IET Cyber Security for Critical Industries Conference
Our Sam Thom will be presenting: We weren’t supposed to find that: Lessons from hands on OT testing
Every OT assessment starts with a diagram. Unfortunately, attackers don’t just read diagrams.
Over the years we’ve encountered forgotten assets, unexpected trust relationships, default credentials in surprising places, and “temporary” solutions that became permanent. These issues were rarely obvious on paper, and many would have been difficult to identify through passive assessment alone.
Drawing on real-world assessment experience across critical industries, this talk shares a collection of OT security war stories and the lessons they reveal, giving some practical steps organisations can take to avoid becoming the next cautionary tale.
