Michael Assante's guest appearances

Michael Assante

Unsolicited Response

@BEERISAC: OT/ICS Security Podcast Playlist

Patrick Miller

Marty Edwards

Susan Peterson

Dave Whitehead

Andy Bochman

Vivek Ponnada

Bosch CyberCompare

Jay Healey

Edgard Capdevielle

Richard Seiersen

Rob Caldwell

Blake Sobczak

Matt Wyckhouse

Marina Krotofil

Ilan Barda

OwlTail

Podcast: Unsolicited Response Podcast (LS 29 · TOP 10% what is this?)Episode: Michael Assante InterviewPub date: 2018-06-12Michael Assante is my guest for this episode. He has a storied career and recently won the RSA Conference Award for Excellence in Information Security. Mike was the VP/CSO of NERC CIP, active at INL in the Aurora demonstration, led the development and implementation of the SANS ICS Security Training program, and even began working as CSO for an electric utility. In this episode we discuss: Mike's receiving the RSA award and what this means for the recognition of ICS security by the breoader information security community. Based on Mike's NERC CIP experience, what type of regulation would he recommend for another sector such as natural gas pipelines? Should we avoid the regulated entity determing and auditing the regulations? How should we make a regulation more efficient (more risk reduction for the level of effort and resources)? Based on Mike's involvement in Aurora, what messages and followup actions were intended and what was the actual impact? What lessons remain to be learned? What is the most valuable aspect that NCCIC should take forward from the old ICS-CERT? What should they do dramatically different? Why did Mike select SANS for his workforce development efforts (after starting his own organization prior to that)? Who is going to train the people from the Operations side where SANS has much less mindshare? How do we fill the gap for people that need more than cyber hygiene, but not a 3 or 5 day course? How should one going into a large, bureaucratic organization and maintain a forward push for change without getting being beaten down or getting ejected for pushing too hard. Links:  SANS ICS Security Training S4x19 Call For Presentations  This episode was sponsored by CyberX. Founded by military cyber experts with nation-state expertise defending critical infrastructure, CyberX has developed an end-to-end platform for continuous ICS threat monitoring and risk mitigation. Check out the CyberX Global ICS and IIoT Risk Report and my podcast from last year on the report with Phil Neray.The podcast and artwork embedded on this page are from Dale Peterson: ICS Security Catalyst and S4 Conference Chair, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.

Podcast: <a href="https://www.listennotes.com/podcasts/unsolicited-response-podcast-dale-peterson-6E91QCvGOcU/" rel="nofollow" target="_blank">Unsolicited Response Podcast</a> (LS 29 · TOP 10% <a href="https://www.listennotes.com/listen-score/" rel="nofollow" target="_blank">what is this?</a>) Episode: <a href="https://www.listennotes.com/e/64eb78e28b7f41d4a598540c83ffba76/" rel="nofollow" target="_blank">Michael Assante Interview</a> Pub date: 2018-06-12 Michael Assante is my guest for this episode. He has a storied career and recently won the RSA Conference Award for Excellence in Information Security. Mike was the VP/CSO of NERC CIP, active at INL in the Aurora demonstration, led the development and implementation of the SANS ICS Security Training program, and even began working as CSO for an electric utility. In this episode we discuss: Mike's receiving the RSA award and what this means for the recognition of ICS security by the breoader information security community. Based on Mike's NERC CIP experience, what type of regulation would he recommend for another sector such as natural gas pipelines? Should we avoid the regulated entity determing and auditing the regulations? How should we make a regulation more efficient (more risk reduction for the level of effort and resources)? Based on Mike's involvement in Aurora, what messages and followup actions were intended and what was the actual impact? What lessons remain to be learned? What is the most valuable aspect that NCCIC should take forward from the old ICS-CERT? What should they do dramatically different? Why did Mike select SANS for his workforce development efforts (after starting his own organization prior to that)? Who is going to train the people from the Operations side where SANS has much less mindshare? How do we fill the gap for people that need more than cyber hygiene, but not a 3 or 5 day course? How should one going into a large, bureaucratic organization and maintain a forward push for change without getting being beaten down or getting ejected for pushing too hard. Links: <ul> <li><a href="https://ics.sans.org/" rel="nofollow" target="_blank">SANS ICS Security Training</a></li> <li><a href="https://s4xevents/cfp/" rel="nofollow" target="_blank">S4x19 Call For Presentations</a></li> </ul> This episode was sponsored by <a href="https://cyberx-labs.com/" rel="nofollow" target="_blank">CyberX</a>. Founded by military cyber experts with nation-state expertise defending critical infrastructure, CyberX has developed an end-to-end platform for continuous ICS threat monitoring and risk mitigation. Check out the <a href="https://cyberx-labs.com/en/risk-report-2017" rel="nofollow" target="_blank">CyberX Global ICS and IIoT Risk Report</a> and <a href="http://unsolicitedresponse.libsyn.com/understanding-interpreting-ics-security-statistics" rel="nofollow" target="_blank">my podcast from last year on the report with Phil Neray</a>.The podcast and artwork embedded on this page are from Dale Peterson: ICS Security Catalyst and S4 Conference Chair, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.

