Debashish Das

Background

About Debashish Das

Industrial OT SME over 20 years of experience and last 7 years in OT security role, expertise in securing OT environments across Manufacturing factories, Building management, R&D Labs, Experience & Training centres, Healthcare Lab, Shop floor, Warehouse & critical infrastructure. Designing future-state cybersecurity architectures, implementing risk management strategies, and integrating leading security tools such as CrowdStrike EDR, Claroty, Nozomi Guardian, and Rapid7. Aligned with industry standard regulatory frameworks (ISA/IEC 62443, Purdue Model) and bridging the gap between IT and OT. Strong skills in network segmentation, threat detection, and incident response within industrial control system environments. Protecting all such systems/Networks which are fall below Enterprise Zone but also required to have seamless connectivity to Enterprise network or Cloud. Such systems typically starts from Industrial DMZ Level-3.5 till Level-0 per Purdue model. They can be Manufacturing Process-Control-Network (PCN), Smart Building Automation Network (BMS), Engineering and R&D Las, Factory acceptance Testing shop floor area, Healthcare Labs, IoT Lab, Airgap Lab etc. Protecting these Environments from any unauthorised access, malware, WannaCry like ransomware, Stuxnet and DDoS attack etc. As a Security solution Architect, I Evaluate present security posture of the system, identify the security weaknesses, and provide roadmap to remediate it. • OT Asset Management & Compliance Comprehensive Asset inventory, Asset Monitoring, Asset high-availability, Asset integrity and Assets stay compliance (patching & updates). • OT Risk management & Defence-In-Depth measures: System Hardening, Zones & Conduits, Firewall rules, Unidirectional gateway, vLAN with ACL, OS hardening Patch management for OT and non-OT devices align with IEC 62443-2-3 framework, Anti-malware Management, EDR, Access Control (IAM), Group Policy management, USB threat protection, Vulnerability management, Risk assessment, Application Whitelisting, Disaster Recovery, Advanced threat (attack pattern detection), Anomaly analysis, micro-segmentation with Zero Trust etc. • Various Tools using - ICS/OT Vulnerability management: Passive monitoring with Claroty, Nozomi, Rapid7 - OT automated Asset discovery with Claroty, Forge, Nozomi, ServiceNow discovery. • PLC DCS SCADA HMI RTU VFD QCS • Windows Server 2019, Windows 10, VMware 6.5 • DCS worked on Honeywell Experion PKS, ABB 800xA, Yokogowa and QCS. • Domain knowledge in Pulp & Paper manufacturing & Thermal Power generation.