5th annual Industrial Control Cyber Security USA Summit: Full Schedule

Industrial 4.0 IOT/OT Security, Threat Detection and Mitigating Cyber Impact on Safety Systems

9:00am PDT

Welcome from the Cyber Senate Founder

A welcome from James Nesbitt, Founder, Cyber Senate

Tuesday September 18, 2018 9:00am - 9:10am PDT
Citizen Hotel 926 J Street Sacramento, California 95814

9:10am PDT

Introduction from our Chair

Speakers

Chris Blask

Director, Industrial Control Systems Security at Unisys, Chair US ICS ISAC, Unisys

Chris Blask has been involved in the industrial control system and information security industries for more than twenty five years.Mr. Blask’s career spans the breadth of the cybersecurity spectrum. He invented one of the first commercial firewall products, built a multi-billion... Read More →

Tuesday September 18, 2018 9:10am - 9:20am PDT
Citizen Hotel 926 J Street Sacramento, California 95814

9:20am PDT

Discussion Session: Advanced 3rd Party Risk Management – Developing Trust Across the Supply Chain

Recent APT attacks affecting multiple sectors through a common attack surface have driven home the lesson that no matter how well we think we have secured our perimeters, our information and systems may still be vulnerable to attack through 3rd party systems with weak security controls. Individually we may all be resilient, but collectively we are not. As critical infrastructure relies more heavily on interconnectivity to function efficiently our mindset needs to evolve to consider cyber-vulnerability not as an individual, but a collective problem. Managing 3rd party risk runs deeper than many imagine and opens fundamental questions around the way we go about the business of building security into our systems and products. We can’t have a 360 degree view of supply chain security, but how can we move towards developing the trust and mechanisms to better support a collaborative approach to security with our suppliers, partners and interrelated sectors?

Nothing can be achieved in isolation – What are the barriers to meaningful collaboration between regulators, asset owners, integrators and vendors on mitigating cyber risk?
What are we learning about VPN Filter attack and how does it illustrate supply chain vulnerability?
What do we need to change to achieve an adequate level of commitment from all stakeholders, and how are we reconciling different perspectives?
Where might we be doubling our efforts and how can we streamline?
How are we faring with efforts to collaborate across the supply chain to develop fit for purpose standards regimes, audit compliance check lists and conformity assessments?

Speakers

Nathan Faith

Cyber Security Manager, Exelon Nuclear Corporate Security

As a long-standing contributor in the public and private partnership toward cyber security programs, Nathan has a deep-rooted passion towards critical infrastructure protection. He has served as a contributing author on numerous industry documents and holds leadership positions on... Read More →

Andy Kling

Director of Cyber Security and Architecture, Schneider Electric

Andy has over thirty-five years of software development experience. He has worked in the Industrial Control Systems (ICS) development organization at Schneider Electric since 2001. Andy has ushered the Schneider Electric Process Automation Development team to the first in the world... Read More →

Zach Tudor

Associate Laboratory Director, National and Homeland Security, Idaho National Laboratory

Mr Tudor is responsible for Idaho National Laboratory’s (INL) National and Homeland Security (N&HS) mission. N&HS is a major center for national security technology development and demonstration, employing 500 scientists and engineers across $300M in programs at the lab. He is responsiblefor... Read More →

Dave Weinstein

VP of Threat Research, Claroty

Dave Weinstein is the VP of Threat Research at Claroty. Prior to joining Claroty, Dave was the Chief Technology Officer of New Jersey. He began his career as an operations planner at U.S. Cyber Command, where he served for three years. Dave holds a Bachelor's degree from Johns Hopkins... Read More →

Tuesday September 18, 2018 9:20am - 10:00am PDT
Citizen Hotel 926 J Street Sacramento, California 95814

Panel Discussion

10:00am PDT

Keynote Presentation: Consequence-driven Engineering for Critical Systems

It won’t come as a surprise to anyone in the room that if you are attempting to secure your systems by maintaining good cyber-hygiene alone you are fighting a losing battle. The rise and continued evolution of the industrial internet of things along with a growing overt threat to connected critical infrastructure from top tier, sophisticated attackers, calls for new approaches to security that take into account increased attack and response surfaces and throw out any notion of being able to simply isolate the network.
One approach is to accept that an attacker may get in, but to engineer resiliency into your systems, arming users with the strength in depth needed to detect and respond to any type of attack. Consequence-driven engineering (CDE) has gained traction as a way of providing organisations with the steps needed to identify high-consequence risk within ICS of critical infrastructure, to engineer out cyber risk from the things that must not fail and to stop potentially catastrophic attacks in their tracks.

Identify devices and components that facilitate risk, determine critical functions and high-consequence events then prioritise what cannot fail based on the consequences
Think like an attacker to illuminate specific, detailed attack paths, access, information and action to have an effect and highlight system vulnerabilities in networks and the supply chain
Engineer out the prioritised cyber-risk with controls, tripwires, mitigations and backstops to interrupt high-consequence risk
The importance of collective resilience, collaboration and information sharing to combat high-consequence risk across the supply chain

Speakers

Zach Tudor

Associate Laboratory Director, National and Homeland Security, Idaho National Laboratory

Tuesday September 18, 2018 10:00am - 10:30am PDT
Citizen Hotel 926 J Street Sacramento, California 95814

9:00am PDT

9:10am PDT

9:20am PDT

10:00am PDT

10:30am PDT

11:00am PDT

11:30am PDT

12:00pm PDT

12:30pm PDT

1:00pm PDT

2:00pm PDT

2:30pm PDT

3:00pm PDT

3:30pm PDT

4:00pm PDT

4:30pm PDT

5:00pm PDT

9:00am PDT

9:10am PDT

9:40am PDT

10:10am PDT

10:40am PDT

11:10am PDT

11:40am PDT

12:10pm PDT

12:40pm PDT

1:40pm PDT

2:00pm PDT

2:20pm PDT

2:50pm PDT

3:30pm PDT

4:30pm PDT