Abstract: This presentation looks at the Colonial Pipeline ransomware example as a case study for cybersecurity controls' return on Investment (ROI) for critical infrastructure control systems. By taking into account that the general principles of cybersecurity risk are probability- and consequences-associated with a threat agent exploiting a vulnerability to harm. This presentation explores using a commercial approach to assigning a numerical value or cost to assets thus allowing for a cost-benefit analysis that may be a more precise and concise characterization of risk.
Aleksandra Scalco
Speaker: Aleksandra Scalco is an Engineer with the Naval Information Warfare Center Atlantic, United States Department of the Navy. From 2012 to 2016, she was an Information System Security Designer (ISSD) and Client Advocate with the National Security Agency/Central Security Service (NSA/CSS). She is the author of several articles about cybersecurity for control systems. Her research interests include cybersecurity of control systems, digital transformation of cyber-physical systems and control systems, engineering of cybersecurity capabilities for context-sensitive, dynamic-classes of critical infrastructure, multi-concern assurance, Operational Technology Software Defined Networking (OT-SDN), and the development of Tactics, Techniques, and Procedures (TTP) using software orchestration to achieve cybersecurity for control systems. Her awards and honors include membership by invitation of the seventh cohort of the International Council on Systems Engineering (INCOSE) Institute for Technical Leadership and the NSA/CSS Crescent Performance Award for Mission Excellence in 2013.
Door Prize:
All registrants will be provided a number - which will be entered into a random number generator in order to select the winner.
Engineers of Victory: The Problem Solvers Who Turned the Tide in the Second World War
By Paul Kennedy
Cost: Free.
Agenda:
6:00 – 6:45 pm SE Table talk
6:45 – 7:00 pm Chapter Business Meeting
7:00 – 8:00 pm LECTURE