#operationalresilience — Public Fediverse posts

🤖 What does operational resilience look like in the age of AI?

As #AI becomes more embedded in #cybersecurity and CPS protection, security teams have an opportunity to rethink how they detect, investigate, and respond to threats.

💡 On Nexus, AJ Eserjose, Regional Director at OT-ISAC, explores why alerts need more than technical context. Understanding the operational and business impact of an incident is critical to making faster, smarter decisions.

Find out how AI can help connect the dots at machine speed, correlating security events with operational processes and expected business outcomes, and more. 🔖 Read here: https://nexusconnect.io/articles/operational-resilience-in-the-age-of-ai-hunting-beyond-malware

#OperationalResilience #CPSsecurity #OTSecurity #CriticalInfrastructure #CyberResilience

AI is transforming #manufacturing, but without the right strategy, it can also introduce new cyber risk.

💡 On Nexus, former Pfizer Global Head of Automation Engineering James LaBonty explores how manufacturers can build an AI-powered cybersecurity strategy that strengthens cyber-physical systems (CPS) security while keeping operational resilience at the center of every decision.

📖 Read here: https://nexusconnect.io/articles/how-ai-fits-into-a-manufacturing-cps-security-strategy

#ManufacturingCybersecurity #CPSsecurity #OperationalResilience #IndustrialCybersecurity #ArtificialIntelligence #OTSecurity

The Mackay Sugar cyberattack is a reminder that cyber incidents can have real-world operational consequences when IT and OT environments are interconnected.

In this blog, Field CTO Sean Tufts discusses why cyber resilience, OT security, and managing IT/OT dependencies are critical for protecting critical infrastructure and maintaining operational continuity.

📖 Read here: https://claroty.com/blog/mackay-sugar-cyberattack-shows-need-for-resilience-when-itot-dependencies-exist

#OTSecurity #CriticalInfrastructure #CyberResilience #IndustrialCybersecurity #CyberPhysicalSystems #OperationalResilience

Europe's Digital Sovereignty Drive Needs New Operating Model

Europe's reliance on just a few major cloud providers is sparking concerns about digital sovereignty, with policymakers worried that over-dependency on foreign technology can compromise national resilience. This concentrated market - where just 3 providers hold around 70% of the market - is driving the urgent need for a new…

https://osintsights.com/europes-digital-sovereignty-drive-needs-new-operating-model?utm_source=mastodon&utm_medium=social

#CloudMarket #DigitalSovereignty #Europe #OperationalResilience #NationalSecurity

🇺🇸 New from Claroty Chief Strategy Officer Grant Geyer: An analysis of the Trump Administration’s latest AI Executive Order and its implications for critical infrastructure cybersecurity

The EO introduces a voluntary framework for sharing frontier AI models with government agencies before release and expands access to advanced AI capabilities for smaller critical infrastructure operators, including rural hospitals and utilities.

Grant explores what this means for organizations operating below the "cyber poverty line"—and why strengthening cyber resilience across all critical infrastructure sectors matters more than ever.

💡 Read the blog: https://claroty.com/blog/the-2026-ai-executive-order-protecting-critical-infrastructure-below-the-cyber-poverty-line

#AI #Cybersecurity #CriticalInfrastructure #OperationalResilience #CyberResilience #OTSecurity #Federal #NationalSecurity

AI is driving unprecedented demand on data centres, but are the OT systems that power them secure?

🌍 Join our upcoming webinar on 11 June to explore the growing cyber risks facing data centre #OT environments and learn strategies to strengthen resilience, improve visibility, and support the infrastructure behind the AI revolution.

✅ Register now: https://discover.claroty.com/webinar_securing-data-centre-ot-to-power-the-ai-revolution

#DataCentre #Cybersecurity #OTSecurity #OperationalResilience #AI

🏢⚡ As data centers evolve into mission-critical infrastructure for the #AI era, protecting the power, cooling, and building systems that keep them running is no longer optional.

