Threat Intelligence for Critical Infrastructure

Threat intelligence provides insights into potential real world threats and helps organizations prioritise efforts to preemptively defend against attacks. However, the nature of threat intelligence varies significantly between traditional IT environments and Industrial Control Systems (ICS).

While IT threat intelligence focuses on data breaches, malware, and network intrusions, ICS threat intelligence must address unique challenges such as the safety and reliability of critical infrastructure. This presentation will explore these differences providing an understanding of how tailored threat intelligence is essential for protecting industrial environments and critical infrastructure.

In this session, Fran will delve into the real-world application of threat intelligence by examining the activities of a specific threat actor that Dragos has been tracking for the past year. We uncovered valuable intelligence that led to the discovery of a significant compromise. This case study will illustrate how threat intelligence is not just about gathering data but about interpreting and acting upon it to uncover hidden threats.... even here in New Zealand.

Speaker Bio:

Fran Gomez, CISSP, CISM, CRISC, GRID is and OT Security Specialist, with over 20 years of international experience across several security domains. Originally from Spain, Fran has lived and worked in Spain, Germany, the UK and New Zealand where he settled with his family 6 years ago. Fran currently works as Technical Account Manager and Intelligence Technical Account Manager for Australia and New Zealand at Dragos, whose global mission is to safeguard civilization from those trying to disrupt the industrial infrastructure we depend on every day.

Host or Publisher (ISC)² Auckland Chapter