In a recent article, threat analysts from Dragos respond to a series of questions they received from members of the information security and IT communities on the topic of industrial control systems (ICS) security. The analysts answered questions about the differences between IT and OT security operations skill sets, how to scan ICS environments during assessments, and the ICS threats that keep them up at night, among others. In answering this last question, one analyst remarks, “Water treatment plants are some of the most out-of-date and under-funded systems we’ve seen from a cybersecurity perspective.” He adds that he hopes to help these systems by providing low-cost, low-effort solutions as a “better than nothing” step. Read the article at Dragos.