免费实现 SANS ICS 5 项关键控制的自动化.pdf

1、 2025 UtilSec,LLCMichael Holcomb,GRID,CISSP,ISA 2025 UtilSec,LLC 2025 UtilSec,LLCDisclaimer The information provided in this presentation is for informational purposes only.All knowledge obtained must be used for legitimate,authorized purposes.The views written and discussed in this course are those

2、 of the instructor and not any of their employers or other affiliated organizations.NEVER upload information considered sensitive to any online platform!2025 Mike Holcomb 2025 UtilSec,LLCAbout Mike Fellow for Cyber Security at Fluor ICS/OT Cybersecurity Global Lead Founder of BSidesICS and BSidesGre

3、enville CISSP,GRID,GICSP,ISA 62443,GPEN,GCIH,etc.Masters degree from SANS Technology Institute Posts on LinkedIn and YouTube on OT/ICS Cybersecurity 2025 UtilSec,LLCAgenda*Not So Free On Our Last Episode 1.ICS Incident Response 2.Defensible Architecture 3.ICS Network Visibility Monitoring 4.Secure R

4、emote Access 5.Risk-based Vulnerability Management 2025 Mike Holcomb 2025 UtilSec,LLC*Not SO Free 2025 Mike Holcomb 2025 UtilSec,LLCOn Our Last Episode GenAI can be used to create simple and complex cyber security tools Used for both defense and offense Attackers are using GenAI right now to stay ah

5、eadGenAI is not going to let defenders outright beat the attackers You wont lose your job to GenAI.Youll lose your job to someone using GenAI.GenAI is the worst its ever going to be today 2025 Mike Holcomb 2025 UtilSec,LLCThe SANS 5 ICS Critical Controls 2025 Mike Holcomb 2025 UtilSec,LLC1.ICS Incid

6、ent Response 2025 Mike Holcomb 2025 UtilSec,LLC1.ICS Incident ResponseSource:https:/ 2025 Mike Holcomb 2025 UtilSec,LLCFinding Relevant Incidents for Your Sector 2025 Mike HolcombPrompt:2025 UtilSec,LLCWhat about the Water Treatment Industry?2025 Mike Holcomb 2025 UtilSec,LLCWhat about the Water Tre