OT Dungeons & Cyber Dragons
Track 1 – 3:10pm
Name: Charles Dickinson Company name: EY Title: Director
Bio
Charles is a Director at EY UK, where he leads the Operational Technology (OT) cybersecurity consulting capability, based in the Leeds office. In his role, he spends much of his time travelling to client sites around the world to assess and advise on their OT security posture.
He started his career in the Royal Air Force as a Cyber Engineer Officer. Highlights include serving as lead engineer at RAF Fylingdales on the North York Moors, and leading an offensive cyber team in the Joint Cyber Unit. Before joining EY, he was Chief Technology Officer at two Yorkshire-based HR software vendors.
Outside of work, Charles enjoys canoeing, sailing, board gaming, reading, and tinkering with small technology projects.
Talk Abstract
This is retelling of some highlights of my campaign as the Head of OT Cyber for a big consultancy crawling through dozens of OT Dungeons (facilities in industry, utilities, defense, retail, logistics) encountering traps (sticky notes on HMIs, network segmentation from the 9 Hells, spinning death machines being controlled by garage door openers), villains (factory foremen who insist Cyber isn't real, cyber professionals who worship an air gap, APTs) and the most arcane magics (IoT, network security appliances, secure remote access).
While the presentation is framed as tongue-in cheek anecdotes, for each one there are valuable lessons about designing and operating OT facilities. I am also a Dungeon Master in my spare time, I regularly speak at conferences, and I can make people laugh.
Intended Audience
Familiarity with Dungeons and Dragons will more important than familiarity with Operational Technology Cyber. Seriously though, the audience is people interested in Cyber that know the difference between IT and OT, and are interesting in securing OT.
How NSFW is this talk?
(How spicy is your talk in chilli's?)
Mild but flavoursome (SFW and young people)