Safeguarding the Industrial Frontier - OT SOC and Incident Response

Explore the critical intersection of cybersecurity and industrial operations in this 20-minute DEF CON 33 conference talk that examines the specialized security challenges facing Operational Technology (OT) environments. Delve into the unique threats targeting industrial control systems as digital and physical worlds increasingly converge, requiring organizations to develop sophisticated defense strategies beyond traditional IT security approaches. Learn about the essential components of building effective OT Security Operations Centers (SOCs) that can monitor, detect, and respond to cyber threats in industrial settings where safety and operational continuity are paramount. Discover best practices for establishing resilient SOC capabilities specifically designed for OT environments, including the tools, processes, and expertise required to protect critical infrastructure. Examine complex incident response scenarios unique to industrial systems, understanding how to navigate the delicate balance between cybersecurity measures and maintaining essential operations. Gain insights into strategies for ensuring both operational continuity and safety while defending against sophisticated cyberattacks that could potentially cause physical damage or disrupt critical services in our interconnected industrial landscape.