Table of Contents

• IT & OT/ICS Cybersecurity Training Needs

  • Bridging IT & OT: Training for Convergence and Res …

  • Key Stages of Manufacturing Lifecycle and Cybersec …

  • Learning from Breaches: Case Studies and Lessons

  • Learning from Recent Breaches: Case Studies and Le …

  • Updates on Securing Things Academy (STA)

    • 📢 Spread the Word and Share the Knowledge 📢

  • Cybersecurity Awareness Month:

• My Ask

Hi there, Securing Things Community,

📢 IT & OT/ICS Cybersecurity Training: Boost Your Defense Game! 🛡️

"In the high-stakes world of Industry 4.0, being unprepared is the biggest risk."

In today’s fast-evolving technology dependent industrial landscape, business demands efficiency, productivity and real-time insights, driving digital transformation initiatives towards an industry 4.0 operations. Therefore, staying secure isn’t just about locking down the IT/office networks, it’s about fortifying the entire industrial automation stack (from PLC/edge devices to Cloud). IT and OT/ICS environments are facing unprecedented threats, and only those with targeted cybersecurity knowledge, from shop floor to the boardroom, can navigate them effectively.

In this newsletter edition, we’ll cover IT & OT/ICS cybersecurity training requirements for an industrial organisations and provide a quick update on Securing Things Academy. In addition, I’ll be sharing my most viewed social media posts, ways in which I can help, and my asks.

IT & OT/ICS Cybersecurity Training Needs

🚨 Why IT & OT/ICS Cybersecurity Training Is Crucial Today 🚨

With Industry 4.0 transforming how we work and connect, attackers are zeroing in on both IT and OT/ICS (Industrial Control Systems) networks. As more manufacturing processes integrate with digital systems, unique security challenges arise that don’t have one-size-fits-all solutions. The message is clear: to defend both IT and OT systems, specialized training is now non-negotiable.

🔥 IT vs. OT Security: Key Differences That Can’t Be Ignored 🔥

While IT networks forms large part of entry points of threats to the business operations, industry have seen notable large scale attacks and or incidents occurring directly within OT/ICS environments. IT systems typically prioritize data security and confidentiality, while OT systems in industrial settings prioritize availability and safety. This difference shapes the entire approach to securing these environments from people, processes and technology perspective.

Bridging IT & OT: Training for Convergence and Resilience

The interaction of IT, IIOT and OT/ICS systems in manufacturing has brought increased efficiency but also heightened cybersecurity risks. Many manufacturers face challenges in managing cybersecurity for an IT and OT networks, largely due to insufficient cross-functional training. For IT and OT/ICS teams working on digital transformation initiatives, IIOT, 4.0 projects, specialised cybersecurity training in understanding cyber risks throughout the automation stack, manufacturing lifecycle, and applicable security controls is crucial to safeguarding both systems while maintaining operational integrity.

Key Stages of Manufacturing Lifecycle and Cybersecurity

Each stage of the manufacturing lifecycle - from selling, procurement, planning, execution, production, inventorying, shipping to delivery; presents an attack vector and carries specific cybersecurity risks that specialised role based cybersecurity training programs must be addressing.

Learning from Breaches: Case Studies and Lessons

High-profile attacks have underscored vulnerabilities within manufacturing, with lessons applicable across the industry. Following are two examples:

• Colonial Pipeline Incident (2021): While not a manufacturing facility, the Colonial Pipeline attack highlighted risks tied to unmonitored OT systems. The response delays significantly impacted operations, demonstrating the critical need for incident response readiness.

• JBS Foods Ransomware Attack: This attack emphasized the importance of data redundancy and swift recovery processes, as JBS Foods was able to resume operations relatively quickly, minimizing financial loss.

Regulations, Standards & Best Practices - Training Requirements

Here are references to international regulations, standards, and best practices requirements that highlight the importance of role-based cybersecurity awareness and training for critical infrastructure and or industrial environments:

Updates on Securing Things Academy (STA)

I’ve been working on the very ideas, thoughts, and all over again on a hustle called “Securing Things Academy” or simply “STA” for later, to address the above highlighted needs. I am way beyond my original timelines that I have set for myself at the start of the year, primarily due to other commitments and challenges (more on that later).

Few Updates - STA Pages that are live

Below is a list of initial offerings (along with their current status, description & certification):

Checkout a short brief about IT & OT/ICS CySEAT → RFT = Ready for Transformation.

Watch the following short 3+ mins teaser for IT & OT/ICS CySEAT course below:

I am looking for your help!

I’d love to hear from each one of our subscribers and or visitors.

→ If the information provided on the STA live links (see table above), resonates with the need for the hour, in particular for manufacturers / asset owners. If not, why not and what you believe to be the most pressing cybersecurity challenge.

→ Do you have any interesting preferences and suggestions on course names, delivery style (on-demand vs. cohort style), community or no community & tool (discord/other), pricing (what you’ll be willing to pay for any specific formats) and or require any clarification on these digital products, that’ll help make an enrolment decision?

Do drop a note at “newsletter[@]securingthings[dot]com”.

For providing valuable and interesting suggestions, you may qualify for additional discounts.

📢 Spread the Word and Share the Knowledge 📢

Lastly, if you know someone, who would benefit from this - do forward this edition or share it on social media to help spread the message on specialised cybersecurity trainings to help protect our industry’s most essential IT & OT/ICS systems. Knowledge and preparedness are our strongest tools! Sharing is caring.

Stay safe, and stay resilient.

Cybersecurity Awareness Month:

As part of cybersecurity awareness month - here are 3 part post series I shared earlier on socials, for free cybersecurity awareness training videos on following topics:

• Part 1 - Spear Phishing.

• Part 2 - Password Security 

• Part 3 - Information Security.

My Ask

I invite #SecuringThings community to share their feedback.

Your feedback and input is invaluable to me as we work together to strengthen our cybersecurity defenses and create a safer and smarter digital society. Thank you for your trust and continued support.

Do register, validate your email, and request login link to submit poll to be able to enter a chance to win a future course giveaway.

Also let me know:

Thanks for reading - until next edition!

It’s a Great Day to Start Securing Things for a Smart & Safer Society.

Take care and Best Regards,

M. Yousuf Faisal.

Follow Securing Things on LinkedIn | X/Twitter & YouTube.