Critical Infrastructure Security,
Governance & Risk Management,
Operational Technology (OT)
ManuSec USA Speakers From Mauser and Ramaco on OT Incident Readiness
As cyber threats increasingly target operational technology (OT) environments, the stakes for organizations encounter a dire trajectory. Not only can a successful cyber incident lead to significant production losses and extended downtimes, but it can also endanger the physical safety of personnel operating within plant settings. Despite the rising allure of cyber incidents, many incident response protocols remain untested in the gritty realities of the manufacturing floor, raising serious concerns regarding their effectiveness and robustness.
The focus shifting among manufacturers is no longer primarily about having a playbook in place; it now revolves around the capability of their teams to effectively execute these protocols when alarms signal a threat. Recognizing the heightened importance of this subject, Ed Harris, Chief Information Security Officer (CISO) at Mauser Packaging Solutions and the chair of the upcoming ManuSec USA conference, partnered with Drew Perry, the vice president of information technology and cybersecurity at Ramaco Resources, to hold discussions prior to the ManuSec USA summit, which is set to take place in Chicago on October 21-22. Their central question remains: Is your OT team adequately prepared to navigate through a cyberattack?
According to both Harris and Perry, the essence of readiness lies not solely in the creation of a comprehensive playbook, but also in the rigorous practice of its execution. They emphasize the necessity of collaboration among security teams and the OT engineers who possess the most intimate knowledge of the equipment. “How do you prepare for something that you don’t know or you can’t expect or anticipate? Well, that’s where you practice, practice, practice,” Harris stated, stressing the importance of continuous rehearsal.
Perry echoed this sentiment, noting that tabletop exercises serve as invaluable opportunities to uncover scenarios that traditional runbooks may overlook. This proactive approach is crucial; it is far more advantageous to identify potential risks through controlled drills rather than during high-pressure, real-time incidents that pose catastrophic threats.
In a recent video interview, Harris and Perry also explored several critical topics, including:
- The importance of prioritizing life-safety systems and containing OT incidents to limit their impact;
- The need for organizations to carefully weigh the benefits of IT-OT connectivity against the associated risks while ensuring that manual fallback processes are preserved;
- Methods to articulate OT incident data into financial metrics suitable for board presentations, without exaggerating the containment efforts undertaken.
Ed Harris brings over 30 years of cybersecurity expertise to the table, overseeing information security and cybersecurity strategy and operations at Mauser Packaging Solutions with a wealth of experience in security operations, network security, and compliance. His previous roles included significant security responsibilities at VF Corporation and The Fresh Market.
Drew Perry similarly fortifies his organization with over 20 years of experience in IT and cybersecurity. He plays a pivotal role in spearheading technology and cybersecurity strategy and is instrumental in securing infrastructure and enhancing operational resilience at Ramaco Resources. Before his tenure at Ramaco, Perry served as the CISO at renowned firms such as Serta Simmons Bedding and Valvoline.
As the industry gears up for the ManuSec USA summit, the discussions led by Harris and Perry signal a vital shift in how organizations must approach their incident readiness. The emphasis on practice, collaboration, and comprehensive communication will be essential not only to enhancing security strategies but also in safeguarding personnel and preserving operational continuity in an increasingly hazardous cyber landscape.