Robert Di Pietro

Industrial control systems and critical infrastructure continue to become increasingly automated and digitised, yet it is an inescapable fact that we are still dependent on humans for the end-to-end security of these systems and services.

Five years ago we published a paper identifying the top 10 most common cyber security weaknesses that PwC encountered in control system environments based on our global experience. Despite the advances in technology and the increase in cyber threats to ICS environments, today we still observe the same weaknesses as we did five years ago.

We believe this reflects the lack of investment into the human aspect of ICS security, as many of these weaknesses ultimately stem from a lack of crossdepartment collaboration and security awareness.

This presentation, rich with examples and takeaways, will focus on how organisations relying on ICS can strengthen their cyber resilience through a humancentric approach, and build a sustainable cyber-aware culture across organisational boundaries.