[SCADASEC] Industry Experts

[Clint Bodungen]

But I was just about to throw *my* stones... ok just kidding, I really
didn't have anything negative to say.  I just wanted to touch on one
cautionary point.  Mr. Boyes went through a list of "SCADA Security Experts"
and it reminded me of something.  It hasn't been mentioned so far (that I
know of) but asset owners should be weary of what SCADA Security Industry
"Thought Leaders" (HAHA I love that buzz word) they follow into the woods.
There *are* "charlatans" (as Myrcurial made mention of in another thread)
out there that have made a name for themselves by passing others' research,
presentations, and even skills off as their own (skills they themselves do
not possess), essentially taking advantage of this legacy industry's naivety
(that point is a fact, not my opinion.  I have proof though I will not
disclose it).  These individuals, then, end up leading asset owners to the
wrong conclusions and down the wrong paths to potentially more harm than
good (In the land of the blind the one eyed man is king... even if he can
barely even see out of the other eye).  I've seen it happen on more than one
occasion and it's still happening.  What's worse is that some of these
individuals could be sitting on a standards board or two.  

Please do your own research, get more than one opinion, use/evaluate more
than one consultant, evaluate multiple products of the same category, and
perform your due diligence before you listen to a single person, presenter,
consultant, company, or even "authority."  

I don't claim to be an expert nor do I play one on TV... don't listen to
me... go see for yourself.


Clint     

  

-----Original Message-----
From: scadasec-bounces at news.infracritical.com
[mailto:scadasec-bounces at news.infracritical.com] On Behalf Of Bob
Radvanovsky
Sent: Wednesday, February 13, 2008 9:37 AM
To: scadasec at news.infracritical.com
Subject: Re: [SCADASEC] IBM is offering 'SCADA security best practices'...

I hate to put a stop to such a 'hot topic' as this, but this topic appears
to be taking on a more personal approach to this subject...

We all (obviously) have different views of who's right and wrong -- and it
is pretty apparent that we can (at least) agree on this much.  So, let's
agree that we disagree on this subject matter, and move onto the next
subject.  It is apparent that we have several members who have difference of
opinions, and it is both my own opinion, as well as several others from this
list -- who feel that -- if you wish to discuss this further, please do so
'offline' or privately.

Thank you.

Bob Radvanovsky
rsradvan at infracritical.com
SCADASEC-L Owner

_______________________________________________
To unsubscribe from this mailing list, please visit:
http://news.infracritical.com/mailman/listinfo/scadasec

To review our privacy statement, please visit:
http://www.infracritical.com/privacy.html

scadasec at news.infracritical.com
http://news.infracritical.com/mailman/listinfo/scadasec