What has your experience been with cybersec in Industrial and Operational Technology type environments?
My background has mostly been in basic computing environments this far - largely Windows AD based, with tasking ranging from staying on top of patches, performing and reacting to vulnerability scanners, to implementing NIST controls. Fundamental stuff, enhanced with studies towards other points of interest (CISSP especially) and people's experiences here.
After my last contract ended I got picked up by another company that is leveraging that experience to put NIST controls on a physical space, as well as doing vuln scans and suchlike for others. So far I haven't really had to do anything too far outside of my experience base, though the target environment is more physical and less digital (for now).
All of this is basically a prelude for what the company wants to do longer term, and my team lead has been discussing putting together in-house labs and build experience with OT and industrial control systems. Naturally there will be a lean towards our current customer base and we'll probably be reaching out to them for support, but it got me thinking about other people's experiences with working in these environments, or even just setting up labs to try it out. Naturally I have some level of expectations, but don't yet have a whole lot of direct exposure into this realm yet, beyond essentials like physical security.
What kind of cyber stuff goes on out there in the OT / Industrial control world? What's your workflows and deliverables like, and what kind of tools do you interact with? What has lab building been like?