See All Nexus 2024 Sessions

Topics:

An OIG report critical of the water and wastewater industry's cybersecurity practices and posture illuminates endemic security issues within this critical infrastructure sector, from unpatched vulnerabilities to a lack of sharing of incident data.

Cyber Resilience

Industrial

Vulnerability Management

Risk Management

Water, Wastewater Cybersecurity Still Has Long Way to Go

George V. Hulme

ASL Roma 1's implementation of an advanced security operation center called HyperSOC allows it to convert its cybersecurity approach from reactive to proactive, ensuring effective management of cyber threats. The adoption of this safeguard has led to a significant reduction in security incidents, despite the growing number of attacks at national and European level, because of the continuous monitoring of the attack surface of the infrastructure, which guarantees a higher level of security than other peers in the sector.

Healthcare

Cyber Resilience

Risk Management

ASL Roma 1 HyperSOC Approach Secures Patient Safety, Operational Efficiency

Stefano Scaramuzzino

Fabio Battelli

In an increasingly interconnected and constantly evolving healthcare environment, there are numerous cybersecurity challenges that hospitals must face to guarantee patients high-quality health services, avoid interruptions in supply, optimize the use of devices, and effectively manage cyber risks. These challenges require the use of cutting-edge technologies and real-time availability of diverse data and information.

Healthcare

Risk Management

Cyber Resilience

A Predictive, Proactive Approach to the Governance of Medical Devices

Stefano Scaramuzzino

Fabio Battelli

See all in Cyber Resilience See all in Articles

A New Jersey appeals court agreed with an earlier court’s decision that cybersecurity insurance providers could not deny ransomware coverage under a so-called “war exclusion” for a cybersecurity incident Merck & Co. claimed caused $1.4 billion in losses.

Cybersecurity Insurance

Ransomware

Merck Ransomware Insurance Ruling Helps Clear Fog of Cyberwar

George V. Hulme

Avoid these seven pitfalls when seeking cybersecurity liability insurance; ensure you understand policy terms and conditions, conduct due diligence, and involve the proper stakeholders, among other things.

Cybersecurity Insurance

Cybersecurity Liability Insurance Pitfalls to Avoid

George V. Hulme

Navigating cybersecurity insurance in a recession requires diligence about systemic cybersecurity risks that can cause premiums to rise or insurers to consider an organization uninsurable.

Cybersecurity Insurance

Risk Management

Navigating Cyber Insurance in a Recession

George V. Hulme

See all in Cybersecurity Insurance See all in Articles

Cyber Resilience

Risk Management

Federal

Blunting the Risks of Private-Sector Ownership of CI

ADM. Michael S. Rogers, USN (Ret.)

The “Report to the President: Strategy for Cyber-Physical Resilience: Fortifying Our Critical Infrastructure for a Digital World,” reaffirms that cyber-resilience-by-design should be the standard and urges a coalition of government leaders and private sector critical infrastructure asset owners and operators to refocus their energies to build resilient cyber-physical systems (CPS) that are designed to withstand attack.

Federal

Cyber Resilience

Risk Management

Applauding A Codified Strategy for CPS Resilience

Chris Inglis

See all in Federal See all in Articles

Cyberattacks against the food and beverage industry are opportunistic and leverage the growth in digitization to exploit previously unmanaged vulnerabilities to disrupt operations.

Food & Beverage

Industrial

On the Menu: Cybersecurity Risks in the Food and Beverage Industry

George V. Hulme

See all in Food & Beverage See all in Articles

ASL Roma 1's implementation of an advanced security operation center called HyperSOC allows it to convert its cybersecurity approach from reactive to proactive, ensuring effective management of cyber threats. The adoption of this safeguard has led to a significant reduction in security incidents, despite the growing number of attacks at national and European level, because of the continuous monitoring of the attack surface of the infrastructure, which guarantees a higher level of security than other peers in the sector.

Healthcare

Cyber Resilience

Risk Management

ASL Roma 1 HyperSOC Approach Secures Patient Safety, Operational Efficiency

Stefano Scaramuzzino

Fabio Battelli

In an increasingly interconnected and constantly evolving healthcare environment, there are numerous cybersecurity challenges that hospitals must face to guarantee patients high-quality health services, avoid interruptions in supply, optimize the use of devices, and effectively manage cyber risks. These challenges require the use of cutting-edge technologies and real-time availability of diverse data and information.

