Layered Blueprints for OT Security
Sarah Fluchs begins with a bold statement, reminiscent of an earlier Witch Doctor vs. Engineer S4x12 session, "OT Security Engineering does not deserve to be called Engineering." She then lays out a series of three questions that must be asked and a methodology to answer the questions.
Sarah goes over the OT Security Engineering methodology as applied to a Water ICS and frankly discusses the process and lessons learned through iterating the methodology. She ends with a call to the S4 audience to contribute to ICS security solutions and approaches worthy of the engineering discipline.