Mike Hoffman
Mike Hoffman is Field CTO at Dragos for Oil & Gas and Petrochemicals, bringing 26 years of industry experience. His career spans Shell Downstream and Upstream roles — from Instrumentation Technician to Global Principal ICS Security Engineer for Shell's worldwide Downstream operations. He joined Dragos as a Principal Industrial Consultant before moving into his current leadership role.
Mike holds an MS in Information Security Engineering from the SANS Technology Institute, is a SANS Certified Instructor for ICS410, ICS515, and ICS612, and holds 18 GIAC certifications, including the GSE.
4:15 pmBeyond Backups: A Practitioner's Approach to OT Disaster Recovery
40 minutesMike Hoffman
Beyond Backups: A Practitioner's Approach to OT Disaster Recovery
Most OT disaster recovery plans stop at "restore from backup." For industrial environments, that's not a plan, it's a hope. When a cyber incident takes down a PLC, DCS, or SCADA-based system, recovery isn't an IT restore job. It's a sequenced, dependency-aware process with real process-safety implications, with an MTD measured in minutes to hours, not days.
This talk walks through a practical, threat-informed framework for OT DR, from mapping cyber attack scenarios to shutdown levels, through dependency analysis, RTO/RPO sequencing, and reconstitution of the production process itself. Based on real-world experience in OT environments, attendees will leave with a structured approach they can take back and apply.