Replay: Navigating Vulnerability Disclosures in an ICS Environment

## (CS)²AI Online™ Replay: Navigating Vulnerability Disclosures in an ICS Environment, a BADALLOC Case Study

Based on a real world event, this forum will share their personal thoughts and experiences when a supplier discovered and disclosed a vulnerability within an operating system (RTOS). We will explore the evaluation from initial RTOS risk rating to OEM evaluation techniques and messaging of recommendation to end ICS users. We will review evaluation of a vulnerability with no known exploits and discuss how tomorrow's threat landscape is going to require deep and detailed forensics, with a strong vendor/OEM partnership to provide guidance to end-users.

With the increasing connectivity of industrial systems comes the benefits of productivity, operational efficiency and process control. This connectivity also creates potential opportunity for cyber criminals to gain access to critical infrastructure systems and industrial control systems (ICS).

Safeguards against this increasing threat landscape include people, process and technical controls to mitigate and balance the risk against reliability, availability and maintainability of the asset. A key tenant to this equation is vulnerability / incident response for the ICS environment where “patching” is not as common as IT systems and at times, not an immediate option for technical or procedural reasons.

REGISTER NOW

https://events.zoom.us/ev/AiYL8nPFWAyGFPmRIEBepzX0mD2dud_FOhrL-h3VZ0mG0HLszmH1~ArNZkPZ5tMKgvN3JjD2HXXkwSiilttf42NDZO2nuvJ_fATA_2uUgXA_BpVp9I0HiC9uJyBo3OmN3Gqc3i1j1dfwCSw
-----------------------------------------------------------------------------------------
Becoming a paid member is quick and easy (and helps us keep offering these educational opportunities!). Please join now! [[https://www.cs2ai.org/plans-pricing](https://www.cs2ai.org/plans-pricing)](https://www.cs2ai.org/plans-pricing](https://www.cs2ai.org/plans-pricing))

All past seminars and symposiums are available to paid CS2AI.ORG members. Check out the Resources area of our website in the Members Portal [[https://www.cs2ai.org/](https://www.cs2ai.org/)](https://www.cs2ai.org/](https://www.cs2ai.org/))

Certificates for Professional Development/Continuing Education Units (PDUs/CEUs) are available for all registered individuals who attend at least one hour of the event.[https://www.cs2ai.org/get-involved](https://www.cs2ai.org/get-involved)](https://www.cs2ai.org/get-involved](https://www.cs2ai.org/get-involved))

*Please note that (CS)²AI Online™ events are provided free of charge as educational career development content through the support of our paid members and the generous contributions of our corporate Strategic Alliance Partners. Contact information used in registering for our directly supported seminars may be shared with sponsors funding those specific events. Unless noted on our Zoom Event registration page, all events are open for direct funding support.