Ten Minutes with the Board: ISO/IEC 27005, the NIST Cybersecurity Framework 2.0, and Mapping It All to IEC 62443

Deep End Era. Engineering with Sankalp · Oct 28, 2026 · 1h 11m

Diego Ferrer, the EPC's lead instrument and control engineer, and Henrik Dahl, the group information security manager, are given ten minutes on the board agenda to explain the cyber risk of the Al Sahil Gas Complex. Their first draft has 46 slides. Their last draft has four. Part six and the finale of The Deep End's IT and OT security series.

Chapters

00:00:00 Cold open: forty-six slides

00:05:14 Why risk language is the bridge

00:09:36 ISO/IEC 27005:2022: what it is and what changed

00:15:50 Context, criteria, and two ways to find risks

00:21:12 Analysis, evaluation and treatment

00:26:53…