Explore industrial control system (ICS) and SCADA defense strategies in this comprehensive conference talk from BSides Augusta 2014. Delve into risk assessment methodologies, vulnerability mitigation techniques, and best practices for securing critical infrastructure. Learn about robust device configurations, network segmentation, protocol-aware security tools, and the importance of physical security measures. Discover how to implement defense-in-depth strategies, including software patching, DNP3 Secure Authentication, and network monitoring. Gain insights on employee awareness training and the significance of third-party testing for SCADA systems. Understand why compliance alone is insufficient for security and why proactive defense is crucial for protecting industrial control systems across various protocols beyond DNP3.