See All Nexus 2024 Sessions

Topics:

Risk Management

Operational Resilience

Cyber Resilience

Outgoing Biden EO Takes Aim at Improved Software Security

George V. Hulme

Industrial

Operational Technology

Cyber Resilience

Accelerating IACS/OT Cybersecurity Improvements

Don C. Weber

Cyber Resilience

Operational Technology

Operational Resilience

Risk Management

Five Trends Driving OT Cybersecurity in 2025

George V. Hulme

See all in Cyber Resilience See all in Articles

A New Jersey appeals court agreed with an earlier court’s decision that cybersecurity insurance providers could not deny ransomware coverage under a so-called “war exclusion” for a cybersecurity incident Merck & Co. claimed caused $1.4 billion in losses.

Cybersecurity Insurance

Ransomware

Merck Ransomware Insurance Ruling Helps Clear Fog of Cyberwar

George V. Hulme

Avoid these seven pitfalls when seeking cybersecurity liability insurance; ensure you understand policy terms and conditions, conduct due diligence, and involve the proper stakeholders, among other things.

Cybersecurity Insurance

Cybersecurity Liability Insurance Pitfalls to Avoid

George V. Hulme

Navigating cybersecurity insurance in a recession requires diligence about systemic cybersecurity risks that can cause premiums to rise or insurers to consider an organization uninsurable.

Cybersecurity Insurance

Risk Management

Navigating Cyber Insurance in a Recession

George V. Hulme

See all in Cybersecurity Insurance See all in Articles

Cyber Resilience

Risk Management

Federal

Blunting the Risks of Private-Sector Ownership of CI

ADM. Michael S. Rogers, USN (Ret.)

The “Report to the President: Strategy for Cyber-Physical Resilience: Fortifying Our Critical Infrastructure for a Digital World,” reaffirms that cyber-resilience-by-design should be the standard and urges a coalition of government leaders and private sector critical infrastructure asset owners and operators to refocus their energies to build resilient cyber-physical systems (CPS) that are designed to withstand attack.

Federal

Cyber Resilience

Risk Management

Applauding A Codified Strategy for CPS Resilience

Chris Inglis

See all in Federal See all in Articles

Cyberattacks against the food and beverage industry are opportunistic and leverage the growth in digitization to exploit previously unmanaged vulnerabilities to disrupt operations.

Food & Beverage

Industrial

On the Menu: Cybersecurity Risks in the Food and Beverage Industry

George V. Hulme

See all in Food & Beverage See all in Articles

The U.S. Department of Health and Human Services (HHS) hopes to strengthen the security of electronic protected health information (ePHI) with the most significant proposed update to the Health Insurance Portability and Accountability Act (HIPAA) Security Rule in more than a decade.

Healthcare

Risk Management

HIPAA Security Rule Update Aims to Strengthen Medical Device, Data Protections

George V. Hulme

ASL Roma 1's implementation of an advanced security operation center called HyperSOC allows it to convert its cybersecurity approach from reactive to proactive, ensuring effective management of cyber threats. The adoption of this safeguard has led to a significant reduction in security incidents, despite the growing number of attacks at national and European level, because of the continuous monitoring of the attack surface of the infrastructure, which guarantees a higher level of security than other peers in the sector.

Healthcare

Cyber Resilience

Risk Management

ASL Roma 1 HyperSOC Approach Secures Patient Safety, Operational Efficiency

Stefano Scaramuzzino

Fabio Battelli

In an increasingly interconnected and constantly evolving healthcare environment, there are numerous cybersecurity challenges that hospitals must face to guarantee patients high-quality health services, avoid interruptions in supply, optimize the use of devices, and effectively manage cyber risks. These challenges require the use of cutting-edge technologies and real-time availability of diverse data and information.

