Michael Hoffman
Certified InstructorTechnical Leader at Dragos, Inc.
Specialities
Industrial Control Systems Security

Experience SANS training through course previews.
Learn MoreLet us help.
Contact usBecome a member for instant access to our free resources.
Sign UpWe're here to help.
Contact UsIndustrial Control Systems Security

Michael teaches industrial cybersecurity the way it is practiced. He learned in the field working with instrumentation and analyzers, then moved into automation and industrial control systems / operational technology (ICS/OT) security roles that kept complex plants safe and reliable. Today, he is a SANS Certified Instructor and the Field CTO for Oil & Gas at Dragos, Inc., teaching SANS ICS410: ICS/SCADA Security Essentials and SANS ICS612: ICS Cybersecurity In-Depth. With 25+ years across instrumentation, controls, and ICS/OT security, his classes stay grounded in how cybersecurity work in critical infrastructure actually gets done.
Mike is a great instructor. He has a huge amount of information to share and teach. He has a very relaxed, non-pushy, style of teaching that puts you at ease.
Mike has been such an awesome teacher for this course! It has been amazing to have such interesting material delivered by such an experienced ICS Cyber security practitioner.
Michael Hoffman an amazing fit for instructing this course. His background and experiences in Instrumentation/Automation/OT Security truly enrich the student's experience.
Mike has a wealth of knowledge, explains complex topics with ease and is ready to answer questions.
Here are upcoming opportunities to train with this expert instructor.
Explore content featuring this instructor’s insights and expertise.
Operational Technology (OT) environments are more dependent than ever on remote access—for vendor support, troubleshooting, and data sharing—yet each connection can expand the attack surface.

Join us at the 2025 Government Security Forum on July 22nd at 10:00 AM ET to gain intelligence, tools, and real-world strategies needed to defend your agency against next-generation cyber threats. Register for free today!

This talk will cover various data sources and attacks on data, including data sources used for AI/ML processing. The focus will be on how to confront and mitigate these data attacks in ICS/OT environments.

The SANS ICS Five Critical Controls continue gaining traction among the community as well-regarded and must-needed security controls to achieve an organization's baseline ICS/OT Cybersecurity level. However, once established, controls must be assessed to ensure they are implemented soundly. This presentation will review each control and provide areas for quick wins.

This talk provides insights into designing and executing Tabletop Exercises (TTX) for Incident Response in Industrial Control Systems (ICS) and Operational Technology (OT) environments.

Review relevant educational resources made with contribution from this instructor.