You shouldn't be spending precious time setting up network monitoring.
You need to spend time on your network architecture and make sure your ICS/OT isn't exposed to the internet or the corporate network.
Stop spending money on blinky lights and work on the basics.
I might have done my job too well....
My aggressive equipment refresh has almost my whole fleet well below the manufacturer's generous warranty period.
I might actually have time to focus more on security enhancements. 🤪
It didn't take long for Dragos to share my contact information with Runzero....
No, I don't want a product that does active scanning of my fucking network.
I see ICS/OT cybersecurity guru's posting on LinkedIn about protecting PLCs.
My question is. What are they actually doing about it?
I think it's a lot of "talk the talk" and not much of "walk the walk".