Uploaded June 2026 | Updated September 2026, 2 weeks ago
Enterprise SOCs struggle to understand OT. OT SOCs struggle with risk identification, threat detection, and incident response. The community has been heavily focused on building OT SOCs, but very few are asking what OT SecOps should actually look like.
Adam presents several concepts they have been testing with the Siemens team that challenge conventional thinking, such as data stitching across OT alarm, safety, and control layers; the feasibility of OT-specific automated playbooks; and predictive modeling that bridges both security threats and process safety. These aren’t just technical features, they push back on current assumptions about how detection, triage, and response should function in industrial environments.
Subscribe to Dale’s ICS Security: Friday News & Notes email here:
friday.dale-peterson.com/signup
Check out S4x27. Feb 8 - 11 in Tampa:
s4xevents.com
Enterprise SOCs struggle to understand OT. OT SOCs struggle with risk identification, threat detection, and incident response. The community has been heavily focused on building OT SOCs, but very few are asking what OT SecOps should actually look like.
Adam presents several concepts they have been testing with the Siemens team that challenge conventional thinking, such as data stitching across OT alarm, safety, and control layers; the feasibility of OT-specific automated playbooks; and predictive modeling that bridges both security threats and process safety. These aren’t just technical features, they push back on current assumptions about how detection, triage, and response should function in industrial environments.
Subscribe to Dale’s ICS Security: Friday News & Notes email here:
friday.dale-peterson.com/signup
Check out S4x27. Feb 8 - 11 in Tampa:
s4xevents.com