Healthcare

Risk Management

Cyber Resilience

A Predictive, Proactive Approach to the Governance of Medical Devices

Stefano Scaramuzzino

Fabio Battelli

See all in Healthcare See all in Articles

Industrial

Operational Technology

Cyber Resilience

Accelerating IACS/OT Cybersecurity Improvements

Don C. Weber

Risk managers—especially C-suite and boards of directors—looking to establish a culture of OT cyber awareness and risk remediation proactivity in their organizations need to establish a formal and measurable program approach. The program must provide a shared vision and a practical roadmap that makes sense because it relates to many of the unique characteristics of their organization, OT environment, business model, and risk appetite.

Industrial

Risk Management

Lessons Learned from Creating an OT Cybersecurity Program in a Large, Slow-Moving Government Agency

John Ballentine

An OIG report critical of the water and wastewater industry's cybersecurity practices and posture illuminates endemic security issues within this critical infrastructure sector, from unpatched vulnerabilities to a lack of sharing of incident data.

Cyber Resilience

Industrial

Vulnerability Management

Risk Management

Water, Wastewater Cybersecurity Still Has Long Way to Go

George V. Hulme

See all in Industrial See all in Articles

If we are indeed at the full outset of Industry 4.0, the fourth industrial revolution, initiatives such as smart manufacturing will not truly succeed without keen awareness of new cybersecurity risks introduced by IT/OT connectivity and advanced technologies.

Cyber Resilience

Internet of Things

Operational Resilience

Operational Technology

Smart Manufacturing Requires Proactive Cybersecurity

Jim LaBonty

See all in Internet of Things See all in Articles

Risk Management

Operational Resilience

Cyber Resilience

Outgoing Biden EO Takes Aim at Improved Software Security

George V. Hulme

Cyber Resilience

Operational Technology

Operational Resilience

Risk Management

Five Trends Driving OT Cybersecurity in 2025

George V. Hulme

Cyber Resilience

Operational Resilience

Risk Management

Vulnerability Management

Nexus Reflections and Predictions: Adm. Michael Rogers

ADM. Michael S. Rogers, USN (Ret.)

See all in Operational Resilience See all in Articles

Industrial

Operational Technology

Cyber Resilience

Accelerating IACS/OT Cybersecurity Improvements

Don C. Weber

Cyber Resilience

Operational Technology

Operational Resilience

Risk Management

Five Trends Driving OT Cybersecurity in 2025

George V. Hulme

Cyber Resilience

Operational Technology

Operational Resilience

Vulnerability Management

Nexus Reflections and Predictions: John Ballentine

John Ballentine

See all in Operational Technology See all in Articles

The HHS Office for Civil Rights proposes substantial rule changes to the long-standing Health Insurance Portability and Accountability Act (HIPAA) Security Rule. While details on the proposed rule changes remain unclear, HHS plans to issue a Notice of Proposed Rulemaking (NPRM) by the end of the year. These changes are believed to be the most substantial changes since the HIPAA Security rule went into effect in 2003

Healthcare

Ransomware

Significant Changes to HIPAA Security Rule on the Way

George V. Hulme

Mike Ratliff, AVP Security Engineering and Operations at Providence, writes about five steps healthcare delivery organizations should take to mitigate the risk of ransomware and extortion-based attacks.

Ransomware

Healthcare

Cyber Resilience

5 Things Hospitals Can Do to Mitigate Threats of Ransomware

Mike Ratliff

Sam Templeton

Ransomware

Resilience, Recovery Strategies to Combat Ransomware and Extortion

ADM. Michael S. Rogers, USN (Ret.)

See all in Ransomware See all in Articles

Risk Management

Operational Resilience

Cyber Resilience

Outgoing Biden EO Takes Aim at Improved Software Security

George V. Hulme

The U.S. Department of Health and Human Services (HHS) hopes to strengthen the security of electronic protected health information (ePHI) with the most significant proposed update to the Health Insurance Portability and Accountability Act (HIPAA) Security Rule in more than a decade.

