Zero Trust Roadmap for Critical Infrastructure | SecureWorld 2025

Cyber threats to critical infrastructure are no longer hypothetical — they’re already inside the walls. In this special SecureWorld session, Amy Yee (Chief Digital Transformation Officer at C3SA, Chief Digital Officer at Relevantz, and host of Wired for Change) breaks down a practical Zero Trust roadmap designed for OT and ICS environments. With a unique comic-book “villain persona” framework, Amy brings to life the real adversaries targeting energy, water, transportation, and healthcare systems — from state-sponsored groups like Volt Typhoon and Cyber Av3ngers, to ransomware crews behind Colonial Pipeline–style attacks, to precision saboteurs modeled on Stuxnet/TRITON. What you’ll learn in this episode: Why every country defines “critical infrastructure” differently — and why adversaries don’t care. A five-year timeline of global CI cyberattacks (2020–2025). The five systemic challenges facing OT and ICS security. How insecure legacy protocols (IEC-104, DNP3, Modbus) widen the attack surface. A step-by-step Zero Trust roadmap aligned with SANS ICS Critical Controls. The four cyber villain personas — Sleeper Agent, Saboteur, Loud Intruder, Extortionist — and how Zero Trust layers stop them. Common pitfalls and how to avoid them in CI cybersecurity programs. This isn’t theory — it’s a roadmap you can apply right now to strengthen resilience, break down silos, and protect the systems everyone depends on. #ZeroTrust #Cybersecurity #CriticalInfrastructure #OTSecurity #ICSSecurity #SecureWorld