"Start by performing a high-level risk assessment on each of the major control systems in your plant, company or corporation. While this may seem like a daunting task, it can be very manageable if you adopt a simple, lightweight risk assessment methodology."
"Arguably the most important tactical step that can be taken to improve the security of your industrial automation system is network segmentation using the IEC 62443 zones and conduits model."
"Harden the components of your system to prevent unauthorized access or changes, remove unnecessary functions or features and patch any known vulnerabilities."
"Effective ICS and SCADA security is not a one-time project. Rather, it is an ongoing, iterative project."