Security Patch Management in ICS/OT


Details
45 minutes presentation on “Security Patch Management in ICS/OT Environment” by Jean-Michel Briffaut
7 pm to 7:30 pm: Coffee &Networking
7:30 pm to 8:30 pm: the presentation (45 min) + Q&A (15 min)
8:30 pm to 9:00 pm: Coffee &Networking
Agenda of the presentation:
Introduction to the IEC 62443-2-3 (Patch Management in the IACS environment)
o Why patch;
o High level process overview;
o Best practices for Asset Owners and vendors;
o Recommended Patch Lifecycle
Security patching programme: an efficient risk reduction approach
o Patching the “Purdue Model”
o The “Top Four” controls
o Where patching fits into related controls
Panel discussion and closing note by CS2AI Dubai Chapter President Mohamed Yousef
About Speaker:
Jean-Michel Briffaut is a senior manager and cybersecurity professional with 20+ years’ experience in Operational Technology (OT) for Critical Infrastructures.
Working for a world-class operator and maintainer, he is managing the OT SOC Team, the Industrial Control Systems (ICS) security architecture and ensuring compliance with company’s cybersecurity controls, standard as well as international and local ICS regulations.
He has extensive experience in implementing, operating and maintaining risk-based security solutions for ICS such as NGFW, IDS, EDR, SIEM...
JM is an accomplished CISM/CRISC and also a recognized/certified SCADA Security manager trainer.
CS(2)AI meets are free for anyone to attend. There are absolutely no fees. Just come with an open mind and willingness to share and learn. Make sure you carry a valid ID proof when you come to attend the meet. For assistance to venue location or more details contact +971559273286 (Abdul Rasheed)

Security Patch Management in ICS/OT