Month: October 2021

  • 72 Hours and Counting: Preparing for and Responding to Critical Infrastructure Cyber Incidents

    ICS Cyber Security Conference Atlanta GA The Cyber Incident Reporting Act for Critical Infrastructure Act, which was enacted in March 2022, will require critical infrastructure organizations to report cyber incidents to the Cybersecurity and Infrastructure Security Agency (CISA) within 72 hours. This aggressive timeline will require companies to have enhanced identification, escalation, and investigation processes… Read more

  • Critical Infrastructure: Noise and Bias in our Security Programs

    Energysec Security & Compliance Summit The Internet (virtual) For the last four years Dragos as published annual trend reports of our observations from the field and the adversary. This talk puts the trends into a different perspective: what are our errors over the years as a community? Where are our biases? Understanding these help understand… Read more