OT cybersecurity is finally on the agenda

On Tuesday 8 October, the Industrial Cybersecurity event took place in Congrescentrum 1931 in Den Bosch. Thirty exhibitors, over 350 visitors, an extensive seminar program and two plenary lectures created an event that is a showcase of collaboration. Cyber security is not something you do alone.

Friend or foe, that is the title of the first lecture. Liesbeth Holterman of Cyberveilig Nederland puts the audience on edge and opens the Industrial Cyber Security event. “I am not the expert,” she says. “You are.” And with a sense of drama she adds: “OT cyber security is finally on the agenda.” Liesbeth emphasizes the fact that cyber security does not stop at the Dutch border. “We have to tackle this together, at European level. Look at the map and you see that Europe is stuck between the United States, Russia and China. And what do we do when our friend (the US) suddenly turns out not to be our friend anymore?”

The message that Liesbeth wants to convey is a worldview that is free from naivety. “We stand with our hands behind our backs. We are completely dependent on American and Chinese systems.” We need to wake up and face reality. A lesson that she teaches everyone in the room: “Put yourself in the shoes of the actor. Who are we dealing with?” This can be very different for each situation. From a young teenager behind a laptop in his bedroom, to hostile states with inexhaustible resources and possibilities.

Bossche Bollen

At 11 o'clock the first part of the program is over and there are long lines of patiently waiting visitors in front of the coffee machine. From Groningen to Maastricht a large part of the visitors and exhibitors have already spent more than half a day there. Hungry eyes look with relish at the plateaus of Bossche bollen that congress center 1931 traditionally offers. Together we enjoy a well-filled chocolate breakfast with strong black coffee.

After a walk around the old cattle market, where the most innovative technical developments are now presented instead of cows, a friendly female voice echoes through the hall. After this small encouragement, the visitors walk to the lecture of their choice. All visitors have registered in advance for the extensive seminar program. It is impossible to follow everything, so you have to make a choice.

Galloway

The historic main building houses a small theatre: the Galloway. This gem among seminar rooms is one of the locations where the speakers of the Industrial Cyber Security event present their lectures. A wide variety of topics are discussed. From legislation and regulations and artificial intelligence to risk analysis. Chris van den Hooven, from Hudson Cybertec, throws all naivety out the window with the simple question: “Why doesn’t risk analysis always work?”

Chris explains that we are only inclined to take a risk seriously when it is a problem. “Risk is not a problem,” he shouts. “We deal with a problem differently than we deal with a risk.” And with a smile he adds: “So you have to turn a risk into a problem if you want something to be done. Especially if you want to get a budget for it.”

His take-home, before the small theatre empties towards the closing plenary lecture: “The greater the misery, the bigger your budget.”

Douwe Egberts

Regien Schagen, Global Program Manager for OT Security at Jacobs Douwe Egberts, closes the day. After a day full of sensational presentations, there is no longer an argument to hide behind a screen of naivety. Eyes have been opened and we are now fully aware that OT cybersecurity is a cross-border challenge that we must tackle together.

Regien tells the packed room: “You can’t get there with technology alone.” Cybersecurity is human work. “Benchmarking is the standard response. But we are in a chain. Together we are as strong as the weakest link.”

Regien steps off the stage and the plenary hall slowly empties towards the drinks. OT cybersecurity is now prominently on the agenda. It was a long day where a wide variety of specialists and professionals with very diverse backgrounds work together to make the digital world safer step by step.

Satisfied and ready for battle, we leave the 1931 conference center. From a cattle market to a cybersecurity center. The future does not wait.