Healthcare

Risk Management

Cyber Resilience

A Predictive, Proactive Approach to the Governance of Medical Devices

Stefano Scaramuzzino

Fabio Battelli

The HHS Office for Civil Rights proposes substantial rule changes to the long-standing Health Insurance Portability and Accountability Act (HIPAA) Security Rule. While details on the proposed rule changes remain unclear, HHS plans to issue a Notice of Proposed Rulemaking (NPRM) by the end of the year. These changes are believed to be the most substantial changes since the HIPAA Security rule went into effect in 2003

Healthcare

Ransomware

Significant Changes to HIPAA Security Rule on the Way

George V. Hulme

See all in Healthcare See all in Articles

Risk managers—especially C-suite and boards of directors—looking to establish a culture of OT cyber awareness and risk remediation proactivity in their organizations need to establish a formal and measurable program approach. The program must provide a shared vision and a practical roadmap that makes sense because it relates to many of the unique characteristics of their organization, OT environment, business model, and risk appetite.

Industrial

Risk Management

Lessons Learned from Creating an OT Cybersecurity Program in a Large, Slow-Moving Government Agency

John Ballentine

An OIG report critical of the water and wastewater industry's cybersecurity practices and posture illuminates endemic security issues within this critical infrastructure sector, from unpatched vulnerabilities to a lack of sharing of incident data.

Cyber Resilience

Industrial

Vulnerability Management

Risk Management

Water, Wastewater Cybersecurity Still Has Long Way to Go

George V. Hulme

Securing connectivity in operational technology (OT) environments is crucial for the safety of critical infrastructure and maintaining the uninterrupted service it provides. Leaving unnecessary open ports, protocols, and services exposed, along with directly connected devices to the internet, such as programmable logic controllers (PLCs) and human machine interfaces (HMIs), greatly increases the risks of cyberattacks.

Industrial

Operational Technology

Risk Management

Explaining the Importance of Secure Connectivity in OT

Dan Ricci

See all in Industrial See all in Articles

If we are indeed at the full outset of Industry 4.0, the fourth industrial revolution, initiatives such as smart manufacturing will not truly succeed without keen awareness of new cybersecurity risks introduced by IT/OT connectivity and advanced technologies.

Cyber Resilience

Internet of Things

Operational Resilience

Operational Technology

Smart Manufacturing Requires Proactive Cybersecurity

Jim LaBonty

See all in Internet of Things See all in Articles

Enterprise CISOs must consider disinformation and misinformation campaigns targeting their companies and industries as part of their threat model. Organizations must also develop disinformation response plans, similar to incident response actions.

Operational Resilience

Cyber Resilience

Risk Management

CISOs Urged to Prepare for Evolving Disinformation Tactics

George V. Hulme

If we are indeed at the full outset of Industry 4.0, the fourth industrial revolution, initiatives such as smart manufacturing will not truly succeed without keen awareness of new cybersecurity risks introduced by IT/OT connectivity and advanced technologies.

Cyber Resilience

Internet of Things

Operational Resilience

Operational Technology

Smart Manufacturing Requires Proactive Cybersecurity

Jim LaBonty

On Nexus, former NSA Director Adm. Michael Rogers writes about the current legislative and personal liability changes that are impacting the CISO office. But Rogers urges security leaders to view these times as an opportunity to refine their business acumen and ensure cybersecurity is a priority across the enterprise.

Risk Management

Operational Resilience

Cyber Resilience

CISO Unrest is an Opportunity

ADM. Michael S. Rogers, USN (Ret.)

See all in Operational Resilience See all in Articles

Securing connectivity in operational technology (OT) environments is crucial for the safety of critical infrastructure and maintaining the uninterrupted service it provides. Leaving unnecessary open ports, protocols, and services exposed, along with directly connected devices to the internet, such as programmable logic controllers (PLCs) and human machine interfaces (HMIs), greatly increases the risks of cyberattacks.

Industrial

Operational Technology

Risk Management

Explaining the Importance of Secure Connectivity in OT

Dan Ricci

Operational Technology

Cyber Resilience

Secure by Design in Manufacturing is Not an Empty Concept

Jim LaBonty

Operational Technology

Does DevOps have a place in OT/ICS Development?

George V. Hulme

See all in Operational Technology See all in Articles

The HHS Office for Civil Rights proposes substantial rule changes to the long-standing Health Insurance Portability and Accountability Act (HIPAA) Security Rule. While details on the proposed rule changes remain unclear, HHS plans to issue a Notice of Proposed Rulemaking (NPRM) by the end of the year. These changes are believed to be the most substantial changes since the HIPAA Security rule went into effect in 2003

Healthcare

Ransomware

Significant Changes to HIPAA Security Rule on the Way

George V. Hulme

Mike Ratliff, AVP Security Engineering and Operations at Providence, writes about five steps healthcare delivery organizations should take to mitigate the risk of ransomware and extortion-based attacks.

