Adapting Zones And Conduits – A Transformation Story
Dennis Hackney
S4x24 - ICS Security Conference · Day 3 · Stage 2
Dennis Hackney’s presentation at S4, "Adapting Zones And Conduits – A Transformation Story," delves into the complex, yet critical, endeavor of implementing and evolving foundational cybersecurity principles within vast, highly optimized industrial control system (ICS) environments. Hackney, speaking from his experience at Chevron, outlines the challenges and strategic approaches required to secure operational technology (OT) across a diverse range of sectors, including upstream, downstream, midstream, shipping, and point-of-sale operations. The talk emphasizes that while concepts like **zones and conduits** may seem "older," their effective application remains paramount in the face of rapidly changing threat landscapes and increasing connectivity.
AI review
Hackney's talk from Chevron provides a brutally honest and deeply practical account of implementing foundational cybersecurity concepts like zones and conduits within a sprawling, highly optimized industrial environment. While the concepts themselves are not new, the talk excels in detailing the organizational transformation required, the critical integration with operations and safety teams, and a pragmatic attacker-centric approach to scope and prioritize efforts. This isn't theoretical fluff; it's a valuable case study for owner-operators grappling with the immense challenge of securing…