Topic hub
OT & Industrial Security.
Operational technology and industrial control systems are now a balance-sheet risk, not an engineering one. The regulatory regime is moving faster than most boards' refresh cycles, threat-actor capability has shifted decisively toward mid-market industrials, and the gap between 'compliant' and 'defensible' is wider than most operators think. This is where I focus the bulk of my work.
Pillar essays
Long-form analysis
Research & disclosures
Original research
Physically Hacking SCADA — Cyber-Physical Attack Chains
SCADA / Industrial Control Systems
Research on cyber-physical attack chains against SCADA systems, demonstrating how digital compromises produce physical-layer effects.
ICS Killswitch — Cyber-Physical Industrial Security Research
Industrial Control Systems (multi-vendor)
Two-year DefCon research programme on cyber-physical attack chains against industrial control systems.
Talk through your specific situation
If something on this page matches where your organisation is, the fastest way to get value from it is a 30-minute conversation about your specific question.
Strategic review
A second opinion when the decision matters
Independent perspective on a specific cybersecurity, technology or risk decision.
- Pre-call review: I read what you send before we talk
- 30-minute private session
- Written recommendation within 24 hours, with sources and next steps
Other topics