Prioritizing infrastructure in a world full of mission-critical systems

This session will discuss threat modeling in critical infrastructure environments where enterprise systems connect to operational technology.

Operational technology and control systems for critical processes are increasingly accessible and exploitable. Several methodologies exist for exploring risks and vulnerabilities in systems and networks, while there are fewer methods to do tiered based risk and resilience planning for cyber-physical processes. Danielle Jablanski, Cybersecurity Consulting Program Lead for OT at STV will discuss how to incorporate OT risk into traditional frameworks, likelihood considerations for targeting and exploitation, and how to build a crawl, walk, run model for protecting mission-critical systems and processes.