I reviewed yesterday’s blog with a colleague from a power plant that uses Siemens control systems. He pointed out that Stuxnet defeated defense-in-depth as we know it today. ICS cyber security is requiring that we reexamine what is meant by defense-in-depth and include the human. This will be part of the Stuxnet discussions at the September ACS Conference.
Joe Weiss