ONG-ISAC & Booz Allen Webinar
Abstract:
This talk focuses on the transition of operational technology (OT) to cloud computing. They emphasize the benefits of cloud security, scalability, and the facilitation of legacy functions. The talk underscores the importance of collaboration between OT and IT departments to leverage cloud security at an enterprise scale and advocates for a strategic migration approach beyond mere relocation. The presentation also addresses the challenges of maintaining data integrity within the cloud and proposes a revised Purdue model to facilitate secured bidirectional communication and data validation.
Speaker bios:
Ms. Pia Capra is the Director of OT Cybersecurity at Booz Allen Hamilton. Pia leads the OT team with over fifteen years of professional experience, including leading technical programs relating to industrial cybersecurity strategy, threat detection, and incident response. She has experience developing comprehensive strategies around the people, processes, and technologies needed to enable organizations to increase their ability to monitor threats within an OT environment. Through her assessment programs with large manufacturing and energy companies, Pia has developed and delivered numerous briefings for site personnel and corporate management regarding site visits, complex assessments, and planning/strategy to improve enterprise cybersecurity posture. Ms. Capra also has experience leading an ICS Threat Detection program, which included developing analytics to evaluate ICS network traffic, identify anomalies, and potentially malicious actors in the environment. Ms. Capra has M.S. in Cybersecurity from the University of Maryland University College and a B.S. in Information Sciences and Technology with a Minor in Security and Risk Analysis from The Pennsylvania State University.
Jason Madigan is a Chief Cyber Cloud Architect with over 25 years of experience. He currently serves as the Cloud Security Commercial Lead at Booz Allen Hamilton, leading teams that create secured cloud frameworks, enable secure by-design ecosystems, and support all cloud engineering client missions. Jason has been instrumental in designing and deploying large-scale security lakes that provide visibility and intelligence to both operators and executives. This has
helped in making focused decisions and understanding the risks. Jason has also supported the creation of cyber command centers and large security data lakes, and developed enriched visualizations that drive great risk management in cloud resources. He has supported multiple other capabilities to engineer cloud-based solutions that align with our client's mission.