Resources
Speaking Engagements
Unsolicited Response Podcast
Water Sector Cyber Risk with Gus Serino
Gus joins Dale Peterson on his podcast to discuss the ICS/OT cybersecurity of the drinking water industry.
SANS ICS Summit 2022, H2OSecCon 2022, H20SecCon2023
Secure Remote Access (ICS/OT Secure Remote Access)
Gus was able to deliver a talk on the guiding principles for implementing a secure remote access architecture for ICS/OT environments. He presented this information at the SANS ICS Sumit as well as WaterISAC’s H20SecCon Conference in 2022 and in 2023.
SANS ICS Summit 2022
Detection-In-Depth: Out of Band Monitoring for Critical Process Parameters
At the SANS ICS Summit in 2022, Gus discusses how organizations can add resilience and validation to monitoring of critical process parameters utilizing data loggers and out-of-band communications. The solution can help organizations identify when their primary control system is not accurately reporting field measurements including when being manipulated via cybersecurity incidents.
SANS ICS Summit 2021
Cyber-Physical Safety Systems (Cyber-Physical Safety Systems for Water Utilities
At the SANS ICS Summit in 2021, Gus Serino and Andrew Hildick-Smith discuss how organizations can utilize modifications to their control and monitoring systems to add operational resilience and limit potential impacts of cybersecurity incidents.
ISA WWID Webinar: Expert Panel
ISA WWID to present Industrial Cybersecurity Strategy Webinar for the Water/Power Industries
Gus joins Tim Conway, Andrew Hildick-Smith, and Christopher Walcutt to ICS/OT cybersecurity within the water and power industries.
ICS Concepts Fireside Chat with Don C. Weber and Gus Serino (ICS Fireside Chat- Principal Industrial Hunter, Dragos
Gus joins Don C. Weber on his ICS/OT Cybersecurity Fireside Chat series to discuss out of band monitoring of critical process control signals.
ICS Concepts Fireside Chat with Gus Serino - (ICS Fireside Chat - Oldsmar Attack)
Gus joins Don C. Weber on his ICS/OT Cybersecurity Fireside Chat series to discuss the Oldsmar Water Cybersecurity incident.
Blogs, Articles, and Guidance
- OT Cybersecurity Best Practices for SMBs: Managing Default Passwords and Identifying ICS/OT Devices Exposed to the Internet (dragos.com)
- The Oldsmar Water Treatment Facility Cyber Attack (dragos.com)
- How SMBs Can Use the Collection Management Framework (CMF) to Prepare for a Cyber Incident | Dragos
- SMB Cybersecurity Best Practices For Your OT Environment | Dragos
- Industrial Cybersecurity Requirements Can Challenge SMBs | Dragos
Press & Mentions
- Florida Water Utility Hack Highlights Risks to Critical Infrastructure (darkreading.com)
- Kansas Water Utility Attack Underscores Security Limitations in Municipalities | Decipher (duo.com)
- What Does the Florida Water Supply Incident Mean for ICS Cybersecurity? (isa.org)
- What Does the Florida Water Supply Incident Mean for ICS Cybersecurity? | by International Society of Automation (ISA) | Medium