60 Minutes on Cyber Security Risks

I attended the Nuclear Information Technology Strategic Leadership (NITSL) conference last week, which featured some very interesting discussions on cyber security.

Wiz calls for a policy-and-technology blueprint to secure critical infrastructure as power, water and healthcare systems move to the cloud, eroding traditional defenses against advanced adversaries.

NetSPI consultant Michelle Eggers recaps the SANS ICS Security Summit 2023, from the beta SANS ICS 310 course to why ransomware tops ICS threats and how OT security differs from IT.

Lessons from the Oldsmar water facility hack, where attackers used TeamViewer to alter chemical levels: underfunded US water systems rely on remote access and need urgent ICS hardening.

Former CIA CISO Robert Bigman recounts building the agency's CISO role from scratch, why governance and policy work were core duties, and how to recover from mistakes in high-stakes environments.

Kicks off a series on building an application security program, emphasizing policies, standards, and procedures as the foundation before tooling, with placement guidance in existing portfolios.