Rees and Andrew then introduce us to some examples of engineering-grade designs that can be used to help get ahead of the EPA’s ‘audit advice’ for water utilities, while also “futureproofing” industrial cybersecurity for years ahead.

Presenters:

The post Engineering-Grade Cybersecurity for Water Utilities | Recorded Webinar appeared first on Waterfall Security Solutions.

In this presentation, viewers will be introduced to Christopher Crawford, a renowned thought leader in the Transportation Industry, who will delve into the fascinating history of rail transportation cybersecurity. Mr. Crawford will highlight the evolution of systems integration and complexity, leading to the core concepts of Operational Technology (OT) Cyber Security in the rail sector. He will emphasize its growing importance due to escalating business demands for connectivity and digitalization.

The presentation will feature a review of practical use cases that demonstrate the real-world impact of cybersecurity threats on transit systems. Mr. Crawford will also discuss upcoming standards and TSA Cyber Directives, including the emerging TS 50701, which focuses on network segmentation as a key strategy to improve cybersecurity. By exploring these topics, viewers will gain an understanding of the historical context of rail transportation cybersecurity, the growing importance of OT Cyber Security, and the steps being taken to address cybersecurity risks in the industry.

Key Take Aways

The key takeaways from this presentation will emphasize the need for greater connectivity, the rising cybersecurity challenges, and the ongoing development of enhanced security standards. Overall, this presentation will provide valuable insights for those interested in the Transportation Industry and its cybersecurity challenges.

Watch the Full Recording

Resources – Rail Transportation Cybersecurity eBook

Explore future-proof cyber protections against cyber adversaries from the mundane to the most sophisticated.

About Chris Crawford, Transportation Industry Director – Waterfall Security Solutions

Chris Crawford leads Waterfall’s cybersecurity strategy and business development functions for transportation industries including rail transport and airports. In addition to his role at Waterfall, Chris is a Managing Partner at nTEG and a co-chair of the Cyber and New Technologies Committee at the American Public Transportation Association.

The post Rail Cybersecurity – New Solution for an Old Industry | Recorded Webinar appeared first on Waterfall Security Solutions.

Watch the Full Recording

Resources – 2021 OT Cyber Attacks Trend Analysis

In 2021, of 64 incidents reported in discrete manufacturing and process industries, 22 were OT cyber attacks with physical consequences. These attacks represent a 144% increase over such incidents in 2020. Almost all these attacks resulted from targeted ransomware and impacted multiple sites. These findings and others are documented in the new report. which is a cooperation of Greg Hale from ICSSTRIVE and Andrew Ginter from Waterfall Security Solutions.

In This Report:

• 2021 Data OT Outages
• Ransomware Consequences
• Future Recommendations
• Conclusions

Discover more resources here

Get the report

About Rees Machtemes , P.Eng.

Rees is a professional engineer with 15 years of diverse, hands-on experience with both IT and OT systems. He’s designed power generation and transmission substations, automated a food and beverage plant, audited and tested private and government telecom solutions, and supported IT data centres and OT hardware vendors. This experience has led him to champion cyber-safe systems design and architecture.

An obsessive tinkerer and problem-solver, you’ll often spot him next to a soldering station, mechanic’s toolbox, or stack of UNIX servers. He holds a B.Sc. in Electrical Engineering from the University of Alberta.

The post Evolving OT Cyber Attacks – Theory to Reality | Recorded Webinar appeared first on Waterfall Security Solutions.

TOGC stands for Transportation Oil &Gas Congress. The congress meets annually and brings together representatives from all aspects of the pipeline industry and focuses on strategic and technical issues impacting transportation of oil and gas via pipeline.

Some of the questions Naoufal answers in the video:

• What solutions does Waterfall Security provide to the Oil & Gas pipelines industry?
• What solutions is Waterfall Security presenting during the Congress?
• What else is there to say about Waterfall’s presentations at TOGC?

This quote from the video really drives home some of the main takeaways:

“It is very important to take into consideration cybersecurity because it’s an important enabler for digital transformation.”

– Naoufal Kerboute, Regional Sales Director – Middle East, Turkey & North Africa

Really something to think about! Without the safety net provided by cybersecurity, the digital transformation of the oil & gas industry would never happen. Too much risk!

A big thanks to everyone that participated in this year’s Congress, looking forward to seeing everyone and meeting new people next year at TOGC 2024 in Italy!

The post Waterfall Security at TOGC 2023 in Istanbul appeared first on Waterfall Security Solutions.

https://www.youtube.com/watch?v=A2YXPNXU0Ac

For decades, cybersecurity for infrastructure such as oil & gas pipelines was treated as a “done deal” until the May 7th Colonial Pipeline Ransomware Cyberattack. Regulators and business leaders were both caught off guard, having dismissed the robust security required for pipeline infrastructure as beyond sufficient.

While the OT environment of the Colonial Pipeline was never directly compromised, it did have to be shutdown till it could be confirmed that no breach had occurred. This precautionary measure presents a huge risk to all pipeline operations and led the TSA to rollout more robust directives for securing pipeline infrastructure. And there’s a good chance they’ll be rolling out some more in the near future.

SPEAKERS:

Andrew Ginter – VP Industrial Security at Waterfall Security Solutions and author of Secure Operations Technology (SEC-OT)

The post Evolving TSA Pipeline Security Directives | Recorded Webinar appeared first on Waterfall Security Solutions.

