Is this you? As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work.
Claim your profile
Articles by Patrick Miller
Effective Threat and Vulnerability Management for Governance, Risk and Compliance (GRC) - GRC Viewpoint
Few would argue that GRC is a key component of the cybersecurity portfolio for any modern organization. Sound GRC ensures an organization is operating within legal and regulatory frameworks while minimizing risks and maximizing opportunities. Management of threats and vulnerabilities is an essential component of a successful GRC program.
How Not Deploying Zero Trust Data with AI May Risk Team Safety, Mission Failure
Prologue: A critical component of next-generation security is the adoption of Zero Trust Architecture (ZTA) for physical security equipment (PSE) and Operational Technology (OT) environments. As AI capabilities grow exponentially, ZTA greatly enhances and optimizes AI effectiveness; without ZT data, the risks are undoubtedly high.
Unsupervised classification of graded animal vocalisations using fuzzy clustering
Abstract We present here an unsupervised procedure for the classification of graded animal vocalisations based on Mel frequency cepstral coefficients and fuzzy clustering. Cepstral coefficients compress information about the distribution of energy across the frequency spectrum into a reduced number of variables and are well-defined for signals of various acoustic characteristics (tonal, pulsed, or broadband).
Elevating industrial cybersecurity: Insights from the 2024 RSA conference
The recently concluded 2024 RSA Conference highlighted industrial cybersecurity as a central theme, underscoring its integration into mainstream concerns. With the increasing reliance on interconnected industrial systems, the sector faces rising threats ranging from ransomware to supply chain vulnerabilities.
Proposed CIRCIA rule boosts cyber threat understanding, early detection of adversary campaigns, offers coordinated actions
With the recent release of a proposed rule under the Cyber Incident Reporting for Critical Infrastructure Act of 2022 (CIRCIA) by the U.S. Cybersecurity and Infrastructure Security Agency (CISA), critical infrastructure owners and operators will likely bolster their cybersecurity posture from rising threats and attacks.
Embracing AI for the Electric Grid: Insights from NERC — Ampere Industrial Security
In the rapidly evolving landscape of the electric sector, the integration of cutting-edge technologies is not just an option; it's a necessity. Among these, artificial intelligence (AI) stands out as a transformative force, offering unprecedented opportunities to enhance grid reliability, security, and efficiency.
Energizing Cybersecurity Careers — Ampere Industrial Security
Cynthia Hsu LinkedIn profile https://www.linkedin.com/in/cynthiahsu33/ Erin Owens LinkedIn profile https://www.linkedin.com/in/erinowens/ DOE CESER Cybersecurity Training for the Utility Workforce, free 3-day ICS Cybersecurity training for electric and ONG utility staff.
US Congressional hearings on cybersecurity highlight urgency to protect critical infrastructure, OT from cyber threats
Recent U.S. Congressional hearings on cybersecurity serve as crucial platforms for examining the threats faced by operational technology (OT) and critical infrastructure sectors.
FERC Chairman's Reliability Report: A Year in Review — Ampere Industrial Security
In 2023, FERC Chairman Willie L. Phillips' report highlighted advancements in U.S. power grid reliability, focusing on enhanced cybersecurity measures, physical grid security improvements, and resilience against extreme weather. Key initiatives included the implementation of new cybersecurity standards, incentive-based cybersecurity investments, and transmission reforms to accommodate evolving energy resources.
NERC's New INSM Regulation: Assessing Impact and Ambiguity — Ampere Industrial Security
The first draft of the INSM requirements is as low on ambition as they are high on ambiguity. While it takes a stab at meeting FERC’s directives, Requirement 6 tiptoes around the specifics, leaving industry insiders to navigate a labyrinth of vague directives and unbaked definitions. The draft sidesteps firm commitments on network monitoring coverage, edges around the murky concept of 'anomalous activities,' and casts a controversial net by possibly looping in external EACMS.
Embracing the Cloud: A New Era for BES Operations — Ampere Industrial Security
This insightful blog post delves into the critical aspects of cloud migration, offering a strategic roadmap for businesses. It emphasizes the importance of a well-thought-out plan, highlighting the need for compatibility assessment, data security, and cost management. The article also stresses the significance of choosing the right cloud provider and preparing the workforce through training and support.
Understanding NERC's CIP-004-7 and CIP-011-3: A Deep Dive into BCSI Access, Cloud Challenges, and Encryption — Ampere Industrial Security
What is “Access” to BCSI? It is defined as both the ability to obtain and use BCSI What is “Provisioned Access”? The result of the specific actions taken to provide an individual the means to access BCSI May include physical keys or access cards, user accounts and associated rights and privileges, and encryption keys BES Cyber Systems (BCS), Electronic Access Control and Monitoring Systems (EACMS), and Physical Access Control Systems (PACS) typically contain BCSI.
Inverter-Based Resources - Guide to Potential NERC CIP Impacts of Upcoming Regulatory Changes — Ampere Industrial Security
Part 1 Upcoming NERC regulatory changes are expected to result in a significant increase in registrations of inverter-based resources, resulting in the likelihood of control centers to be categorized as North American Electrical Reliability Corporation (NERC) Critical Infrastructure Protection (CIP) Medium-Impact Control Centers and/or Low-Impact Control Centers and correspondingly to meet the relevant NERC CIP requirements.
The European Union's Upgraded NIS2 Cybersecurity Framework — Ampere Industrial Security
The European Union, with its commitment to digital governance and cyber protection, has recently updated its foundational cybersecurity framework, repealing the previous Network and Information Systems Directive (“NIS”) with the NIS2 Directive. Take a dive into the notable changes, implications, and suggested actions for businesses that fall under its scope.
