On the 25th and 26th of May, the Norwegian security conference Cybersikkerhet took place in Oslo. Suppliers, users, oil companies, onshore industry, the Government, engineering and consultants gathered to discuss a number of themes regarding cyber security and to inform themselves. The Norwegian NFA (Norsk Forening for Automatisering, http://www.nfaplassen.no/ ) organized the conference.
Hudson Cybertec’s presentation, titled “An inconvenient truth about vulnerability analysis in IACS” covered how to cope with vulnerability analysis in industrial automation & control system environments. The audience was informed that within IACS environments, caution should be taken with standard pentesting tools and that it is of great importance to tackle the cause of vulnerabilities as well. Additionally, it is essential that measures taken within the human, organisational and technical fields are balanced. To be able to manage security for the IACS environments properly, standards are required, such as the IEC 62443. Hudson Cybertec covered how the IEC 62443 aids users, as well as vendors and systems integrators, how to manage cyber security within their respective disciplines and organisations.
Participants went home after two days, filled with new ideas and knowledge. The participants, as well as the organization, look back upon a very successful security conference.