Ransomware

Healthcare

Cyber Resilience

5 Things Hospitals Can Do to Mitigate Threats of Ransomware

Mike Ratliff

Sam Templeton

Ransomware

Resilience, Recovery Strategies to Combat Ransomware and Extortion

ADM. Michael S. Rogers, USN (Ret.)

See all in Ransomware See all in Articles

Risk managers—especially C-suite and boards of directors—looking to establish a culture of OT cyber awareness and risk remediation proactivity in their organizations need to establish a formal and measurable program approach. The program must provide a shared vision and a practical roadmap that makes sense because it relates to many of the unique characteristics of their organization, OT environment, business model, and risk appetite.

Industrial

Risk Management

Lessons Learned from Creating an OT Cybersecurity Program in a Large, Slow-Moving Government Agency

John Ballentine

An OIG report critical of the water and wastewater industry's cybersecurity practices and posture illuminates endemic security issues within this critical infrastructure sector, from unpatched vulnerabilities to a lack of sharing of incident data.

Cyber Resilience

Industrial

Vulnerability Management

Risk Management

Water, Wastewater Cybersecurity Still Has Long Way to Go

George V. Hulme

ASL Roma 1's implementation of an advanced security operation center called HyperSOC allows it to convert its cybersecurity approach from reactive to proactive, ensuring effective management of cyber threats. The adoption of this safeguard has led to a significant reduction in security incidents, despite the growing number of attacks at national and European level, because of the continuous monitoring of the attack surface of the infrastructure, which guarantees a higher level of security than other peers in the sector.

Healthcare

Cyber Resilience

Risk Management

ASL Roma 1 HyperSOC Approach Secures Patient Safety, Operational Efficiency

Stefano Scaramuzzino

Fabio Battelli

See all in Risk Management See all in Articles

Technical debt in OT leads to increased operations costs as teams fight to maintain outdated systems, and security teams struggle to keep those same systems secure, often through compensating controls.

Operational Technology

Technical Debt

Getting Strategic Against Technical Debt in OT

George V. Hulme

Technical debt broadly refers to having old technology in place that causes problems later on, such as increased maintenance, lower productivity, and software or system reliability.

Operational Technology

Industrial

Technical Debt

Technical Debt in OT Environments: How It's Different and Why it Matters

George V. Hulme

See all in Technical Debt See all in Articles

An OIG report critical of the water and wastewater industry's cybersecurity practices and posture illuminates endemic security issues within this critical infrastructure sector, from unpatched vulnerabilities to a lack of sharing of incident data.

Cyber Resilience

Industrial

Vulnerability Management

Risk Management

Water, Wastewater Cybersecurity Still Has Long Way to Go

George V. Hulme

Healthcare

Vulnerability Management

Risk Management

Better Medical Device Classification for Enhanced Risk Management

Manan Kakkar

Sam Templeton

Vulnerability Management

Risk Management

Putting SBOMs to Practical Use

George V. Hulme

See all in Vulnerability Management See all in Articles

Risk Management

Vulnerability Management

Zero Trust

Operational Technology

A Strategic Necessity: Compensating Controls in ICS, OT

George V. Hulme

Zero Trust

Behavioral Identity as the New Perimeter

John Frushour

Implementing a zero-trust architecture for operational technology environment ensures additional security around cyber physical systems processes that are essential to our way of life.

Zero Trust

Industrial

The Zero Trust for OT Imperative

George V. Hulme

See all in Zero Trust See all in Articles

Industrial

Nexus Conference

Rodnei Gripp da Petrobras Fortalece a Conexão entre Segurança de Infraestruturas Críticas e Negócio

Michael Mimoso

José Carlos Hererra de Sigma, la Importancia de la Visibilidad y la Simplicidad

Michael Mimoso

Industrial

Nexus Conference

Felipe Bonomo Destaca os Desafios Relacionados à Proteção de Infraestruturas Críticas

Michael Mimoso

See all in Videos

Cyber Resilience

Vulnerability Management

Risk Management

Nexus Podcast: Volexity’s Steven Adair on the Nearest Neighbor Attack

Michael Mimoso

In this episode of the Nexus Podcast. Runsafe Security CEO and cofounder Joe Saunders examines the motivations of these adversaries, the targeting of memory-based vulnerabilities in embedded systems prevalent in OT and healthcare, and how initiatives such as secure-by-design/default/demand can make a dent in ensuring the resilience of critical infrastructure.

