Founder / Professional Engineer
Michael Toecker is a Professional Engineer specializing in the cyber security of industrial control systems, and predominately those within the electric power sector. A graduate of the University of Missouri-Rolla’s accredited Computer Engineering program, he has a focused background in the development of computer systems, hardware engineering, electronics, networking, and software development.
Toecker started his career at the consulting engineering firm Burns and McDonnell, working specifically for electric power infrastructure owners on cyber security and compliance projects. While at Burns and McDonnell, Mr. Toecker participated in successful penetration tests directed at Energy SCADA infrastructure and led multiple cyber security assessments of generation, transmission and control center facilities. In addition, Mr. Toecker has worked federal control system security projects, namely assessments of massive building control systems.
Toecker then moved to NextEra Energy, a sister company of Florida Power and Light. At NextEra, Toecker was part of a team responsible for ensuring the compliance and security of multiple generation facilities that had been designated NERC CIP Critical Assets.
Toecker then moved to Digital Bond. While at Digital Bond, Toecker had the opportunity to assess and consult with industrial facilities worldwide to identify vulnerabilities and recommend appropriate mitigations. While at Digital Bond, Toecker led assessments and conducted research into various different infrastructures, systems, and product lines.
In April of 2014, Toecker left Digital Bond to start Context Industrial Security, a boutique engineering and cyber security consulting firm. At Context, Toecker focuses on the dividing line between engineering and cyber security, attempting to reconcile differences between information security and operations practices, and developing recommendations that strive to preserve the availability and reliability of the infrastructure, while ensuring that adequate security is being designed to protect against threats to that infrastructure.
Most recently, Toecker was tapped as the subject matter expert for several large scale cyber security exercises meant to test the resilience of energy sector to a significant cyber event.
Lessons Learned from Liberty Eclipse Phase II. The Department of Defense (DoD) shares the national concern regarding a cyber-attack on the U.S. power grid. As such, the Defense Advanced Research Projects Agency (DARPA)’s Rapid Attack Detection Isolation and Characterization System (RADICS) program is challenging researchers to develop technologies to enable the black start recovery of […]
Are you new to ICS Security, and still want to attend and benefit from S4? Then the S4 OnRamp Training is for you. We are designing a one day accelerated program to teach you what you need to know to appreciate and participate in the advanced and forward looking sessions and discussions at S4x19. Michael […]