Healthcare

Risk Management

HIPAA Security Rule Update Aims to Strengthen Medical Device, Data Protections

George V. Hulme

Cyber Resilience

Operational Technology

Operational Resilience

Risk Management

Five Trends Driving OT Cybersecurity in 2025

George V. Hulme

See all in Risk Management See all in Articles

Technical debt in OT leads to increased operations costs as teams fight to maintain outdated systems, and security teams struggle to keep those same systems secure, often through compensating controls.

Operational Technology

Technical Debt

Getting Strategic Against Technical Debt in OT

George V. Hulme

Technical debt broadly refers to having old technology in place that causes problems later on, such as increased maintenance, lower productivity, and software or system reliability.

Operational Technology

Industrial

Technical Debt

Technical Debt in OT Environments: How It's Different and Why it Matters

George V. Hulme

See all in Technical Debt See all in Articles

Cyber Resilience

Operational Resilience

Risk Management

Vulnerability Management

Nexus Reflections and Predictions: Adm. Michael Rogers

ADM. Michael S. Rogers, USN (Ret.)

Cyber Resilience

Operational Technology

Operational Resilience

Vulnerability Management

Nexus Reflections and Predictions: John Ballentine

John Ballentine

Operational Technology

Cyber Resilience

Operational Resilience

Vulnerability Management

Nexus Reflections and Predictions: Dan Ricci

Dan Ricci

See all in Vulnerability Management See all in Articles

Risk Management

Vulnerability Management

Zero Trust

Operational Technology

A Strategic Necessity: Compensating Controls in ICS, OT

George V. Hulme

Zero Trust

Behavioral Identity as the New Perimeter

John Frushour

Implementing a zero-trust architecture for operational technology environment ensures additional security around cyber physical systems processes that are essential to our way of life.

Zero Trust

Industrial

The Zero Trust for OT Imperative

George V. Hulme

See all in Zero Trust See all in Articles

Industrial

Nexus Conference

Rodnei Gripp da Petrobras Fortalece a Conexão entre Segurança de Infraestruturas Críticas e Negócio

Saiba como a Claroty colaborou com o time de segurança cibernética da Petrobras, gerando benefícios estratégicos para a equipe responsável pelas plataformas de…

Michael Mimoso

José Carlos Hererra de Sigma, la Importancia de la Visibilidad y la Simplicidad

José Carlos Herrera, CISO de Sigma Europa, nos habla de la importancia de tener un inventario claro y una herramienta amigable como base para desarrollar una…

Michael Mimoso

Industrial

Nexus Conference

Felipe Bonomo Destaca os Desafios Relacionados à Proteção de Infraestruturas Críticas

Felipe Bonomo, CISO da Alpargatas, empresa responsável pela icônica marca Havaianas, compartilha os desafios e benefícios de sua parceria com a Claroty na…

Michael Mimoso

See all in Videos

Cyber Resilience

Operational Technology

Industrial

Nexus Podcast: CISA on Secure-by-Demand for OT

Michael Mimoso

Internet of Things

Operational Technology

Nexus Podcast: Noam Moshe on the IOCONTROL Malware

Michael Mimoso

Team82’s Noam Moshe discusses state actor targeting of OT, why it’s so challenging to develop ransomware for OT and industrial control systems, and the mitigation strategies available to defenders of cyber-physical systems.

Cyber Resilience

Internet of Things

Nexus Podcast: Team82 on Attacking the Insecure IoT Cloud

Michael Mimoso

See all in Podcasts

Nexus ’23: Panel Discussion on Transportation Cybersecurity Insights

/

Nov 8, 2023

Amtrak CISO Jesse Whaley, SiemensUSA CISO Helen Negre, and TSA Deputy Assistant Administrator for Surface Operations Ron Pavlik discuss the recent TSA cybersecurity rules and the challenges and success stories in protecting the country’s transportation infrastructure.

