@kairoer

Author, speaker, trainer, advisor. Creator of the Security Culture Framework. Inspiring leaders worldwide. Motorcycles, food, cybersecurity. Whats not to like?

 On the road
roer.com
Joined February 2009
  • Tweets33.3K
  • Following1.1K
  • Followers3.2K
My happy face is on, being honored with the @cloudsa Ron Knode Award tonight @ #csaemea cc @csanorway #Thanks!
3
8
24
For 19 years, Verizon's DBIR said the same thing: the human is the door. Hand over the wrong credential, and the attacker is in. This year it changed. Unpatched machines are now the #1 breach vector. Here's what that means — and what NIS2 just made personal: 🧵
1
2
96
more replies
The accountability cascade: Board approved the framework → CEO delegated the programme → CISO ran the scanners → Scanners missed entries never enriched by NVD → Patch window: 43 days. Adversary: hours. Everyone in that chain without evidence of active oversight is exposed.
1
23
Audit test: If an auditor walked in today and asked for evidence your controls are working — not that they exist, not that they were funded — what would you show? Policies and records = evidence of effort. NIS2 asks for something else. roer.com/essay-effort-is-no-…

Essay — Effort Is No Longer a Defense

From Board to Breach: The Accountability Chain NIS2 Just Made Explicit

medium.com
63
In 2007, I walked into a factory in Northern Europe without showing ID to a single person. The only credential: a hair net. That factory got connected. The hair net didn't change.
1
38
The PLCs are now networked. The SCADA systems are remotely accessible. The maintenance vendor has a VPN. The HVAC contractor has another. The digital entrance has no credential at all.
21
Two executives in a board meeting. One: "Our AI token consumption is up 3400% month-on-month." Board: "What are we getting for it?" The other: "Token spend is flat. Output quality is up. Decision error rates are down." Only one of them owns the room. Thread on why →
50
Nord Stream. Baltic cables. GPS jamming. Hormuz. Eskom. Taiwan Strait. They look like separate crises in separate regions. They're the same vulnerability: critical systems built on the assumption that the outside world would stay stable. It didn't.
1
35
The perimeter guard is still in his booth. The door is still unlocked. The hair net is still the only credential required. 2007 → 2026. Not the factory. What's waiting outside. Part 2 of 6: roer.com/can-you-still-take-…

Can You Still Take Out Our Factory?

Part 2: The Pink Cloud Turned Red

roer.com
34
GPS jamming across Scandinavia is now routine. Aviation. Maritime. Emergency services. All affected. The same spoofing is documented across the Middle East, Black Sea, South China Sea. Any nation dependent on satellite navigation is exposed. Which is every nation.
1
26
The Strait of Hormuz closed in March 2026. 20% of the world's oil moves through that waterway. Tanker traffic collapsed. 6,000 km from that chokepoint, the factory I walked through in 2007 felt it. More directly than any intruder at the gate. #cybersecurity
1
26
In 2007, I walked into a factory. Nobody stopped me. In 2026, that door is still unlocked. What changed is everything outside it. Nord Stream. Hormuz. GPS jamming. The pink cloud turned red. 🧵 roer.com/can-you-still-take-…

Can You Still Take Out Our Factory?

Part 2: The Pink Cloud Turned Red

roer.com
1
93
September 2022. Three of four Nord Stream pipelines destroyed by underwater explosives in the Baltic Sea. Critical energy infrastructure. Assumed untouchable. Gone overnight. Europe's gas supply architecture changed in a single day. That's not a risk scenario. That was Tuesday.
1
25
I asked: what if this had been a terrorist with anthrax? Published the story. It circulated. People nodded. Everyone moved on. The factory didn't change.
1
13
And when a critical infrastructure failure traces back to a governance gap — unreviewed access controls — that's not an ops problem. That's a board accountability question. A fiduciary liability question.
1
17
The factory hasn't changed in 19 years. What's changed is the world outside it. Part 1 of 6. Full piece: roer.com/can-you-still-take-… #CriticalInfrastructure #PhysicalSecurity

Can You Still Take Out Our Factory?

Part 1: The Walk-Through

medium.com
28
That was one of Norway's largest food producers. One year after a food poisoning scandal that killed customers. If ANY facility should have been locked down, it was this one.
1
27
Load more