Cyber Resilience

Industrial

Healthcare

Nexus Podcast: Joe Saunders on Advanced Attacks Against Critical Infrastructure

Michael Mimoso

Industrial

Healthcare

Ransomware

Cyber Resilience

Operational Resilience

Operational Technology

Nexus Podcast: Grant Geyer on the Business Impact of Disruptions from Cyberattacks

Michael Mimoso

See all in Podcasts

Nexus ’23: Dave DeWalt and Dr. David Mussington on CISA and Critical Infrastructure

/

Nov 8, 2023

NightDragon founder Dave DeWalt and CISA Executive Assistant Director for Infrastructure Security Dr. David Mussington explain the regulatory landscape facing cybersecurity leaders, and CISA’s role helping to lock down the 16 critical infrastructure sectors.

Share:

Share

You might also like… Read more

Nexus ’23: Galina Antova on Conditions Shaping Cyber-Physical Systems Security

Claroty cofounder Galina Antova’s Nexus ’23 keynote presentation covers the geopolitical, macroeconomic, and regulatory conditions that shape the strategies…

Nexus ’23: Grant Geyer and Phil Venables on Cloud Computing in Critical Infrastructure

Claroty Chief Product Officer Grant Geyer and Google Cloud VP and CISO Phil Venables discuss the historical challenges to cloud connectivity, and the…

Nexus ’23: Adam Meyers and Charles Carmakal on Geopolitics and Cybersecurity

Crowdstrike Senior VP Intelligence Adam Meyers and Mandiant CTO Charles Carmakal explore the tactics, techniques, and procedures leveraged by state actors…

Nexus ’23: GSK, Haleon Panel Discussion on Dynamic Edge Segmentation

GSK Senior VP and Global CISO Michael Elmore moderates a panel discussion on dynamic edge segmentation as a mitigation strategy to improve cyber-physical…

Nexus ’23: Michael MacKenzie on Digital Transformation from the Shop Floor to the Top Floor

AWS GM, Enterprise and Industrial IoT Michael MacKenzie explains the keys to being a digital transformation success story, including obtaining the necessary…

Nexus ’23: Panel Discussion on AI Adaptive Defense and Advanced Threats

Carraig Stanwyck, VP Global Cybersecurity at Avnet moderates a panel discussion on the role of artificial intelligence and how it’s being used for adaptive…

Nexus ’23: Bilyana Lilly and Victor Zhora on Russian Foreign Policy and the Ukraine War

Dr. Bilyana Lilly, an expert on Russian foreign policy, is joined by Victor Zhora, Ukraine’s Deputy Chairman and Chief Digital Transformation Officer for a…

Nexus ’23: Adm. Michael S. Rogers and Chris Inglis on Cyberwar and Critical Infrastructure

Retired U.S. Navy Adm., and former NSA Director Michael S. Rogers is joined by former National Cybersecurity Director Chris Inglis for a discussion about…

Nexus ’23: Megan Samford and Maggie Morganti on Cyber-Physical Systems Product Security

Schneider Electric VP and Chief Product Security Officer Megan Samford, and Rockwell Automation Product Security Research Manager Maggie Morganti discuss…

Nexus ’23: Panel Discussion on Turning AI into Actionable Intelligence

NightDragon founder Dave DeWalt moderates a panel discussion about the role of AI in defending cyber-physical systems. Joining him are Claroty Chief Product…

Nexus ’23: Cristin Flynn Goodwin and Charles Blauner on the SEC Cybersecurity Rules

Team8 Operating Partner and CISO Charles Blauner and Advancing Cyber Founder and attorney Cristin Flynn Goodwin discuss the impact the pending U.S. Securities…

Nexus ’23: Panel Discussion on Transportation Cybersecurity Insights

Amtrak CISO Jesse Whaley, SiemensUSA CISO Helen Negre, and TSA Deputy Assistant Administrator for Surface Operations Ron Pavlik discuss the recent TSA…

Latest on Nexus Podcast

See all episodes

The Nexus podcast features conversations with security leaders, researchers, and experts sharing their expertise on cyber-physical systems security.

See all episodes

Cyber Resilience

Vulnerability Management

Risk Management

Nexus Podcast: Volexity’s Steven Adair on the Nearest Neighbor Attack

In this episode of the Nexus Podcast. Runsafe Security CEO and cofounder Joe Saunders examines the motivations of these adversaries, the targeting of memory-based vulnerabilities in embedded systems prevalent in OT and healthcare, and how initiatives such as secure-by-design/default/demand can make a dent in ensuring the resilience of critical infrastructure.

Cyber Resilience

Industrial

Healthcare

Nexus Podcast: Joe Saunders on Advanced Attacks Against Critical Infrastructure

Industrial

Healthcare

Ransomware

Cyber Resilience

Operational Resilience

Operational Technology

Nexus Podcast: Grant Geyer on the Business Impact of Disruptions from Cyberattacks