jdchristopher<p>So, an <a href="https://infosec.exchange/tags/introduction" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>introduction</span></a>, eh?</p><p>I'm a recovering <a href="https://infosec.exchange/tags/engineer" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>engineer</span></a>, former CTO, security researcher, and ex-regulator for <a href="https://infosec.exchange/tags/ICSsecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>ICSsecurity</span></a>. I'm now the Director of Cyber Risk at Dragos and I teach (and write) for <a href="https://infosec.exchange/tags/SANS" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>SANS</span></a>.</p><p>I've had a lucky career-- I've testified before the US Congress and several federal agencies (as well as a few other countries abroad) and have helped hundreds of industrial organizations improve their <a href="https://infosec.exchange/tags/OT" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>OT</span></a> security. I've helped write a handful of international standards and I have some strong opinions on what "good" looks like for ICS/OT.</p><p>I'll usually write/present on:<br><a href="https://infosec.exchange/tags/cyberrisk" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>cyberrisk</span></a> <a href="https://infosec.exchange/tags/metrics" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>metrics</span></a> <a href="https://infosec.exchange/tags/technical" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>technical</span></a> <a href="https://infosec.exchange/tags/standards" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>standards</span></a> <a href="https://infosec.exchange/tags/engineering" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>engineering</span></a> <a href="https://infosec.exchange/tags/safety" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>safety</span></a> <a href="https://infosec.exchange/tags/auditing" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>auditing</span></a> <a href="https://infosec.exchange/tags/industrial" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>industrial</span></a> <a href="https://infosec.exchange/tags/ICS" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>ICS</span></a> <a href="https://infosec.exchange/tags/IIoT" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>IIoT</span></a> <a href="https://infosec.exchange/tags/governance" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>governance</span></a> <br>...and whatever strikes my fancy. My focus over the past 5-10 years has been more board-level, but I spent a large part of my career in a hard hat trying to fix (and break) industrial systems.</p><p>That said, if anyone asks me "what do you do for a living?" I usually avoid talking about myself and instead deviate to more important things... like living a healthy, happy life and helping others where I can.</p><p>Oh, and memes. I shitpost memes about how absurd our small community can be some times.</p><p>Oof. 9,718 characters left. Uhh. Check out my bio here if you want more info: <a href="https://www.sans.org/profiles/jason-d-christopher/" rel="nofollow noopener noreferrer" target="_blank"><span class="invisible">https://www.</span><span class="ellipsis">sans.org/profiles/jason-d-chri</span><span class="invisible">stopher/</span></a></p>