Ernie Hayden, executive consultant with Alexandria, Va.-based consultancy Securicon LLC and a SearchSecurity contributor, said recent data has shown the majority of ICS professionals aren't aware of the security vulnerabilities and risks affecting ICS.
In this video, recorded at the 2014 RSA Conference, Hayden discusses the importance of raising awareness about the importance of ICS security training.
"You've got to train your staff, the personnel out on the factory floor, to realize they need to pay attention to security issues," Hayden said. "But then if you're worried about it, what do you do?"
The next step, Hayden said, is to help the ICS industry understand the importance of security as compared to availability, which often trumps every other concern.
ICS is more ubiquitous than most people realize, Hayden added, noting that in addition to utility plants and manufacturing facilities, the technology is present in shipping, manufacturing and in most commercial buildings to control everything from lighting to thermostats, giving adversaries plenty of potential targets.