MM-ISAC Blog

Digging into cyber resilience in mining and metals.

Reference Architecture

4 min read

Building a Common OT Architecture for a Diverse Mining Industry

Mining operations are becoming more connected, more automated and more dependent on digital systems. Autonomous equipment, private LTE and 5G networks, remote operations centres, cloud analytics and AI-enabled maintenance are increasingly part of...

Read More

3 min read

Nobody Measures the MTTR of the Humans Who Respond to Incidents

In cybersecurity, we obsess — rightly — over Mean Time to Recovery (MTTR).

Read More

1 min read

CCMIN and MM-ISAC Forge Strategic Cybersecurity Partnership for the Mining Industry

Orlando, September 20, 2025 — The Latin American Corporation for Cybersecurity in Mining (CCMIN) and the Mining and Metals Information Sharing and...

Read More

4 min read

Thoughts on MM-ISAC's 2025 Annual Conference

Now that I've returned home from MM-ISAC's Annual conference and have caught up a bit, I wanted to share my thoughts on this year's conference.

Read More

1 min read

MM-ISAC Annual Awards and Board Appointments

Every year, MM-ISAC recognizes member companies and individuals who go above and beyond to support its mission to improve cyber resilience in the...

Read More

3 min read

Effective Incident Response Starts Long Before the Incident

Cyber incident response is often viewed as a technical domain, with practitioners skilled in malware reverse engineering, network and host forensics,...

Read More

7 min read

Moving to Security Cost as a Metric

I’ve talked about security cost as the key metric to report on your security program when working with executives and the board. What we have not...

Read More

1 min read

Psychological First Aid – A Skill Needed in Resilience

When a cyberattack strikes, the immediate focus is often on technical recovery: restoring systems, protecting data, and resuming operations. But what...

Read More

1 min read

A Cautionary Note on Sensationalism in Cyber Security Headlines

This month’s focus is on the importance of double-checking the work of security researchers and headlines. We live in a fast-paced news cycle and a...

Read More

2 min read

Phishing Education - Maybe 'Best Practice' is not Best After all

As security practitioners and leaders, we must contribute to the professionalization of our field by searching out data and evidence-based solutions...

Read More