Voices: Montague

Challenges of Covering Cybersecurity News Beat

Executive Editor Jim Montague Wonders About the Stillborn Security Stories That Got Away

By Jim Montague

I remember some stories that got away, but I'll never forget those that were researched and written, but couldn't run. For instance, the most difficult topic we cover is cybersecurity. It can take months of inquiries and phone calls to secure a few good examples of how end users protect their process controls and networks. Understandably, almost nobody wants to discuss security for fear it will make them a target for some hacker, intrusion or cyber attack. This makes the few engineers and organizations willing to talk about security especially brave and precious to others in their profession.

A few years ago, I was lucky enough to secure an interview with two guys who were the cybersecurity experts at one of the world's largest oil and gas companies. Their firm was acknowledged to be a shining example of security best practices. They described in basic terms how cybersecurity is very similar to process safety, so the same risk assessment methods used to evaluate frequency and severity of potential safety incidents can also be used to gauge cybersecurity risks and help form a response. I think they also described how process control networks need to be segmented and divided by managed Ethernet switches serving as firewalls. Nothing groundbreaking, but I knew this advice would mean a lot to our readers because it came from such a big end user.

I was pleased, too, until the oil and gas firm's public relations person refused to approve or correct the story's text and referred me to a third security expert, who has repeatedly refused to be quoted. I eventually found other, less cowardly, end users who did agree to stand up and be counted. I completed my story, and have come up with several good cybersecurity articles since then. However, it's always bugged me that I couldn't get that oil and gas company on the record.

So why am I reminding you of stillborn security stories? Well, I was at the Honeywell User Group 2014 on June 3-5 in San Antonio, Texas, and I covered another cybersecurity presentation. It was well attended, but the audience was grim and seemed to be pretty depressed. I've experienced more than a few cybersecurity lectures, and the audience usually has a higher-than-average ratio of attendees with serious expressions and folded arms—as if they were subconsciously trying to protect themselves.

 And I slowly realized that the original oil and gas firm's uncommunicative, third security expert was in the audience, too. He and a colleague were apparently willing to attend, but all they contributed were a few smug questions and I-told-you-so remarks from the sidelines. I asked for a comment once more, but he was again unwilling to be quoted in any way.

I politely responded that I thought they were as bad or worse than hackers and cyber terrorists because they offer no help to other professionals in their own field, who desperately need some advice and encouragement, and don't have the resources of a huge firm to research and implement the best cybersecurity methods. They said it was just business, but I think refusing to try to lessen suffering and despair is the same as causing it in the first place.

When Scrooge says Marley was a good man of business in A Chrstmas Carol, the ghost laments, “Mankind was my business. The common welfare was my business. Charity, mercy, forbearance and benevolence were all my business. The dealings of my trade were but a drop of water in the comprehensive ocean of my business!”

Some folks never learn this, and it's just another sad, missed opportunity for everyone involved. However, as with any bad or unwilling source, I just have to get on to the next one and hope they're more willing and helpful. Likewise, if you don't get help on cybersecurity, just keep asking. I always find someone useful eventually, and you will too. Oh, and if you find a good solution, please have some guts and let others benefit from it.

More from this voice

Title

Sample Conditioning Systems Need Love Too

Process Users and Integrators Must Carefully Design and Match SCSs With Application Requirements and Specifications, Complete Application Data Sheets and Deploy Climate-Controlled Shelters

12/07/2011

Santos Integrates Intelligent Field with Transformative Operations Center

Automation Professionals Needed a More Efficient Way to Run Their Plants, Monitor and Control the Fields, and Integrate Operations. Santos Ltd. Delivered!

10/02/2013

SCADA Update Protects Potable Production

Windsor Utilities Commission Bolsters Its Water Production System With Data Tracking-and-Tracing Capabilities and Some Wireless Controls

09/07/2012

Search for the Asset Management, Part II

GlaxoSmithKline, Beamex and Emerson Process Management team up to streamline calibration and asset software - and use far less paper-at GSK's plant in Cork, Ireland.

03/06/2012

Securing Your Sustainability

Here Are Some Basic Ways to Go Green That Can Be Used Across Different Processes

06/06/2012

Security Standards Stewpot Simmering

Process Controls Engineers, IT Technicians, Manufacturers and End Users Have Been Left Hungry as Government Departments, Trade Organizations and Corporations Struggle to Develop and Coordinate Basic Standards for Securing Industrial Networks and Software

10/28/2008

Seeds with teeth!

Senior Tech Editor Jim Montague muses that maybe it's time to think up some new incentive programs for individuals and teams to make more and better innovations in process control applications.

01/05/2007

Seeing deeply into process control technologies

Executive Editor Jim Montague finds that even if there’s nothing new under the sun, what’s truly new may be a deeper understanding and appreciation of what we thought was so familiar.

08/07/2006

Seeking ISASecure Certification

ISA Has Developed ISASecure Certification Program

10/15/2013

Serious Sustainability

There's a Lot More to Truly Going Green Than Efficiency. Here's How Some Experienced End Users and Their Applications Are Mastering Process Sustainability

06/06/2011

Shared Documents Aid Valve Repairs

Using New File-Sharing and Procedural Tools in Complex Projects Can Save You Time and Headaches

01/10/2012

Shared Pains in the Neck

Most Professions and Industries Are Facing the Same Brain Drains, Struggles With IT, Going Green Questions and How to Use Social Media

08/15/2011

Shell Deepwater Taming Big Data Whale

Exception-based Surveillance Helps Manage Hundreds of Millions of Daily Data Points

06/19/2013

Shell's Long-Time Push for Fieldbus

What's Next? Making Foundation Fieldbus Systems More Mature. Meaning, Making Them More Broadly Applicable in Projects

11/18/2009

Shifting to a Safety Mindset

Profit Isn't Helped by Meeting Production Targets by Sacrificing People and Equipment Integrity. Accidents Really Are More Costly Than Safety

06/29/2009

Short on Specifics

Control Strives to Give Readers Specific Content They Can Use to Make Their Processes and Applications More Efficient and Make Their Stressful Jobs a Little Less So

02/06/2009

Simplicity = Freedom

Reducing Wiring Doesn't Just Save Labor, Time and Expenses

12/07/2011

Simulation Speeds Up

As They Get Closer to Real Time, Simulations Are Taking on Many More Varied Applications and Helping to Optimize Them

10/18/2013

Skills Shift to Software

Engineers Must Now Keep Up with a Lot of Microsoft Hot Fixes and Software Patches to Solve Vulnerabilities

07/01/2008

Sleek New Console Boosts Operator Effectiveness

Experion Orion Console Makes the Complex Seem Simple

06/03/2014