Consequence-Based Risk Matrices for IEC 62443-3-2
Andrew Ginter shares a proposed IEC 62443-3-2 Appendix C: consequence-based risk matrices that replace likelihood with credibility for high-impact OT cyber attacks.
October 6, 2026
Tag: Industrial control systems
Welcome to the resources page! We have compiled a collection of useful information, tools, and resources to help you
Offshore Norge 104: Network Engineering for OT Cybersecurity
Recommended guidelines on cyber security baseline requirements for Operational Technology (OT) systems were published in June 2026. I reviewed them…
September 16, 2026
Making OT Security Stronger Than IT
OT security is “hard” – engineering change control (ECC) makes patching slow and expensive, many OT devices and systems have no real support for zero trust (ZT)…
July 21, 2026
Big OT Security, Smaller Footprint – Meet DiodeCore!
Two decades ago, we founded Waterfall with one purpose: to defeat nation-state attacks impacting OT environments and critical infrastructure.
June 24, 2026
Mythos, Zero Days and OT Cybersecurity
Anthropic’s Claude Mythos is the latest example of a trend many of us in industrial cybersecurity have been warning about for years.
June 15, 2026
3 OT Security Myths
If only we could wave a magic wand and patch everything and zero-trust everything, just like with our IT networks, then our OT networks would be “secure”
May 10, 2026
8 (and a Half) Questions for Your OT “Secure” Remote Access Vendors
Ask different questions, get different answers. What should you be asking your OT “secure” remote access (SRA) vendor?
April 1, 2026
Andrew Ginter’s Top 3 Webinars of 2024
Get up to speed on key trends and strategies in industrial security with Andrew Ginter’s favorite webinars of 2024,
December 17, 2024
Andrew Ginter’s Top 3 Podcast Episodes of 2024
Sit back and enjoy Andrew Ginter’s top 3 picks from 2024’s Industrial Security Podcast series.
December 16, 2024
Are OT Security Investments Worth It?
Spoiler Alert: Yes, investing in OT security is very much “worth it”. It helps prevent financial losses, operational disruptions, and compliance penalties far exceeding initial costs. The average ROI can reach up to 400%, ensuring both protection and operational continuity.
December 8, 2024
