SANS ICS
@SANSICS
Defending what Makes, Moves, and Powers the World.
Join us in the mission to defend critical infrastructure. ⚙️ Learn more about our training, resources, and events: sans.org/u/1uey #ICSsecurity #OTsecurity #Cybersecurity #Training #CriticalInfrastructure #Mission
The 2025 SANS ICS Security Summit tackled ransomware, #ICS malware & regulatory risk head-on—with insights from operators, researchers & leaders. Recap by Tim Conway: sans.org/u/1C6i

Your experience managing #ICS #OT vulnerabilities could be the insight someone else needs. Help benchmark what’s working—and what’s not. Complete the 2025 SANS ICS/OT Survey today. It matters more than you know. sans.org/u/1C0E #CriticalInfrastructure

📍This is why we empower ICS defenders. On July 22, SANS ICS Fellow @RobertMLee brings real-world OT expertise to Congress—15 years after Stuxnet changed everything. Tune in live: youtube.com/@HouseHomeland… Details: homeland.house.gov/2025/07/16/med…
From the field to the floor of Congress... July 22: @RobertMLee, SANS ICS Fellow, testifies before the House on OT security—15 years after #Stuxnet. "We know what to do. We just need to be empowered to do it." Tune in as SANS helps shape the future of OT cybersecurity policy…
Jump headfirst into this year's SANS #ICSSummit talks! The newly released playlist is now ready! Watch Here 📺 youtube.com/playlist?list=…
This is why we empower ICS & OT defenders. On July 22, SANS ICS Fellow & @DragosInc CEO @RobertMLee brings real-world OT expertise to Congress—15 years after Stuxnet changed everything. 🎥Tune in live: youtube.com/@HouseHomeland… 📄Details: homeland.house.gov/2025/07/16/med…
As Congress revisits Stuxnet, 15 years on, they’ll hear from a leading voice in ICS/OT security. On July 22, SANS Fellow & @DragosInc CEO @RobertMLee testifies on the evolving threat landscape and the need to strengthen U.S. resilience. 📄Hearing details →…
⚡ NERC CIP-015-01 has been officially approved. Join our webinar with Dragos CEO @RobertMLee and @SANSICS's Tim Conway where they'll discuss what CIP-015 means and how asset owners can prepare: hubs.la/Q03xx91B0 #ICSsecurity #OTsecurity #NERCCIP #electricutilities
🔄 Role reversal at #SANSFIRE! @deancybersec chatted with @secgreene—yes, the Rich who’s usually the one asking the questions, where Rich shared why cybersecurity success starts with the basics: strong passwords, simple controls, and a solid foundation. “AI isn’t your problem.…
See my talk tonight (Friday) from D.C. live online here: How timing side-channel attacks work (against a keypad safe), and how to use Pulseview (the wireshark of hardware hacking) with a $15 logic analyzer to accomplish this. sans.org/webcasts/keypa… @SANSICS @SANSInstitute
The #ICS #OT landscape is evolving fast—and your experience matters. Share your insights in the 2025 SANS ICS/OT Survey and help shape the future of industrial cybersecurity. Your voice drives real change. Take the survey now. sans.org/u/1C0E #CriticalInfrastructure

OT ransomware attacks are a reality. When it hits, seconds matter. Preparation is everything. In this video, SANS Principal Instructor @deancybersec outlines a battle-tested approach for protecting ICS/OT environments before, during, & after an incident. sans.org/mlp/ics-ot-mal…

Our power and water systems keep life flowing. But what happens when they’re under attack? At the 2025 #SANSUtilitiesForum on August 26, hear from @deancybersec and others who are fighting to keep our communities safe. Register free: sans.org/u/1BT9

🏭 Critical infrastructure deserves more than generic tests. ICS613 equips you with techniques to assess SCADA, DCS, & field devices without disrupting production. ✍️ Learn more & sign up today: sans.org/u/1Bbw

Not all vulnerabilities are equal — especially in ICS. In OT, patching can’t risk safety or uptime. Control #5: Risk-Based Vulnerability Management helps you prioritize based on operational impact, not IT habits. 🎥 Dean Parsons explains: sans.org/mlp/ics-ot-mal…
🏅Train smart. Certify stronger. NextEra Energy’s CIP team has 60+ GCIP certified pros. They’re not just compliant, they’re ready. ✍️ Learn more here: sans.org/u/1BAr
📋 NextEra’s playbook isn’t store bought. It’s built in-house, inspired by ICS456 & driven by a mission: ⭐️Empower every employee to secure the electric grid. 🔗 Learn more here: sans.org/u/1BAr
If your team connects remotely into OT systems, ask yourself: 🔒Is MFA enforced IT ➡️ ICS? 🛡️Are jump hosts segmented? 👀 Are sessions monitored? Control #4 of the ICS Cybersecurity Critical Controls helps you lock it down. Learn more from @deancybersec: sans.org/mlp/ics-ot-mal…
Imagine a day without clean water or reliable electricity. For millions, it's not just hypothetical. Join @deancybersec on August 26 at the 2025 #SANSUtilitiesForum to learn how we can protect what matters most. Register here: sans.org/u/1BT9

⚠️ One wrong move in OT = downtime. Join us TODAY & learn how ICS613 teaches you to test industrial systems without taking them offline. 🔗 Register for the webcast: sans.org/u/1But 🔗 Beta runs Aug 25–29. Learn more about ICS613 here: sans.org/u/1BuD
