It is unacceptable to take almost 4 years to recognize there are engineering issues associated with a cyber attack intended to damage equipment. It is even more unacceptable that after almost 4 years, OT still doesn’t get it right.
Malicious cyber incidents affecting the US grid from compromising control system vendors as well as the utilities themselves have been on-going for more than 15 years. Yet, NERC refuses to call cyber incidents “cyber”.
I will be speaking at the 2019 GE Edge and Controls Symposium September 10-12, 2019 at GE Corporate R&D headquarters in Niskayuna, NY. There will be a focus on physical-cyber systems including control system cyber security.
It is important to train engineers and IT/OT and expand the scope from network threat hunting to include ICS incident hunting. Perhaps we as an industry could collaborate on this important, but missing, task.
When you're looking for an electric motor for any industrial application, you'll hear the same question — AC or DC? If you're based in the United States, your default answer might be AC because that's what most buildings are set up to handle, but are they really the best choice?