ICS Security Conference 2025

JPCERT/CC’s 2025 ICS Security Conference brought together government, industry, and security experts to review the ICS threat landscape and share practices for resilience. Key themes included the continuing impact of ransomware on manufacturing, emerging ICS-targeting malware mentions (e.g., FrostyGoop, IOcontrol), updates and maturity alignment in IEC 62443, integrating cybersecurity with Process Safety Management, applying CTEM to OT environments, lessons from ICS incident response exercises, SBOM operationalization and challenges, and pragmatic asset management for vulnerability response. The event emphasized regulatory developments (NIS2, CRA), AI/quantum implications, and cross-stakeholder collaboration to strengthen ICS security.