Kelly Shortridge - Security Chaos Engineering in ICS

<p>Kelly joins Dale to discuss her new book <a href= "https://www.amazon.com/Security-Chaos-Engineering-Sustaining-Resilience/dp/1098113829/"> Security Chaos Engineering: Sustaining Resilience in Software and Systems</a>. Kelly points out the second part of the title is the most descriptive, and she is not a big fan of the Chaos term that has taken hold.</p> <p>They discuss:</p> <ul> <li>A quick description of Security Chaos Engineering</li> <li>Is there similarity or overlap with the CCE or CIE approach?</li> <li>The value of decision trees</li> <li>Her view of checklists of security controls like CISA's CPG</li> <li>Lesson 1 - "Start in Nonproduction environments"</li> <li>The experiment / scientific method approach and how it can start small</li> <li>The Danger Zone: tight coupling and complex interactions</li> <li>How should ICS use Chaos Engineering</li> </ul>