/Recent content on I&C Secure, IncHugoen/virtual-ics/ot-ciso-services/Mon, 01 Jan 0001 00:00:00 +0000/virtual-ics/ot-ciso-services/Our team can provide vCISO services to help guide your organization’s ICS/OT cybersecurity program. In this role, our team can provide your organization with services and guidance around Strategic Planning, Policy Development and Management, Risk Assessment and Management, Incident Response and Crisis Management, Security Awareness and Training, Vendor and Technology Management, and Compliance and Audit Support./firewall-configuration/Mon, 01 Jan 0001 00:00:00 +0000/firewall-configuration/Our team can review and modify your existing network firewall configurations to verify and ensure they are configured according to recommended cybersecurity practices and are customized appropriately for your organization’s data flows./threat-hunting/Mon, 01 Jan 0001 00:00:00 +0000/threat-hunting/For organizations who already have a cybersecurity program in place, you can advance your cybersecurity maturity with a threat hunting engagement. Guided by a carefully developed hunt hypothesis, our analysts will systematically search through your data looking for evidence of specific adversary TTPs, that could indicate the present of active or prior intrusions within your environment. Threat hunting is an advanced cybersecurity practice and requires that the necessary forensic and log data is captured and available for investigation./ics/ot-environment-cybersecurity-penetration-testing/Mon, 01 Jan 0001 00:00:00 +0000/ics/ot-environment-cybersecurity-penetration-testing/An ICS/OT focused penetration test or red/purple team engagement will test the effectiveness of your cybersecurity program and in-place cybersecurity controls. Our experts are skilled in conducting offensive cyber operations for the purposes of improving defensive capabilities. In addition to high level capabilities to develop and leverage exploit tools, our team has extensive experience designing, building, operating, maintaining, and defending ICS/OT environments. Having expertise as both defenders and attackers puts us in the best position to assist your validation and enhancement of your defenses./design-and-execute-ics/ot-cybersecurity-tabletop-drills/Mon, 01 Jan 0001 00:00:00 +0000/design-and-execute-ics/ot-cybersecurity-tabletop-drills/ICS/OT cyber incident response tabletop drills are the tool that will enable your organization to test and improve the effectiveness of your cybersecurity incident response plan. Our team can design a tabletop scenario for you that is based on existing ICS/OT cyber threats and their potential effect on your process, operations, and ICS/OT environment. This engagement brings all relevant stakeholders into the ICS/OT cybersecurity conversation and will be a key to developing a cybersecurity culture in your organization./ics/ot-focused-incident-response-plan-development/Mon, 01 Jan 0001 00:00:00 +0000/ics/ot-focused-incident-response-plan-development/Cyber incident response readiness is the highest priority ICS/OT cybersecurity capability for an organization to address. The output of the industrial process is often the critical mission of industrial critical infrastructure organizations. Therefore, it is imperative that your organization has a cyber incident response plan (CIRP) that appropriately addresses your ICS/OT environment. Our team has the knowledge, experience, and expertise to help you build or modify your CIRP to enable your organization to have an efficient and effective response to cyber incidents, thereby reducing the costs and impacts of a cyber incident and improving your ability to satisfy its mission./design-and-implement-an-ics/ot-vulnerability-management-program/Mon, 01 Jan 0001 00:00:00 +0000/design-and-implement-an-ics/ot-vulnerability-management-program/An approach to identify and address vulnerabilities within an ICS/OT environment requires a specialized approach. Vulnerability management programs designed for IT environments often cannot be extended onto ICS/OT environments. Our team understands the special considerations, cautions, risks, and challenges associated with ICS/OT vulnerability management. We can help your organization build the appropriate process and select the right technical approach to fit your organization./design-and-implement-host-based-and-network-based-event-monitoring-capability/Mon, 01 Jan 0001 00:00:00 +0000/design-and-implement-host-based-and-network-based-event-monitoring-capability/The capability to detect cybersecurity events before they become incidents or to detect adversary activity before they achieve their goal, is a critical component to cybersecurity readiness. With knowledge of your ICS/OT environment, architecture, and critical assets, our team will design and implement an appropriate detection capability for you by establishing a combination of host-based and network-based visibility solutions./design-and-implement-asset-cybersecurity-hardening/Mon, 01 Jan 0001 00:00:00 +0000/design-and-implement-asset-cybersecurity-hardening/From PLCs and Instruments to necessary applications and services, to servers and workstations, or to network and security devices, our team is equipped and knowledgeable to implement cybersecurity hardened configurations for the assets within your ICS/OT environment. We can utilize standardized third-party hardening guides or develop customized secure configurations, as needed. Cybersecurity hardening is a process of identifying the required functionality of an asset to serve the operation and eliminating or compensating for any additional services, feature, or weaknesses that are present within the asset deployment./design-and-implement-comprehensive-data-backup-processes/Mon, 01 Jan 0001 00:00:00 +0000/design-and-implement-comprehensive-data-backup-processes/Incident Response Readiness is the highest priority ICS/OT Cybersecurity capability for an organization to address. One key component in addressing readiness is to ensure your organization has a comprehensive, tested, and resilient data backup repository. Our team will design and implement a backup process that ensures your organization is prepared to recover from a