Mid 2022, I had the opportunity to brief participate on a briefing to The President’s National Security Telecommunications Advisory Committee (NSTAC) on the convergence of Information and Operational Technology, specifically in the context of Industrial Control System and Electric Utility environments.

The report was recently delivered to the President,
and has been posted for public review.

Recommendations are already having an impact on
federal IT/OT cyber policy. Following the completion of the NSTAC report, CISA released a Binding Operational Directive (BOD 23-01), requiring agencies to inventory all network-connected IT and OT assets, which follows on the NSTAC report's first recommendation.

There are many opportunities and challenges ahead as
we continue to further secure these environments with escalating threats, and I appreciate the opportunity to have provided perspectives to the committee for consideration.

https://www.cisa.gov/sites/default/files/publications/NSTAC%20IT-OT%20Convergence%20Report_508%20Compliant_0.pdf

My 2023 Cyber Predictions:

Shit will still be broken
Stuff will still get hacked
Some new tools will get marketed as being able to fix everything
People will do awesome things
The community will support each other

Overheard in a bar during a blizzard, “This 8 inches is looking more like 3”

My brain: