Tony Turner, Author at Industrial Cyber

About Tony Turner

Tony serves as the Founder and CEO of Opswright, a software company focused on Secure by Design for critical infrastructure and Cyber Informed Engineering. He is the co-author of Software Transparency, authored SANS SEC547 Defending Product Supply Chains and is the chief editor for https://ciewiki.io focused on Cyber Informed Engineering.

Tony's Articles

Threat Modeling for Critical Infrastructure

Threat Modeling for Critical Infrastructure

Threat modeling is a critical component of a Secure by Design strategy. It’s where we identify the product or system we are working on and identify threats and weaknesses we want to mitigate to avoid undesirable consequences. We should be…

Harnessing power of CIE, CCE methodologies to build resilience across critical infrastructure sectors

Harnessing power of CIE, CCE methodologies to build resilience across critical infrastructure sectors

Amid escalating cyber threats and attacks from determined adversaries, critical infrastructure organizations grapple with the imperative to avert disruptions and fortify their systems to withstand intentional cyber compromise, exploitation, and abuse. The Cyber-Informed Engineering (CIE) and Consequence-driven Cyber-informed Engineering (CCE)…

Unraveling Security Engineering -Product vs. Systems in Critical Infrastructure

Unraveling Security Engineering -Product vs. Systems in Critical Infrastructure

Article Co-authored by Andrew Ohrt, Resilience Practice Area Lead for West Yost Associates We’ve seen a lot of discussion lately on the topic of “Secure by Design” as well as Security Engineering as an emerging (but not new) domain of…

Securing Critical Infrastructure with SEMM - Security Engineering Maturity Matrix

Securing Critical Infrastructure with SEMM – Security Engineering Maturity Matrix

There’s been a lot of discussion over the past few months about the need for security engineering design in critical infrastructure. The Cyber Informed Engineering Strategy document from the US Department of Energy (DoE) in 2022 and the National Cybersecurity…

CSRB report on Log4j open source vulnerabilities demands better software ecosystem, future investments

CSRB report on Log4j open source vulnerabilities demands better software ecosystem, future investments

With the availability of the initial report from the Cyber Safety Review Board (CSRB) on the Log4j open source software library vulnerabilities, the needle of focus has shifted towards driving better security in software products, while enhancing public and private…

More Tony's Articles