Voices: Montague

Challenges of Covering Cybersecurity News Beat

Executive Editor Jim Montague Wonders About the Stillborn Security Stories That Got Away

By Jim Montague

I remember some stories that got away, but I'll never forget those that were researched and written, but couldn't run. For instance, the most difficult topic we cover is cybersecurity. It can take months of inquiries and phone calls to secure a few good examples of how end users protect their process controls and networks. Understandably, almost nobody wants to discuss security for fear it will make them a target for some hacker, intrusion or cyber attack. This makes the few engineers and organizations willing to talk about security especially brave and precious to others in their profession.

A few years ago, I was lucky enough to secure an interview with two guys who were the cybersecurity experts at one of the world's largest oil and gas companies. Their firm was acknowledged to be a shining example of security best practices. They described in basic terms how cybersecurity is very similar to process safety, so the same risk assessment methods used to evaluate frequency and severity of potential safety incidents can also be used to gauge cybersecurity risks and help form a response. I think they also described how process control networks need to be segmented and divided by managed Ethernet switches serving as firewalls. Nothing groundbreaking, but I knew this advice would mean a lot to our readers because it came from such a big end user.

I was pleased, too, until the oil and gas firm's public relations person refused to approve or correct the story's text and referred me to a third security expert, who has repeatedly refused to be quoted. I eventually found other, less cowardly, end users who did agree to stand up and be counted. I completed my story, and have come up with several good cybersecurity articles since then. However, it's always bugged me that I couldn't get that oil and gas company on the record.

So why am I reminding you of stillborn security stories? Well, I was at the Honeywell User Group 2014 on June 3-5 in San Antonio, Texas, and I covered another cybersecurity presentation. It was well attended, but the audience was grim and seemed to be pretty depressed. I've experienced more than a few cybersecurity lectures, and the audience usually has a higher-than-average ratio of attendees with serious expressions and folded arms—as if they were subconsciously trying to protect themselves.

 And I slowly realized that the original oil and gas firm's uncommunicative, third security expert was in the audience, too. He and a colleague were apparently willing to attend, but all they contributed were a few smug questions and I-told-you-so remarks from the sidelines. I asked for a comment once more, but he was again unwilling to be quoted in any way.

I politely responded that I thought they were as bad or worse than hackers and cyber terrorists because they offer no help to other professionals in their own field, who desperately need some advice and encouragement, and don't have the resources of a huge firm to research and implement the best cybersecurity methods. They said it was just business, but I think refusing to try to lessen suffering and despair is the same as causing it in the first place.

When Scrooge says Marley was a good man of business in A Chrstmas Carol, the ghost laments, “Mankind was my business. The common welfare was my business. Charity, mercy, forbearance and benevolence were all my business. The dealings of my trade were but a drop of water in the comprehensive ocean of my business!”

Some folks never learn this, and it's just another sad, missed opportunity for everyone involved. However, as with any bad or unwilling source, I just have to get on to the next one and hope they're more willing and helpful. Likewise, if you don't get help on cybersecurity, just keep asking. I always find someone useful eventually, and you will too. Oh, and if you find a good solution, please have some guts and let others benefit from it.

More from this voice

Title

"Pervasive Sensing" to Reach Far Beyond the Process

Three of Emerson Process Management's Customers Showed How They're Using Pervasive Sensing Solutions

10/03/2013

10 Things to Consider When Selecting a VFD

Follow These Guidelines and Build a Reliable VFD System

09/12/2013

A big grain of salt

Executive Editor Jim Montague warns us not to let frequently repeated misconceptions and outright lies about new technology get in the way of statistics, because they can serve almost any purpose.

11/01/2006

A Willingness to Learn

You Can Teach an Old Dog New Tricks—and Old Editors and Engineers Too.

03/07/2008

A Willingness to Learn

You Can Teach an Old Dog New Tricks—and Old Editors and Engineers Too

03/20/2008

Action Figures of Summer

Jim Montague talks about the few process control-related heroes found in the mainstream media and in less-hyped branches of literature and the fine arts.

08/01/2007

Advanced Control an Oasis for Drought-Stricken Ethanol Plant

Advanced Process Controls Help Hankinson Renewable Energy Shift Production to a More Profitable Mix

06/18/2013

Advanced Process Control (APC) Oasis for Drought-Stricken Ethanol Plant

Assistance from Something Like Advanced Process Control (APC) Helped Hankinson Renewable Energy LLC Pull Through During Drought

07/15/2013

Advanced Process Control Podcast

In this podcast, Peter Reynolds, senior consultant at ARC Advisory Group, talks with Jim Montague, Control's executive editor, about advanced process control, and how to make it simpler to implement and maintain.

11/29/2012

Airbags for Intrinsic Safety

It Is Crucial to Learn About IS, It Is Also Vital to Learn How It Can Be Aided by HPT, DART and Other Coming Tools

06/01/2012

All-You-Can-Eat Platters of Automation Products

Browsing Our Product Database Is Like Standing in Front of an Unlimited Buffet, and Someone Hands You a Big Fork, Plate and Napkin. Yummy

09/04/2012

An Automation Process Application Measurement Reminder

Trends May Be Your Friend, but They Can Also Get You in Trouble If That's All You Look at Without Understanding the Fundamentals

07/16/2012

An Internet for Industry

Expert Panel Sees Growing Benefits of Machine Connectivity and Collaboration.

10/31/2013

Arena Immerses Attendees in 800xA Experience

Dramatization Drives Home Benefits of ABB Automation Platform and Control Room Technology

04/26/2012

Automation Comes Alive

The full motion and unfolding sequence of events in videos make the examples clearer and easier to understand.

11/06/2007

Automation Process Knowledge Management

Tribal Knowledge - New Tools Are Putting Process Know-How into Online Pools, Letting Newbies Access More Useful Knowledge, and Even Awakening Some On-the-Job Training Efforts

07/11/2011

Automation Professionals Avoid Talking About Training

Lets Talk About Training. It Is Essential to Improving Operator Performance or the Appropriate Actions of Anyone in a Critical Situation

03/15/2013

Automation Standards Are More Like Guidelines

Heads Up, Oysters! The Evolution of IEC 61131-3 and Other Undermined Standards Efforts Are Just Ongoing Misleading and Unhelpful Arguments by Industry Leaders

01/14/2011

Automation: Time to Unspecialize

Hyper-Specialists Will Research More and More About Less and Less Until They Know Everything About Nothing

10/14/2009

Bad Business

If Anything like BP's Oil Spill or the Financial Crisis Had Happened on a Smaller Scale and In a Smaller Community, the Cops Would Have Been Called, and the Perps Would Have Been Horsewhipped and Thrown in Jail

08/10/2010