j.d.christopher

7 Things Every Kid Needs to Hear:

1. I Love You

2. I’m Proud of You

3. I’m Sorry

4. I Forgive You

5. I’m Listening

6. Vulnerability management is only one aspect of cyber risk, which is a complex function including impacts and threats.

7. You’ve Got What It Takes

…what if ICS/OT security professionals got an annual “wrapped” summary for 2023 like Spotify provides?

Industrial cybersecurity sometimes feels like an uphill battle, but I promise you— we are constantly improving and doing better.

What metrics would be in your 2023 wrapped?

At #GridSecCon2023? Be sure to check out the @SANSICS booth! Both @cutaway & I are here to talk about our courses, grid security, & the future of ICS workforce development.

Also be sure to check out the SANS-Dragos CtF tonight & my session on “future-proofing” NERC CIP tomorrow!

In 2013, I was the federal energy sector lead for the NIST Cybersecurity Framework, which included a robust discussion on cybersecurity incentives.

Ten years later, the landscape has shifted significantly, but it still comes down to insurance:
lawfaremedia.org/article/if-cyb…

This could get fun: schneier.com/blog/archives/…