Hire people who aren't afraid to ask why.

Shit rolls down hill. But clearly bullshit goes up the ladder.

Microsoft in the ICS/OT:

You need to educate yourself on ICS/OT security. Before someone that is not educated on ICS/OT security takes you in the wrong fucking direction.

Sometimes you do something so technically fucking cool! Sadly nobody you know will understand what the fuck you are talking about or why it's so awesome.

Some days integration in ICS/OT feels more like hacking than integration. Fucking with software and hardware to make it do what you need it to do, because the vendor took short cuts or implemented something differently than another vendor.

It's fucking hard being a 🦄

Wasn't long ago IT and Cisco was trying to sell me on VXLAN. Most definitely don't need VXLAN in my environment. I'm not even sure the corporate needs VXLAN. VXLAN is for datacenters.

Planning your work week in ICS/OT:

If you don't know about virustotal, you should totally check it out. Great tool for scanning files. Just don't be stupid and upload sensitive configuration files or documents. www.virustotal.com/gui/home/upl...

If you're an ICS/OT engineer you should learn how to configure firewalls. It is easier than configuring a PLC so you should pick it up pretty quick.

This shouldn't have to be said but 1. Nobody should be able to browse the internet from the ICS/OT environment. 2. Nobody should be able to send or receive e-mails in the ICS/OT environment.

Amazon's package tracking updates are so good they can see into the future.

The current top firewall alert is from my few Windows machines trying to check on updates.

Another great read for ICS/OT security is the joint government document: "Principles of Operational Technology Cyber Security" www.cyber.gov.au/sites/defaul...

Please pray for me this morning while I struggle with the desire to reply all, and correct the "project manager".

When you're doing things right people start letting you know about things ahead of time because they know you're going to get an alarm and call them.