Breaking down the layers of cyber security
•
0 gefällt mir•126 views
This is a continuation of the 2015 presentation zooming in on attack surface, attack anatomy and how of each of the 6 risk strategies can play a role in keeping your business secure. If you're a grid operator that is... Presentation delivered at Global Energy & Utility Cyber Security Summit, Berlin on 27 September 2016
Empfohlen
Empfohlen
Weitere ähnliche Inhalte
Was ist angesagt?
Was ist angesagt? (20)
Ähnlich wie Breaking down the layers of cyber security
Ähnlich wie Breaking down the layers of cyber security (20)
Mehr von Michel de Goede
Mehr von Michel de Goede (20)
Kürzlich hochgeladen
Kürzlich hochgeladen (20)
Breaking down the layers of cyber security
- 1. Breaking down the layers of Cyber Security Digital Strategy & Architecture Michel de Goede
- 2. digital strategy & architecture Welcome 2Image: Cartoonstock
- 3. digital strategy & architecture Topics 1. How a grid operator – or any company - is actually an IT company 2. Threat landscape 3. Vulnerabilities? 4. Recognizing and dealing with risk 5. Resilience is the word 3
- 4. digital strategy & architecture 1. Electric Vehicles 4
- 5. digital strategy & architecture 1. Self sufficient homes and offices 5Image: Zerohouse
- 6. digital strategy & architecture 1. Net producing homes and offices 6Image: Adam Mork / IEEE
- 7. digital strategy & architecture 1. Overproduction 7Image: Agora Energiewende (8 May 2016)
- 8. digital strategy & architecture 1. Microgrids 8Image: Zown (an Alliander company)
- 9. digital strategy & architecture 1. Maximum asset usage and minimal asset cost 9Images: TenneT, E&I Consulting
- 10. digital strategy & architecture 1. Automation 10Image: Zenodys
- 11. digital strategy & architecture 1. From traditional grid operations 11
- 12. digital strategy & architecture 1. To energy transition readiness 12Images: Anshul Shrivastava, Alliander
- 13. digital strategy & architecture 2. Every day life 13 Liveable Workable Sustainable Quality of life Economic development Environmental harmony
- 14. digital strategy & architecture 2. Nation states 14Image: Lloyds city risk index
- 15. digital strategy & architecture 2. Cyber terrorists 15 1. An attack must be politically-motivated in nature and lead to death or injury 2. An attack must cause fear and/or physical harm through cyber techniques 3. An attack must be against critical information infrastructures such as financial, energy, transportation and government Source: Ahmad & Yunos (2012)
- 16. digital strategy & architecture 2. Cyber criminals 16Image: ABC Bank
- 17. digital strategy & architecture 2. Lone wolves 17Image: the contemporary shaman
- 18. digital strategy & architecture 2. Hail Mary actors 18Image: TenneT
- 19. digital strategy & architecture 3. The grid 19
- 20. digital strategy & architecture 3. ICS 20Image: Erwin Kooi (Alliander) Old New
- 21. digital strategy & architecture 3. Smart meters 21
- 22. digital strategy & architecture 3. HAN 22Image: Domoticz
- 23. digital strategy & architecture 3. IoT 23
- 24. digital strategy & architecture 3. Employees 24
- 25. digital strategy & architecture 4. Ostrich 25
- 26. digital strategy & architecture 4. Accept 26
- 27. digital strategy & architecture 4. Reduce potential impact 27Images: G. van Willigen
- 28. digital strategy & architecture 4. Reduce impact probability 28
- 29. digital strategy & architecture 4. Transfer 29Image: Lloyds
- 30. digital strategy & architecture 4. Avoid 30
- 31. digital strategy & architecture 4. Exploit 31Image: Spacex
- 32. digital strategy & architecture 5. Anatomy of an attack 32Image: Erwin Kooi, Alliander
- 33. digital strategy & architecture 5. Three stages 33Image: Wim Bouman, Alliander
- 34. digital strategy & architecture 5. Situational awareness 34Image: Erwin Kooi, Alliander
- 35. digital strategy & architecture 5. Network monitoring 35
- 36. digital strategy & architecture 5. Physical monitoring 36
- 37. digital strategy & architecture 5. Incident response 37Image: Thor / Alliander
- 38. digital strategy & architecture 5. Incident response 38
- 39. digital strategy & architecture 5. Respond 39
- 40. digital strategy & architecture 5. Takeaways 40 One can have a very sound risk policy mix that fits the risk appetite Normally this should help reduce residual (cyber security) risk And hence the risk vs reward rate Internal expertise ideally matches external (but we are a grid operator, not a security specialist) Isolation is an art form and so is redundancy Resilience is obtained when residual risk is small enough
- 41. digital strategy & architecture Thank you! 41 Questions?