Land of opportunity - why Australian investors are being drawn to the United States
Billions of dollars worldwide are pouring into the transition to green energy, no more so than in the United States (U.S.) where new legislation is providing a powerful stimulus. For Australian investors, the opportunity to invest in the U.S, and benefit from a raft of green tax incentives, may be too good to resist. At the core of the effort is the U.S. government's unprecedented support for energy transition.
NERC Initiates Data Collection on INSM for Low Impact CIP Assets — Ampere Industrial Security
NERC has initiated the Internal Network Security Monitoring (INSM) Data Request in response to a directive from FERC. This effort aims to gather data on the risks of not implementing INSM in medium and low impact BES Cyber Systems. NERC is collecting information from utilities in the electric power industry regarding facility numbers, network configurations, malicious code detection, implementation challenges, and alternative solutions. The data must be submitted by July 25, 2023.
Ampere Industrial Security and DeNexus, Inc. Partner to Enhance Cyber Risk Data Sets for the Industrial Sector — Ampere Industrial Security
By Patrick Miller Ampere Industrial Security, the global leader in industrial cybersecurity consulting, and DeNexus Inc, the leading provider of second-generation cyber risk quantification and management to large industrial facilities, OT service providers, and the cyber risk transfer market, announce their partnership today. The alliance between the two cyber risk and management specialist firms will create a finely tuned cyber risk data set customized by industrial sector.
New Low Impact NERC CIP-003-9 Regulations: Vendor Supply Chain Security — Ampere Industrial Security
Panelists Patrick Miller, CEO, Ampere Ron Fabela, Industrial Security Champion and Sr Consultant, Ampere Jason Smith, Sr Consultant, Ampere Carter Manucy, Sr. Manager - Cybersecurity, NRECA Show Links FERC Order Approving Reliability Standard CIP-003-9 - Docket No. RD23-3-00 CIP-003-9 Reliability Standard, NERC NERC Project 2020-03 Page for all documents related to the drafting and adoption process for CIP-003-09 All draft versions Redlines to last posted/approved Technical Rationale VRF/VSL...
New cybersecurity controls required for vendor access to low-impact NERC CIP assets — Ampere Industrial Security
FERC has approved new cybersecurity standards to improve risk management practices and supply chain risk management for low impact assets. The new standards, designated CIP-003-9, require utilities to establish and maintain a documented supply chain cyber risk management plan and implement vendor-focused cybersecurity protections for their low impact BES Cyber Systems. What Happened?
Securing Control Center Communications Is More Than Encryption — Ampere Industrial Security
Effective July 1st, 2022, North American Energy Reliability Corporation (NERC) registered entities were required to comply with the new Critical Infrastructure Protection (CIP) standard CIP-012 (version 1) to protect the confidentiality and integrity of Real-time Assessment (RTA) and Real-time monitoring (RTM) data transmitted between Control Centers. RTA/RTM data is data used for the evaluation of system conditions and addressed in the NERC standards TOP-003 and IRO-010.
S4x23 Trip Report — Ampere Industrial Security
This year, the S4 event hosted by Dale Peterson (DigitalBond) was bigger than ever. New venue, new content, new challenges, new theme, and a new feel. Here’s a report of my experience with some bad, some good and some great things that happened… Note that this isn’t a comprehensive conference debrief, just my opinions on some of the things that I saw. There was so much going on that I doubt any single person could see it all.
A year later, Russia-Ukraine war directly impacted ICS/OT cybersecurity, as watchful awareness continues to grow
It has been one year since Russia launched its invasion of Ukraine, resulting in the deaths of several thousand people and the displacement of millions, and causing billions of dollars worth of economic damage in the aftermath. The Russia-Ukraine war, which broke out on Feb.
What to do about FERC's new INSM Order 887 — Ampere Industrial Security
Also see our blog on the INSM order… The following text is a transcript from the Ampere Industrial Security Critical Assets Podcast, Episode 1 - What to do about FERC’s new INSM Order 887. PATRICK MILLER: Hi, everyone. Today with us I've got Carter Manucy. He's with Florida Municipal Power Agency (FMPA). I'll let him introduce himself in just a minute, but today we're going to talk about the INSM Order from FERC that recently came out.
GRIMM and Ampere Form Alliances and Pledge to Secure Critical Infrastructure — Ampere Industrial Security
By Patrick Miller GRIMM, a forward-looking cybersecurity organization led by industry experts, and Ampere, a security consulting firm specializing in industrial control systems (ICS), are proud to announce an alliance to secure critical infrastructure around the globe.
Alexa, can you tell me when my grid is hacked? — Ampere Industrial Security
A new addition to the NERC CIP regulation is coming for the electric sector requiring anomaly detection and internal network security monitoring to detect active attacks on critical systems.
CISA CPGs will likely set acceptable standards for organizational cybersecurity posture across critical infrastructure
Intending to reduce cyber risk across critical infrastructure sectors, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) published a set of voluntary and not comprehensive cross-sector cybersecurity performance goals (CPGs) to help establish a standard set of fundamental cybersecurity practices for the critical infrastructure sector. These baseline objectives will likely help raise industrial cybersecurity posture while prioritizing decisions, spending, and driving action.
Growing necessity for rail industry to keep cybersecurity concerns ‘on track’
Technological advancements in the rail industry have increased system interconnections, signaling, control, and telemetry, leading to the overall cybersecurity posture becoming more vulnerable to cyberattacks.
Show More
loading
Actions
Is this you?
As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work.Get in touch with Patrick
Contact Patrick, search articles and posts on X, monitor coverage, and track replies from one place.
Learn more about Muck Rack