SEC536: Adversarial AI - Penetration Testing AI Systems
SEC536Offensive Operations, Artificial Intelligence
SANS Community Benefits
Connect, learn, and share with other cybersecurity professionals
About Andrew McPhee
Andrew McPhee is one of the most prolific and practical voices in industrial cybersecurity today. As IIoT Security Solution Manager at Cisco, he has spent a decade translating the complex realities of OT security into actionable frameworks, reference architectures, and guidance that organisations across the globe rely on to protect their most critical assets.
Speaker / Contributor: This individual participates in SANS events, presentations, written content, or other community resources as an external contributor. They are not a SANS employee, instructor, or affiliate.
His published work spans the full breadth of the OT security challenge. Recognising that safeguarding industrial control systems from cyber threats is a critical priority, but that transforming intentions into effective action can be challenging, Andrew has authored Cisco Validated Designs — proven reference architectures that industrial organisations use to build advanced security capabilities and create a flexible foundation for the future. His most recent Validated Design takes a phased approach encompassing OT asset visibility, zero-trust access and segmentation, and cross-domain detection, investigation, and response.
A recurring theme across Andrew's work is the danger of the unknown. Through real-world examples, he has exposed the risks posed by outdated protocols, the hidden vulnerabilities many industrial networks carry, and the critical importance of network segmentation and visibility in preventing costly operational shutdowns. He has written extensively on TSA cybersecurity mandates for critical infrastructure sectors and produced dedicated guidance on NERC CIP compliance — consistently bridging the gap between regulatory requirement and real-world implementation.
Andrew has presented multiple sessions at Cisco Live, contributed to the ISA Global Cybersecurity Alliance, and featured on the Industrial Cybersecurity Insider podcast. He holds a Bachelor’s degree in Mechatronics Engineering and a Master's degree in Electronic and Computer Engineering with a major in IoT from Dublin City University, Ireland.