Michael Assante Interview

Michael Assante is my guest for this episode. He has a storied career and recently won the RSA Conference Award for Excellence in Information Security. Mike was the VP/CSO of NERC CIP, active at INL in the Aurora demonstration, led the development and implementation of the SANS ICS Security Training program, and even began working as CSO for an electric utility. In this episode we discuss: Mike's receiving the RSA award and what this means for the recognition of ICS security by the breoader information security community. Based on Mike's NERC CIP experience, what type of regulation would he recommend for another sector such as natural gas pipelines? Should we avoid the regulated entity determing and auditing the regulations? How should we make a regulation more efficient (more risk reduction for the level of effort and resources)? Based on Mike's involvement in Aurora, what messages and followup actions were intended and what was the actual impact? What lessons remain to be learned? What is the most valuable aspect that NCCIC should take forward from the old ICS-CERT? What should they do dramatically different? Why did Mike select SANS for his workforce development efforts (after starting his own organization prior to that)? Who is going to train the people from the Operations side where SANS has much less mindshare? How do we fill the gap for people that need more than cyber hygiene, but not a 3 or 5 day course? How should one going into a large, bureaucratic organization and maintain a forward push for change without getting being beaten down or getting ejected for pushing too hard. Links:  SANS ICS Security Training S4x19 Call For Presentations  This episode was sponsored by CyberX. Founded by military cyber experts with nation-state expertise defending critical infrastructure, CyberX has developed an end-to-end platform for continuous ICS threat monitoring and risk mitigation. Check out the CyberX Global ICS and IIoT Risk Report and my podcast from last year on the report with Phil Neray.

Michael Assante is my guest for this episode. He has a storied career and recently won the RSA Conference Award for Excellence in Information Security. Mike was the VP/CSO of NERC CIP, active at INL in the Aurora demonstration, led the development and implementation of the SANS ICS Security Training program, and even began working as CSO for an electric utility. In this episode we discuss: Mike's receiving the RSA award and what this means for the recognition of ICS security by the breoader information security community. Based on Mike's NERC CIP experience, what type of regulation would he recommend for another sector such as natural gas pipelines? Should we avoid the regulated entity determing and auditing the regulations? How should we make a regulation more efficient (more risk reduction for the level of effort and resources)? Based on Mike's involvement in Aurora, what messages and followup actions were intended and what was the actual impact? What lessons remain to be learned? What is the most valuable aspect that NCCIC should take forward from the old ICS-CERT? What should they do dramatically different? Why did Mike select SANS for his workforce development efforts (after starting his own organization prior to that)? Who is going to train the people from the Operations side where SANS has much less mindshare? How do we fill the gap for people that need more than cyber hygiene, but not a 3 or 5 day course? How should one going into a large, bureaucratic organization and maintain a forward push for change without getting being beaten down or getting ejected for pushing too hard. Links: <ul> <li><a href="https://ics.sans.org/" rel="nofollow" target="_blank">SANS ICS Security Training</a></li> <li><a href="https://s4xevents/cfp/" rel="nofollow" target="_blank">S4x19 Call For Presentations</a></li> </ul> This episode was sponsored by <a href="https://cyberx-labs.com/" rel="nofollow" target="_blank">CyberX</a>. Founded by military cyber experts with nation-state expertise defending critical infrastructure, CyberX has developed an end-to-end platform for continuous ICS threat monitoring and risk mitigation. Check out the <a href="https://cyberx-labs.com/en/risk-report-2017" rel="nofollow" target="_blank">CyberX Global ICS and IIoT Risk Report</a> and <a href="http://unsolicitedresponse.libsyn.com/understanding-interpreting-ics-security-statistics" rel="nofollow" target="_blank">my podcast from last year on the report with Phil Neray</a>.