I have worked with industrial control system security for over 15 years. In that time the field has gone from being a niche for the especially interested to something that concerns society as a whole, and that is much of why I find the work meaningful. The systems we secure keep the lights on and the platforms running safely. When everything works, hardly anyone notices, and that is how it should be.
I started Lumiar because I am convinced that good OT security requires understanding both the technology and the people who operate it. My own work has centred on security architecture, barrier analyses, risk assessments and audits, in oil and gas, power, transport and other critical infrastructure. I also lead the working group in NEK NK 65, where the IEC 62443 standard is handled on behalf of Norway. The standards work gives me a good view of where the industry is heading, and where it still lags behind.
Along the way I have led many projects and teams, and worked with tenders, sales and business development. That experience has taught me that it is always about people, whether you are standing in a machine room, reviewing a topology drawing, writing a tender or sitting in a negotiation. Good solutions emerge when people trust each other, share what they see and know, and dare to say what they think, or are unsure about. The technology is rarely the hardest part.
One of the best things about this field is precisely the people in it. I get to work with exceptionally knowledgeable and genuinely pleasant people who share generously, whether in committee work or over a coffee in breaks and meetings. I value that culture of sharing greatly, and it is what I want Lumiar to build on.
When I am not working on security, I am usually thinking about security and collaboration anyway. But I am happy to muse about plenty of other things too.
You will get a reply shortly.