Key points on cloud security gateways

Eddy Thésée points out that “the usage of data within railway is increasing. Because of this usage we are able now to improve the operational efficiency. One of the ways to address the challenge of more data is to use the cloud.” Lior Frenkel adds: “We see a trend of course, going towards using more cloud based systems […] the flip side of that is that they need to connect their operational technology environments to cloud services which creates a lot of cybersecurity concerns and in this case also privacy [concerns].”

Operational efficiency and enhanced passenger experience are two clear focuses for modern rail. Paradoxically the increased connectivity needed to realize these goals exposes railway networks to new and evolving cyber threats. In an infinitely connected modern world, having assurance that operational systems can be protected with an unbreachable cyber security solution might be a surprise to some transport authorities. The Unidirectional Cloud Gateway (a cloud security gateway) for Rail combines impenetrable hardware with unlimited software-based connectivity.

Gateway Testimonials

“The unique and only railway cybersecurity standard that exists today (TS 50701) is recommending the use of these (Unidirectional Cloud) Gateways.”

Eddy Thésée, Vice President Cybersecurity, Alstom

“Waterfall has developed a solution which is specific to connecting operational environments to cloud services taking into consideration both the cybersecurity and privacy, and I think it will help many customers move a bit faster towards more wide spread use of cloud services.”

Lior Frenkel, CEO and Co-Founder, Waterfall

Note that viewers may also find our related use-case publication, Unidirectional Protection for Railway Signalling Networks, very informative.

PR: Waterfall Announces Cybersecurity Partnership With Alstom>>

More about Rails

About Waterfall

Waterfall Security Solutions’ unbreachable OT cybersecurity technologies keep the world running. For more than 15 years, the most important industries and infrastructure have trusted Waterfall to guarantee safe, secure, and reliable operations. The company’s growing list of global customers includes national infrastructures, power plants, nuclear generators, onshore and offshore oil and gas facilities, refineries, manufacturing plants, utility companies, and more. Waterfall’s patented Unidirectional Gateways and other solutions combine the benefits of impenetrable hardware with unlimited software-based connectivity, enabling 100% safe visibility into industrial operations and automation systems.

The post Unidirectional Cloud Gateway for Rail | Waterfall & Alstom appeared first on Waterfall Security Solutions.

SEC-OT Book – Request a copy today

The post Watch: Naoufal Kerboute’s Interview at GISEC 2022 for TECHx appeared first on Waterfall Security Solutions.

SEC-OT Book – Request a copy today

The post Watch: Andrew Ginter’s Interview at GISEC 2022 for TECHx appeared first on Waterfall Security Solutions.

THE INDUSTRIAL SECURITY INSTITUTE
OT / industrial / ICS cybersecurity concepts from the perspective of the world’s most secure industrial sites. Truly secure sites ask different questions, and so get different answers. Subscribe to never miss an episode

Rise of Ransomware
Sophisticated, targeted ransomware attacks shutting down OT systems and critical infrastructure have gained considerable momentum in recent years. How can you stay ahead of the threat environment and ensure all systems are a go, even if your IT networks are infected? What could these operators have done differently to prevent these attacks from disrupting industrial control systems?

ABOUT ANDERW GINTER
At Waterfall, Andrew leads a team of experts who work with the world’s most secure industrial sites. He is author of two books on industrial security, a co-author of the Industrial Internet Consortium’s Security Framework, and the co-host of the Industrial Security Podcast. Andrew spent 35 years designing SCADA system products for Hewlett Packard, IT/OT connectivity products for Agilent Technologies, and OT/ICS security products for Industrial Defender and Waterfall Security Solutions.

The post Rise of Ransomware 2022 | Industrial Security Institute appeared first on Waterfall Security Solutions.

Andrew Ginter’s Book
Secure Operations Technology

Get your free copy!

The Top 20 Cyber Attacks on ICS

THE INDUSTRIAL SECURITY INSTITUTE
OT / industrial / ICS cybersecurity concepts from the perspective of the world’s most secure industrial sites. Truly secure sites ask different questions, and so get different answers. Subscribe to never miss an episode

ROUNDS #5 – Ask, Learn

In the cyber world the criminals are learning from each other. We need to do the same. In the final round of Knocking Out OT Cyber Risk we’ve provided resources to extend your knowledge. As national boxing champion, Rob Couzens puts it. “Always watch. Always learn.”

KNOCKING OUT OT CYBER RISK

Cybersecurity mitigations aren’t always the most important part of OT cyber risk programs, but are always the most expensive. Join us for 5 rounds of discussion on how to address OT cyber risks more effectively.

We are joined by professional boxer – Rob Couzens, Because a fight is a fight. Rob is a Golden Gloves champion, 4 time WBC Canadian Super Middleweight champion and Team Canada member. Whether it comes to boxing, or industrial cyber security,  some techniques and some principles are universal.

ABOUT ANDERW GINTER
At Waterfall, Andrew leads a team of experts who work with the world’s most secure industrial sites. He is author of two books on industrial security, a co-author of the Industrial Internet Consortium’s Security Framework, and the co-host of the Industrial Security Podcast. Andrew spent 35 years designing SCADA system products for Hewlett Packard, IT/OT connectivity products for Agilent Technologies, and OT/ICS security products for Industrial Defender and Waterfall Security Solutions.Rou

The post Round #5 Ask, Learn| Knocking Out OT Cyber Risk | iSi appeared first on Waterfall Security Solutions.