ICS/OT security · Consequence-driven engineering

Engineering the consequence out of reach

I'm Tyler Berube, a senior ICS/OT security architect. My day work is control system security for hyperscale cloud and data center operations. I write and speak about consequence-driven engineering.

Tyler Berube

Recent appearances

All talks and appearances

Latest writing

Subscribe by RSS
Approach

How I approach a design

01

Start from the consequence

I start with the consequence the operator needs to prevent, then work backwards through the system to see how it could happen.

02

Look for engineered protections

I look for changes to the engineering or operating procedures that can prevent that consequence, even if a control system is compromised.

03

Document the design

I use diagrams and PPSM matrices to record the design. Runbooks cover operation and recovery.

Working together

I take on a handful of outside engagements at a time: design and architecture review, technical review boards, and standards work. Some of it is pro bono.