OT Security Summit Speakers Push to Share More

The phrase “cybersecurity is a team sport” shouldn’t take anyone by surprise. It has been a persistent rallying cry to companies to get everyone in their organization to be a part of the security solution. However, as ransomware has evolved and attacks have become global campaigns, the phrase has taken on greater meaning. Today, it is clear that the scope and scale of our cybersecurity problem are too large for any one agency or organization to tackle alone.

Collaboration and information sharing are the way forward. Across the enterprise, across the industry, and across the globe.

This common theme emerged during our Operation: Next ‘22 Summit last month. The event featured a powerhouse of presenters who shared best practices, experiences, opinions, and challenges to cyber securing OT networks. We packed A LOT into a half-day program with two keynotes, 15 session tracks, and a special presentation on Critical Infrastructure Cyber Sprints, JCDC, and other topics.

Turnout for the event— over 900 attendees and more than 6,000 subsequent views of the on-demand content—has been tremendous. Another indicator that cybersecurity leaders are thirsty for practical information and advice.

Below are links to the on-demand track sessions and summary notes for anyone who missed this event. The three tracks were designed to meet the needs of executives, SecOps leads, and technologists.

I hope you will also listen to our closing session with representatives from CISA and DOE about what is needed to safeguard critical infrastructure. Again, we heard the call to action for companies of all sizes to share more information with the government. Not just incidents but anomalous activity to enable government agencies to spot trends, connect dots, and provide help in combating threats.

Executive Track: Building OT Security Programs

<<< Start >>>

Rich Mahler

Managing Director, OT Security, Accenture

<<< End >>>

Despite investing billions in cybersecurity, breaches continue to climb. As a result, many security leaders should take a long, hard look at their security programs and determine what to do (and, in some cases, stop doing) to improve their resilience.

A key to achieving resilience is knowing that security requires continual improvements. If you’re still approaching security as a checklist, you will quickly fall behind. Adopting a continuous improvement process for OT security can be daunting when you have 100s of sites and 1000s of controls, but it is achievable. The way to get there is by selecting the appropriate security vendors, building a suitable SOC model, and executing with a proper approach— topics discussed in the Executive Track and available now on-demand. I hope you will take a moment and listen to these insightful sessions. 

End-to-End OT SecOps: Transforming from Good to Great

<<< Start >>>

Samuel Linares

Managing Director, Global and Europe Industry X Security Lead, Accenture

<<< End >>>

Most companies have achieved some level of digital transformation—but more is coming as businesses see far greater opportunities from integrating digital technologies. But as OT/IT converge and the business ecosystem grows more complex, security becomes more complicated. To support business modernization initiatives, companies should build and grow their OT SecOps programs. But what should a “next-level” OT SecOps program include?

• AI and automation would help transform cybersecurity and amplify business models. SOAR (Security Orchestration, Automation and Response) tools can manage manual, predictable processes, freeing up time-strapped security members to handle critical thinking problems.
• More collaboration between businesses, organizations, and providers. Information sharing can help inform security strategies and improve preparedness.
• Greater visibility with the board. SecOps teams should be proactive and transparent with their board about risks to the company and the strategy in place. Waiting to engage until there is an incident does little to garner needed support.

I think you’ll find the views and advice shared by security leaders and experts in this track valuable and worth a listen.

Architecture & Resilience: Designing for Security Success

<<< Start >>>

Luis Luque

Managing Director, Global OT Security Lead, Accenture

<<< End >>>

Throughout our Summit, we heard a reoccurring theme – change will continue. Whether it is changing business models, energy systems, or cyber threats, security should adapt to these shifts. Static architectures must evolve into proactive, dynamic architectures that have security integrated from the start. This is the foundation for building resilience and security success.

We focused on many foundational elements and emerging trends that support resilience during this track. First is to have the executive team involved early on—cybersecurity should be a strategic priority. Next, when developing your security program, never underestimate the operational value it can bring to the business. Ensure you understand and prioritize what is most valuable to the company. Your program also should include your extended vendor ecosystem and what they are accountable for.

Finally, executing requires talent, which organizations struggle to find. To combat the issue, companies should invest in training the workforce of tomorrow, and consider the opportunities automation and AI could bring to their programs.

Listen to all the on-demand sessions for this track to hear more about what is needed to build resilience and security success.

<<< Start >>>

Experience an Interactive Tour of our OT Cyber Fusion Center

Step into a digital twin of our state-of-the-art testing center and explore facility capabilities and client use cases from your desktop.

LEARN MORE

<<< End >>>

About Accenture

Accenture is a global professional services company with leading capabilities in digital, cloud and security. Combining unmatched experience and specialized skills across more than 40 industries, we offer Strategy and Consulting, Interactive, Technology and Operations services — all powered by the world’s largest network of Advanced Technology and Intelligent Operations centers. Our 674,000 people deliver on the promise of technology and human ingenuity every day, serving clients in more than 120 countries. We embrace the power of change to create value and shared success for our clients, people, shareholders, partners and communities. Visit us at accenture.com.

Accenture Security is a leading provider of end-to-end cybersecurity services, including advanced cyber defense, applied cybersecurity solutions and managed security operations. We bring security innovation, coupled with global scale and a worldwide delivery capability through our network of Advanced Technology and Intelligent Operations centers. Helped by our team of highly skilled professionals, we enable clients to innovate safely, build cyber resilience and grow with confidence. Follow us @AccentureSecure on Twitter, LinkedIn or visit us at accenture.com/security.

This document is produced by consultants at Accenture as general guidance. It is not intended to provide specific advice on your circumstances. If you require advice or further details on any matters referred to, please contact your Accenture representative.

Copyright © 2022 Accenture. All rights reserved. Accenture, and its logo are trademarks of Accenture.