ICS 2022

If you’ve been around the cybersecurity space for a while now, you’ve probably heard the term “Shadow IT”. But did you know that there is an even bigger blind spot inside your operational technology (OT) infrastructure? Executives and SOC analysts almost always have an incomplete picture of what’s happening at the plant or site level even though these are the critical, moneymaking parts of a business.

The Shadow OT phenomenon is an important problem to solve. If you don’t have 100% visibility into and control of your operational systems (including the legacy ones), you may not be able to identify and respond to cyberthreats quickly enough to avoid the impacts of an attack, which could include anything from process disruption to severe environmental damage or even fatalities.

This session will outline how security practitioners and executives can shine light on their Shadow OT. We’ll cover:

• Different methods for collecting endpoint and network data out of OT environments
• How to use that data to create context for threat and incident response
• What data executive teams should know
• The best formats for sharing OT data internally