environments

Secudea — Mon, 14 Aug 2017 09:14:51 +0000

It is well known that the most important factor within the process industry is the availability of the systems and environment. The plant must be running at all times. That’s why most security improvement efforts...

The post Importance of data integrity for safety in industrial environments appeared first on Secudea bv.