Cybersecurity FAT/SAT Testing: Pitfalls and Wins - SANS ICS Security Summit 2021

Everybody knows and understands that factory acceptance testing and site acceptance testing must be done to make sure a project or system has been implemented as agreed within the design specifications.

However, as cybersecurity is more and more important, cybersecurity testing during FAT and SAT test cycles should be performed as well. However, this most of the times not performed due to various reasons.

Or when it is done, it is not done extensively enough to cover everything.

In this presentation the various pitfalls and wins of cybersecurity FAT/SAT testing will be explained further.

After this presentation you will better understand the why, what, when, how and receive information to be able to start a SCADA vendor cybersecurity validation process.

Speaker:
Dieter Sarrazyn, Freelance SCADA/ICS/OT Security Consultant, Secudea

[solimanmahmoud]

Very interesting lecture; it is critical to include FAT/SAT as assurance tasks within the project design phase (to establish Asset Integrity and Process Safety requirements).

[FadiHasan]

We are working currently on an ICS cybersecurity project for an oil and gas company and the manufacturer is performing an integrated FAT (iFAT) remotely (streaming). There will be a replication of the ICS environment.
I'm really concerned and enthusiastic how the performance will go. Have you ever faced such a case?