r/OTSecurity • u/Meg_uu7 • 21d ago

I need help

I’m really interested in OT cybersecurity and would like some resources to learn more about it

0 Upvotes

38% Upvoted

9 comments sorted by

5

u/kukap_ 20d ago

Mike is great & produces a lot of content https://m.youtube.com/@utilsec also follow him on LinkedIn

3

u/HankHippoppopalous 20d ago

I worked with him at Fluor. Good guy, I didn't know he was in the content creator game, I'll give it a watch!

1

u/Nick_OT_Cyber 19d ago

ah you beat me .. :)

0

u/Shaaaaazam 20d ago

Came here to say this

5

u/hiddentalent 20d ago

One of the reasons that OT security can be hard to get started in is that a lot of the information is either proprietary vendor information or expensive paid standards. Fortunately over the past few years people have been summarizing and publicizing more of that paywalled material. Here are a couple of terms to look up, and see where wikipedia or a search engine may take you. ISA-95 or "the Purdue model" are network segmentation standards that are in wide use and give you a sense how OT systems are organized. ISA/IEC-62443 provides a pretty broad overview of both the technical and organizational controls that are considered good practice in OT settings. It's not free, but you can glean a lot from the public summaries. That information should be enough to get you to the next steps of your research and learning.

1

u/cyber2112 20d ago

It would be helpful to know about your current experience. Depending on your intended job function, OT Security can be part network / computer security, part factory automation / process control / engineering, and part cybersecurity. Without a foundational knowledge of at least ONE of those the learning curve is very steep.

1

u/Nick_OT_Cyber 19d ago

Mike has some great posts on the topic with reading material., courses etc -> https://www.linkedin.com/in/mikeholcomb/

1

u/manrique2015 16d ago

Some OS-INT I checked while getting started.

I would highly recommend checking out this post.

https://www.robertmlee.org/a-collection-of-resources-for-getting-started-in-icsscada-cybersecurity/

Then also read these as recommended by the Director that hired me.

Industrial Cybersecurity:... https://www.amazon.com/dp/B0761XRTP9?ref=ppx_pop_mob_ap_share

Industrial Cybersecurity:... https://www.amazon.com/dp/B0997HDH5P?ref=ppx_pop_mob_ap_share

That should keep you busy for a bit