Collaborative culture and partnering for risk assessments and observations on the Federal Aviation Administration’s, and other regulations mandates for increased cyber resilience and compliance.

From superalloys to pharmaceuticals to next-generation computing. On orbit production and research can deliver results not found anywhere else on earth.
Off Planet manufacturing is here and the cybersecurity and resilience needed to keep to leverage this capability is essential!

We all depend on industrial infrastructure: power and water as well as products from manufacturing, oil and gas, and mining companies. In 2022 and 2023 the cyberthreats in operational technology – OT – environments have escalated significantly, and it is essential that we examine the cybersecurity strategy for the overall industrial ecosystem to ensure it is keeping pace with the adversaries. Hear about a unique development in malware targeting OT, substantial increases in ransomware groups targeting OT, supply chain risks in the OT environment, and more importantly: what we can – and should – do about it.

Ignore, a buildings cybersecurity risks, and not much in the way of cybersecurity tools, systems and related technologies inside the building will matter.

Ken Kruz is responsible for the cybersecurity of billions in real estate and information systems assets The corporate campuses his firm is responsible for house a wide of array of companies that are essential to national security.

Daryl Haegley is a recognized expert who over the years has advocated for increased awareness of the ICS cybersecurity across a wide array of threat vectors.

Our Nations critical infrastructure is at risk. Cyber threats to Industrial Control Systems (ICS) are expanding across various sectors. Additional Government investment is needed to cross the “valley of death”.

Leverage the solid work from the capability demonstration (JCTD).

Operational Defense of OT with near real time mitigation(s) are needed for critical sites

“…MOSAICS addresses the increasing serious threats to the critical infrastructures upon which we depend to accomplish our Defense critical missions. I can’t say enough good things about the MOSAICS team……. They have assembled a dream team of DoD and industry partners and they are effectively demonstrating the military utility of the integration of sufficiently mature technologies…”

The new SEC regulations are taking over corporate board room discussions. What is the impact to our nation’s critical infrastructure asset owners and their supply chains that put large SEC regulated corporations potentially at risk as well. What do corporations large and small need to avoid liability.

The rise of AI powered malware, disinformation and cyber-attacks is here! Is hour organization ready? Do you know the threat actors, their playbooks and what they are chattering about as the plot their next series of campaigns against U.S. corporations and the government. Acting as a cyber-criminal gang or as proxies for nation states. It is a growing and active clear and present danger that our nation is racing to counter. Recorded Future has been at the forefront in the DoD and Intelligence Community helping to get out in front of the threat and find the needles in the haystack.

McLean, Va. & Bedford, Mass., September 5, 2023 — MITRE Caldera™ for OT is now publicly available as an extension to the open-source Caldera platform, allowing security teams to run automated adversary emulation exercises that are specifically focused on threats to operational technology (OT).

The first Caldera for OT extensions were developed in partnership between the Homeland Security Systems Engineering and Development Institute™ (HSSEDI), a federally funded research and development center that is managed and operated by MITRE for the Department of Homeland Security (DHS), and the Cybersecurity and Infrastructure Security Agency (CISA) to increase the resiliency of critical infrastructure. Adversary emulation has long helped defenders of information systems exercise and improve their cyber defenses by using real adversary techniques. As an open-source, scalable adversary emulation platform with MITRE ATT&CK® as its backbone, Caldera helps cyber defenders save time, money, and energy by automating adversary emulation operations, security assessments, and red-, blue-, and purple-teaming. With the release of Caldera for OT, defenders of industrial control systems now have the same benefit. Caldera for OT also enables Factory and Security Acceptance Testing (FAT/SAT), where a reliable and consistent testing process is critical to ensure an accurate and repeatable assessment.

“Protecting our nation’s critical infrastructure is essential. With Caldera for OT, we are pleased to partner with CISA to help defenders of operational technology exercise and improve the defenses of these critical systems,” said Yosry Barsoum, vice president and director, Center for Securing the Homeland at MITRE.

This work emerged from CISA and HSSEDI’s collaboration to automate adversary emulation simulations in CISA’s Control Environment Laboratory Resource (CELR), a simulated environment for research on operational technology.

The rising – Nation State Threats to the U.S. & his thoughts on the National Security Strategy

Facing the challenge and changing how the pipeline for cybersecurity skills are developed to close the gap. A recent informal analysis by The GBC Academy again points to gaps and a narrow approach to cybersecurity education and training that leaves out ICS, space, cyber policy and other skills beyond the well-known traditional academic curriculums and available training. A recent cyber skills competition for ICS resulted in not a single academic or government participant being able to defend or analyze OT and IoT threats. Certificate programs, the Centers of Academic Excellence in Cybersecurity, Cybersecurity workforce grants, are amazing contributors to the cyber workforce pipeline. But all of this and more and we still have a gap in the cybersecurity workforce in terms of numbers and qualifications. What is the cure and what are the new methods we need to ensure that our nation breaks down the barriers to careers in cybersecurity?

This panel will deal with ransomware attacks and the mitigation and pre-attack and recovery recommendations for any business with a special focus o manufacturers using anonymized cases members of the panel have helped on.

For suppliers to Department of Defense, large defense contractors or the civilian sector. An expert discussion on the CMMC, the DoD updates, tips on how to prepare to comply and also the Cybersecurity and Infrastructure Security Agency (CISA) policy.

For two government administrations, the CMMC has been the talk of the nation. How to comply, when to comply, who should comply the cost of compliance, supplier risk surveys, false claim act litigation fears, and again the cost!
Fernando has the latest updates and tips. This is a great session for MEPs, South Florida Defense Contractors and any business needing interested in cyber resilience and compliance.
Let’s face it, there is no escaping compliance as our nation steps up its regulatory measures to protect the critical businesses and supply chain and a world replete with cybersecurity threats.

X. Eyee was part of the Google Responsible AI organization, a Blockchain Ambassador at Microsoft, where she worked with Fortune 500 companies.