Sign in Subscribe

Brian Weidner

Brian Weidner

NCSC Secure Connectivity Principle 8: Establish an Isolation Plan

NCSC Secure Connectivity Principle 8: Establish an Isolation Plan

InfoSec Made Easy OT Security Leadership | NCSC Guidance Series The plan you hope you never need — and why having it ready is non-negotiable in OT security Every other principle in this series has focused on preventing compromise, detecting threats, and limiting the spread of attacks that do occur. Principle

Shadow AI — What New CISOs Need to Do Before It Bites Them

Shadow AI — What New CISOs Need to Do Before It Bites Them

It was a Tuesday afternoon when one of our business analysts dropped a file into the shared drive with a note attached: “Used Claude to summarize all the customer complaint data — saved me three hours!” She was thrilled. I was not. Not because she had done something wrong. She hadn’

NCSC Secure Connectivity Principle 7: Ensure All Connectivity is Logged and Monitored

NCSC Secure Connectivity Principle 7: Ensure All Connectivity is Logged and Monitored

InfoSec Made Easy OT Security Leadership | NCSC Guidance Series Why logging and monitoring is your last line of defense in OT — and what effective OT visibility actually requires All security controls, however well-designed, carry the possibility of failure. Boundaries can be breached. Segmentation controls can be circumvented. Authentication mechanisms

NCSC Secure Connectivity Principle 6: Limit the Impact of Compromise

NCSC Secure Connectivity Principle 6: Limit the Impact of Compromise

InfoSec Made Easy OT Security Leadership | NCSC Guidance Series Assume breach, contain the blast radius — designing OT environments to survive compromise There is a maturity progression in how organizations think about security. The first stage is prevention — the belief that with enough controls, attacks can be stopped at the perimeter.

NCSC Secure Connectivity Principle 5: Harden Your OT Boundary

NCSC Secure Connectivity Principle 5: Harden Your OT Boundary

InfoSec Made Easy OT Security Leadership | NCSC Guidance Series Why the OT boundary is your primary defensive line — and what it takes to make it hold In most OT environments, the devices and systems inside the network were not designed to defend themselves. Legacy PLCs, older SCADA components, and even

NCSC Secure Connectivity Principle 4: Use Standardised and Secure Protocols

NCSC Secure Connectivity Principle 4: Use Standardised and Secure Protocols

InfoSec Made Easy OT Security Leadership | NCSC Guidance Series Why the protocols your OT systems use to communicate are as important as the networks they run on Most cybersecurity professionals spend a great deal of time thinking about network architecture — firewalls, segmentation, DMZs, access controls. These are important, and the

NCSC Secure Connectivity Principle 3: Centralise and Standardise Network Connections

NCSC Secure Connectivity Principle 3: Centralise and Standardise Network Connections

InfoSec Made Easy OT Security Leadership | NCSC Guidance Series Why OT connectivity complexity is a security problem — and how structured architecture solves it Walk through the network diagram of most mature OT environments and you will find the same story told in topology: an accumulation of connectivity decisions made over