Controlled Chaos - The Inevitable Marriage of DevOps & Security
Kelly Shortridge of Capsule8 gives a talk on the S4x20 Main Stage that is a bit jarring to the ICS security community. It's best encapsulated by these two quotes:
1. "Infosec has a choice: marry DevOps or be rendered impotent or irrelevant."
2. "ICS is not exempt."
This is a fast paced session with a lot for the ICS security professional to take in. Speed & stability are not conflicting goals ... DIE not CIA ... DevOps not DevSecOps ... infosec has failed, try something else ... start with your digital twin and analytics. Watch a 1x speed and take notes.