Share:

Share

You might also like… Read more

Nexus ’23: Galina Antova on Conditions Shaping Cyber-Physical Systems Security

Claroty cofounder Galina Antova’s Nexus ’23 keynote presentation covers the geopolitical, macroeconomic, and regulatory conditions that shape the strategies…

Nexus ’23: Grant Geyer and Phil Venables on Cloud Computing in Critical Infrastructure

Claroty Chief Product Officer Grant Geyer and Google Cloud VP and CISO Phil Venables discuss the historical challenges to cloud connectivity, and the…

Nexus ’23: Adam Meyers and Charles Carmakal on Geopolitics and Cybersecurity

Crowdstrike Senior VP Intelligence Adam Meyers and Mandiant CTO Charles Carmakal explore the tactics, techniques, and procedures leveraged by state actors…

screenshot-2023-11-08-at-3.52.18-pm-1699488468.png

Nexus ’23: Dave DeWalt and Dr. David Mussington on CISA and Critical Infrastructure

NightDragon founder Dave DeWalt and CISA Executive Assistant Director for Infrastructure Security Dr. David Mussington explain the regulatory landscape facing…

Nexus ’23: GSK, Haleon Panel Discussion on Dynamic Edge Segmentation

GSK Senior VP and Global CISO Michael Elmore moderates a panel discussion on dynamic edge segmentation as a mitigation strategy to improve cyber-physical…

Nexus ’23: Michael MacKenzie on Digital Transformation from the Shop Floor to the Top Floor

AWS GM, Enterprise and Industrial IoT Michael MacKenzie explains the keys to being a digital transformation success story, including obtaining the necessary…

Nexus ’23: Panel Discussion on AI Adaptive Defense and Advanced Threats

Carraig Stanwyck, VP Global Cybersecurity at Avnet moderates a panel discussion on the role of artificial intelligence and how it’s being used for adaptive…

Nexus ’23: Bilyana Lilly and Victor Zhora on Russian Foreign Policy and the Ukraine War

Dr. Bilyana Lilly, an expert on Russian foreign policy, is joined by Victor Zhora, Ukraine’s Deputy Chairman and Chief Digital Transformation Officer for a…

Nexus ’23: Adm. Michael S. Rogers and Chris Inglis on Cyberwar and Critical Infrastructure

Retired U.S. Navy Adm., and former NSA Director Michael S. Rogers is joined by former National Cybersecurity Director Chris Inglis for a discussion about…

Nexus ’23: Megan Samford and Maggie Morganti on Cyber-Physical Systems Product Security

Schneider Electric VP and Chief Product Security Officer Megan Samford, and Rockwell Automation Product Security Research Manager Maggie Morganti discuss…

Nexus ’23: Panel Discussion on Turning AI into Actionable Intelligence

NightDragon founder Dave DeWalt moderates a panel discussion about the role of AI in defending cyber-physical systems. Joining him are Claroty Chief Product…

Nexus ’23: Cristin Flynn Goodwin and Charles Blauner on the SEC Cybersecurity Rules

Team8 Operating Partner and CISO Charles Blauner and Advancing Cyber Founder and attorney Cristin Flynn Goodwin discuss the impact the pending U.S. Securities…

Latest on Nexus Podcast

See all episodes

The Nexus podcast features conversations with security leaders, researchers, and experts sharing their expertise on cyber-physical systems security.

See all episodes

Cyber Resilience

Operational Technology

Industrial

Nexus Podcast: CISA on Secure-by-Demand for OT

Internet of Things

Operational Technology

Nexus Podcast: Noam Moshe on the IOCONTROL Malware

Team82’s Noam Moshe discusses state actor targeting of OT, why it’s so challenging to develop ransomware for OT and industrial control systems, and the mitigation strategies available to defenders of cyber-physical systems.

Cyber Resilience

Internet of Things

Nexus Podcast: Team82 on Attacking the Insecure IoT Cloud