The NIS2 directive is about five months away from becoming law in the European Union (EU). While some organizations are sprinting ahead toward compliance, others are struggling to get off the starting blocks. The clock’s not stopping, and after October…

Welcome to Critical Infrastructure Protection Across modern society, critical infrastructure serves as the backbone supporting the essential services that keep civilization moving. Sectors like energy, healthcare, transportation, and communications form the very fabric that sustains our daily lives. Understanding the…

In 2020, a cybersecurity firm called FireEye reported the discovery of a sophisticated, highly targeted cyber-intrusion. They detected a backdoor in SolarWinds Orion software, which, when the software was installed on thousands of servers by way of a routine patch,…

I regularly cover the topic of cyber-physical risk analysis in my writings, and as a result, I've received numerous inquiries on LinkedIn about the path to becoming a cyber-physical risk analyst. To address this question more efficiently for me, I've…

Cyber-physical risk assessments are some of the toughest tasks to handle because they involve a lot of decisions before even starting an assessment. These decisions include setting / choosing the goals of the assessment, planning how to approach it, and…