Our Ultimate Buyer’s Guide for Data Center Cybersecurity breaks down what to look for in a CPS protection platform to efficiently protect critical OT, IoT, BMS, and your entire ecosystem.

Download your copy here 👉 https://claroty.com/resources/reports/the-ultimate-buyers-guide-for-data-center-cybersecurity

#DataCenter #Cybersecurity #CriticalInfrastructure #OperationalResilience

What happens when attackers weaponize cellular-based IoT?

In this Nexus Podcast episode, Rapid7's Deral Heiland breaks down the #cybersecurity risks of connected #IoT devices—from unauthorized access and data exfiltration to potential pivots into backend infrastructure.

🎧 Full episode here: https://nexusconnect.io/podcasts/deral-heiland-on-weaponizing-cellular-based-iot

#VulnerabilityManagement #RiskManagement #OperationalResilience

Fintech monitoring must account for the distinct cadence of financial operations. Transaction volumes spike during paydays, market opens, and settlement windows, requiring adaptive alert thresholds.

#Fintech #OperationalResilience

Today it is Mythos. Tomorrow it will be something else.

The pattern stayvendorlockin #securitystrategy #appsec #operationalresiliencempanies need urgency to position themselves.

Everyone wants to attach themselves to the next big wave and present themselves as the answer.

Real organizational readiness is not about pushing AI into every layer because the current panic cycle says so. The practical test for any change is much simpler:

• Does it strengthen existing tools and workflows?

• Does it preserve model and vendor optionality?

• Does it reduce backlog and repetitive operational drag?

• Does it reduce attack surface by removing software, access, and exposure you do not need?

• Does it reinforce the boring fundamentals like inventory, patching, least privilege, segmentation, and recovery?

Without those checks, you are mostly just trading places. One dependency gets swapped for another. One vendor stack gets replaced by another. One kind of complexity becomes another. Very little materially improves.

Most of the time, we just kick the ball a few months further down the road and call it progress.

I wrote about many of these ideas in my pragmatic guide:
https://cyfinoid.com/a-pragmatic-guide-to-being-mythos-ready/

#securitystrategy #appsec #operationalresiliencempanies #cybersecurity #aisecurity #attacksurfacereduction #vendorlockin #operationalresilience

Every major outage I have studied shows the same pattern. Silence creates chaos. Clear IT-led communication creates trust. Curious to hear where others stand on this. #CrisisCommunication #ITLeadership #IncidentResponse #DigitalTrust #TechIncidents #CyberSecurity #OperationalResilience #CIO #CTO
https://www.linkedin.com/pulse/crisis-communication-when-code-breaks-trustholds-sanjay-k-mohindroo--vidpc

🔐 Third-Party Risk Management at RELIANOID

At RELIANOID, security and resilience extend beyond our own platform. We apply strict Third-Party Risk Management (TPRM) practices to ensure that every vendor, partner, or supplier meets our high standards for security, compliance, and reliability.

More details: https://www.relianoid.com/security-compliances/relianoid-third-party-risk-management-policy/

#RELIANOID #ThirdPartyRiskManagement #CyberSecurity #Compliance #DORA #NIS2 #GDPR #ISO27001 #OperationalResilience #SupplyChainSecurity

China-nexus threat actors are targeting edge devices that do not support EDR. 💡 On Nexus, Adm. Michael Rogers writes how cyber-physical systems could be next since many of these connected #OT, #IoT, and #IoMT devices and sensors also lack EDR protection. Read here: https://nexusconnect.io/articles/adversaries-adaptability-is-bad-news-for-cyber-physical-systems

#OperationalResilience #InternetofThings #CyberResilience #Healthcare #Industrial #RiskManagement

The pursuit of "Too Lean" strategy cost IndiGo ₹610 Crore in refunds and shattered trust. 📉

We broke down the 3 strategic lessons: buffer is not waste, it’s insurance.

Is your business optimized for efficiency or resilience?

