From CyberGirls Fellowship to being trained in Miami : My Deep Dive into the World of Industrial Control Systems

“Wow! This is a great opportunity! I will be training with prominent and diverse professionals from all over the world! Meehhnn, I will get to learn about the critical components of industrial control systems! This is so great! Perhaps, I will be practicing, firsthand, the analysis of network traffic. So, just like that, I will be representing a renowned African organization in an international setting (in local parlance)!

These were the thoughts that crossed my mind when I was selected alongside two other brilliant professionals to represent Cybersafe Foundation – Africa’s leading non-governmental organization in the digital development domain – at the Global Industrial Control System workshop. This eminent workshop, held in Miami, Florida from the 22nd to 25th of August, 2023, was the collective effort of the U.S. Department of Homeland Security , the 美国国务院 , and the Cybersecurity and Infrastructure Security Agency (CISA). It was an enlightening event where I deepened my understanding of industrial control systems (ICS).

My name is Victoria Arinola . My journey began with an intense assessment as a certified SCADA security architect within Cybersafe Foundation. Owing to my commendable assessment scores, training involvement, and other criteria, I was deemed the top candidate from Nigeria. Following this, I navigated the complex maze of American visa application, a process notoriously challenging in Nigeria. But a ray of hope shone when CISA intervened, securing expedited interview dates for the program's chosen participants. This move significantly streamlined the visa acquisition process. In just a few weeks, I boarded a flight bound for the DoubleTree by Hilton Miami Airport & Convention Center, Florida. With the exceptional treatment I received, I saw myself as the Nigerian “Mark Zuckerberg” enroute the United States on a lifesaving mission.

During the training, I immersed myself in the intricacies of Industrial Control Systems (ICS) and their various components. This exploration encompassed Programmable Logic Controllers (PLC), Distributed Control Systems (DCS), Supervisory Control and Data Acquisition (SCADA), Intelligent Electronic Devices (IED), and Remote Terminal Units (RTU). Additionally, I familiarized myself with the ICS Cybersecurity Kill Chain, several ICS attack frameworks like MITRE ATT&CK, and the standard tools of ICS cybersecurity.

In-depth discussions on industrial communications unfolded, covering topics like Profibus, EtherNet/IP, Modbus/TCP, Profinet, DNP3, and Siemens S7 communication — areas I previously explored at Cybersafe Foundation. I also delved into standard architectures in industrial systems and various protocols ensuring smooth inter-device communication. My studies included understanding the "start" and "stop" functionalities in Siemens systems, methods to safeguard against unauthorized access, and real-world IT/OT scenarios, concluding with mitigation strategies against potential attacks.

Nearing the program's climax, I actively contributed to a group presentation titled "Developing an Organizational Understanding to Manage Cybersecurity Risk to Systems, People, Assets, Data, and Capabilities." Through this group task, I was introduced to the National Institute of Standards and Technology (NIST) framework, which I correlated with managing cybersecurity risks.

I owe a deep debt of gratitude to CyberSafe Foundation for offering young women like me such transformative opportunities. This experience was made possible through the ceaseless support from the exceptional leader, Confidence Staveley , and her dedicated Cybersafe Foundation team. My appreciation also extends to CISA for their collaboration with Cybersafe Foundation, ensuring I received this invaluable training. Truly, it was a defining moment in my life.

To conclude, the program connected me with over 20 global subject matter experts. The knowledge I amassed on industrial control systems is invaluable and will be instrumental in my endeavors with Cybersafe Foundation and beyond. Now, I can confidently articulate the nuances of ICS and network traffic. I'm eager to apply the skills acquired to bolster industrial control system security across Africa and beyond.

ABOUT CYBERGIRLS FELLOWSHIP

CyberGirls Fellowship is a free 7-month program that equips girls and young women aged 18 – 28 years old with globally sought-after cybersecurity skills, positioning them to start a career in cybersecurity and helping them to seize decent work opportunities within Africa and across the world. CyberGirls Fellowship is an initiative of CyberSafe Foundation . Read more about this initiative at https://cybergirls.cybersafefoundation.org