Uploaded May 2026 | Updated September 2026, 1 week ago
You've identified OT cyber risks and a corresponding list of mitigations to reduce these risks. How do you select what mix of mitigations to do and in what order?
Hector suggests using a Return on Mitigation (RoM) metric to make these decisions. He went over how to use this consequence-based approach to ensure budget is available for the right actions at the right times.
Subscribe to Dale’s ICS Security: Friday News & Notes email here:
friday.dale-peterson.com/signup
Check out S4x27. Feb 8 - 11 in Tampa:
s4xevents.com
You've identified OT cyber risks and a corresponding list of mitigations to reduce these risks. How do you select what mix of mitigations to do and in what order?
Hector suggests using a Return on Mitigation (RoM) metric to make these decisions. He went over how to use this consequence-based approach to ensure budget is available for the right actions at the right times.
Subscribe to Dale’s ICS Security: Friday News & Notes email here:
friday.dale-peterson.com/signup
Check out S4x27. Feb 8 - 11 in Tampa:
s4xevents.com