loss of your critical assets./secure-remote-access-design-and-implementation/Mon, 01 Jan 0001 00:00:00 +0000/secure-remote-access-design-and-implementation/We will evaluate your use cases for necessary remote access to your ICS/OT environment including needs of internal staff, third-parties, system operational needs, or maintenance/diagnostics needs. Once we understand the needs, we can balance the need of access against the potential for unacceptable consequence, which enables us to “right-size” your secure remote access solution to meet your needs. Based on your organizational needs, our team can build custom secure remote access solutions or identify and specify the appropriate commercial solution./assessments/Mon, 01 Jan 0001 00:00:00 +0000/assessments/Our assessment methodology starts with gaining an understanding of the industrial process and operation, as that is the fundamental mission of an industrial critical infrastructure organization. We utilize our mechanical and controls systems engineering experience to evaluate the industrial control system (ICS) architecture from the perspective of its effectiveness to maintain resilient, reliable, and stable operations during failure modes including cyber-induced failures. We will also review the Operations Technology (OT) that supports the function of the ICS./physical-protection/Mon, 01 Jan 0001 00:00:00 +0000/physical-protection/Where appropriate, cyber-physical protections are the most effective cybersecurity control we can employ. For these unique controls, we utilize process and control system engineering practices to modify the process and/or industrial controls system in manner to the eliminate potential for cyber-induced impacts. These solutions are generally reserved to prevent the most unacceptable consequences such as health and safety impacts or prolonged operational outages./about/Mon, 01 Jan 0001 00:00:00 +0000/about/Mission I&C Secure is dedicated to helping our clients build and maintain a robust and successful cybersecurity program for their Industrial Control Systems/Operations Technology (ICS/OT). We are focused on providing consulting and ICS/OT cybersecurity and engineering services to Massachusetts and New England based industrial critical infrastructure organizations such as Public Water Suppliers and Electric Utilities. Our aim is to help our clients achieve a resilient industrial operation by applying cybersecurity controls in way that is sustainable and maintainable, while always striving to reduce undue complexity in the design and implementation./contact/Mon, 01 Jan 0001 00:00:00 +0000/contact/ Contact Us Email: I&C Info Phone: +1 (617) 312-3484 send reset/control-system-engineering-design-consulting/Mon, 01 Jan 0001 00:00:00 +0000/control-system-engineering-design-consulting/Whether your control system requires engineering design, a retrofit, modifications, maintenance or troubleshooting, our team has the knowledge, experience, qualifications, and credentials to provide full-service control system engineering services./controls-system-network-architecture/Mon, 01 Jan 0001 00:00:00 +0000/controls-system-network-architecture/Our team specializes in the design and implementation of reliable, resilient, stable, and secure control system network architectures. We have capabilities to design, deliver, and secure across various technologies including serial, IP, Radio, Cell, MPLS, DDS, etc. We understand the process of implementing a control system network optimized to allow stability, reliability, and security for an industrial control system./controls-systems-network-and-security-device-configuration/Mon, 01 Jan 0001 00:00:00 +0000/controls-systems-network-and-security-device-configuration/Our team can deliver or modify your network and security devices to provide a functional, optimized, and secure deployment across your environment. We specialize in Cisco, Hirschmann, HP, Stratix, SonicWALL, Fortinet, Zyxel, Belden Eagle, Tofino, and more./hmi-development/Mon, 01 Jan 0001 00:00:00 +0000/hmi-development/Our approach to process automation is always to provide simple intuitive HMIs that reduce complexity and enable operations teams to reliably monitor and control the process. Our team has experience with HMI software development including platforms such as GE iFix, Wonderware, VTSCADA, and more./industrial-process-and-control-system-troubleshooting/Mon, 01 Jan 0001 00:00:00 +0000/industrial-process-and-control-system-troubleshooting/Our team has significant experience troubleshooting and correcting process operational and control system problems. We have encountered and corrected problems from failure modes of all types. We are ready to help you optimize your process./partners/Mon, 01 Jan 0001 00:00:00 +0000/partners/Dragos is the industrial cybersecurity company on a relentless mission to safeguard civilization. In a world of riding cybersecurity threats, Dragos protects the most critical infrastructure - those that provide us with the tenets of modern civilization - from increasingly capable adversaries who wish to do it harm. Devoted to codifying and sharing our in-depth industry of ICS/OT systems, Dragos arms industrial defenders around the world with the knowledge and tools to protect their systems as effectively and efficiently as possible./plc-programming/Mon, 01 Jan 0001 00:00:00 +0000/plc-programming/Our team specialize in delivering resilient, reliable, fault tolerant and stable PLC programs. We have PLC programming experience with Rockwell Automation, Modicon, Siemens, GE, Automation Direct, and more./resources/Mon, 01 Jan 0001 00:00:00 +0000/resources/Speaking Engagements HACKED BY RUSSIA: U.S. Water Facilities are Being Targeted | The News on Merit Street Gus Serino on the News on Merit Street disscussing the recent cyberattacks on US water facilities Gus Serino, a water-sector cybersecurity expert and president of I&C Secure, provided critical insights into the vulnerabilities of water utilities in the wake of a cyberattack on a Texas water facility. Serino emphasized the need for addressing basic cybersecurity measures to prevent such incidents, highlighting the regulatory gaps that leave water systems exposed to adversaries.