OT Security-Vendor Risk Management | Vikash Tiwari

TOPIC: OT Cyber Security - Vendor Risk ManagementIndustrial Control Systems are used in critical infrastructure such as utilities, oil & gas, Aviation, Medical Industry and vehicle manufacturing . Some examples - Industrial control systems (ICS) or supervisory control and data acquisition (SCADA) systems.Since the entire OT ecosystem is often managed by vendors, managing vendor risk becomes very important. Tune in to the episode to listen how we can follow a 'Defence in Depth' approach when working with Vendors in this space.GUEST: Vikash Tiwari,  IT Audit Manager @ ADQVikash is an experienced cyber security professional with 14 years+ in  various cyber security domains like Information Security / I&T Audit, VAPT and IT / OT GRC area. He was working as Sr. Cyber Security consultant with TUV Rheinland LLC Oman and currently with ADQ.  He has been focusing on Cloud Security Audits, DevSecOps, Critical Infrastructure Security and IIOT security areas..Recommended Reading/Resources for vendor risk management in OT:https://sharedassessments.org/ (dedicated resources for Vendor risk Assessment)Cobit 2019 - enrich resource for monitoring and managing I&T controls objectives, can be downloaded from ISACA website freely.https://www.isa.org/standards-and-publications/isa-standards/isa-standards-committees/isa99https://www.sans.org/industrial-control-systems-security/- SANS for ICS Security If you like to see more like this, please Subscribe to Breakpoint Youtube! Please Share with others in the community. It always means a lot!Follow us on LinkedIn: @breakpoint-security-podcastAudio on Buzzsprout: https://breakpoint.buzzsprout.comBuzz me on Twitter or LinkedIn Connect with me on -Twitter: @NeeluTripathy LinkedIn: @neelutripathy