Can you Zero Trust OT ? I Don’t Trust my Toaster

Every CISO knows the OSI Model; however, they and many CIO’s are not aware of the Purdue model for OT & ICS Network Security. Understanding the Purdue Security Model is critical for any CIO, COO, and CISO. This has become the most exploited weak point in current times, for OT target attacks. Chris Inglis, the National Cyber Director has called for US organizations to become “Harder Targets” based on this wide-scale vulnerability landscape. In this session, Paul Arceneaux, VP Mission Secure, will discuss the Purdue Security Model, and its flaws in a world where the boundaries between OT and IOT become increasingly blurred, leaving networks insecure, and with it vulnerable for attack. Citing his 25 years of experience in the SaaS / PaaS / IaaS - Networking Security field, he will discuss the operational issues of enterprise topography, asset discovery, asset control, and access security. The key takeaways you will learn from this session are: 1. The difference between Greenfield and Brownfield in a hyper converged environment 2. How to quantify risks in the cyberphysical environment 3. Best practice for operational and security efficiency This is an interactive session, so please bring coffee and questions.