Read the full analysis from the link below! ➡️

🔗 https://bestsoln.com/web/the-indigo-crisis-3-strategic-lessons-on-operational-buffer-the-cost-of-too-lean-strategy

#IndiGoCrisis #OperationalResilience #BusinessStrategy #TooLean #Aviation #BestSoln #BestSolution #IndiGo

4,500+ cancellations. ₹610 Crore refunds.

The IndiGo crisis wasn't about fog; it was a devastating failure of the "Too Lean" business model.

We broke down the three strategic lessons every leader must learn about operational buffer and the true cost of zero-slack efficiency.

Stop optimizing for fragility. Read the deep dive:

🔗 https://bestsoln.com/web/the-indigo-crisis-3-strategic-lessons-on-operational-buffer-the-cost-of-too-lean-strategy

#IndiGoCrisis #IndiGo #Aviation #BusinessStrategy #OperationalResilience #TooLean #BestSoln #BestSolution

Cybersecurity Isn’t Just an IT Line Item — It’s a Business Imperative  – Source: securityboulevard.com https://ciso2ciso.com/cybersecurity-isnt-just-an-it-line-item-its-a-business-imperative-source-securityboulevard-com/ #SecurityBoulevard(Original) #rssfeedpostgeneratorecho #operationalresilience #IndustrialSecurity #CyberSecurityNews #SecurityAwareness #SecurityBoulevard #Threats&Breaches #vulnerabilities #riskmanagement #SocialFacebook #SocialLinkedIn #accesscontrol #Cybersecurity #SocialX

Discover how Zero Trust Segmentation can protect your organization, ensure compliance, and drive secure digital transformation. #CyberSecurity #ZeroTrust #NetworkSecurity #DataProtection #DigitalTransformation #Compliance #RiskManagement #BusinessContinuity #OperationalResilience #ITSecurity #CyberThreats #SecurityStrategies #SecureTransformation #ZTSImplementation #ProactiveSecurity
https://medium.com/@sanjay.mohindroo66/mastering-zero-trust-segmentation-b4ceae1cb375

🚨 New from NIST: SP 800-61 Rev. 3 brings a major shift in incident response strategy.

Key upgrades include:
・🔁 Alignment with the updated Cybersecurity Framework (CSF 2.0)
・🛡️ Emphasis on governance, continuous improvement, and real-world procedures
・📋 Clearer roles, responsibilities, and escalation protocols
・🔍 A flexible incident response lifecycle model—fit for modern threats
・📚 Encourages tailored policies, playbooks, and training

The updated guidance moves beyond static checklists, offering a holistic view of incident handling that ties into risk management and organizational resilience.

Full details here: https://industrialcyber.co/nist/nist-publishes-sp-800-61-rev-3-overhauling-incident-response-guidance-for-csf-2-0/

#Cybersecurity #NIST #CSF2 #IncidentResponse #RiskManagement #Governance #OperationalResilience #Infosec

France, 15 octobre 2024

Projet de loi relatif à la résilience des infrastructures critiques et au renforcement de la cybersécurité

https://www.legifrance.gouv.fr/dossierlegislatif/JORFDOLE000050349138/

An engem (1!) Gesetz wëll Frankräich d'CER Directive (2022/2557), d'NIS2 Directive (2022/2555) an d'Directive (2022/2556) accompagnant le Règlement DORA (2022/2554) transposéieren.

#CERdirective #NIS2 #CER #DORA #InfrastructuresCritiques #criticalinfrastructure #France #operationalresilience #SAIV #ActivitésdImportanceVitale

'Voltage imbalance from the Delhi Transco Limited (DTL) grid briefly impacted all IGI terminals, affecting baggage acceptance and e-gates ...

'The power back-up system was started within a few minutes and the main power supply was restored shortly after, the spokesperson added'.

While I'm guessing any large airport's back-up power system should kick in within a minute of the mains falling away, superb work by the IGI and Transco teams in bouncing back from a failure of key infrastructure (power).

#OperationalResilience
https://www.reuters.com/world/india/indias-delhi-airport-resumes-operations-after-power-cut-flights-not-affected-say-2024-06-17/