Cyber Fellows Speaker Series – Benjamin Lampe

Abstract: As cyber threats increasingly target operational technology and control systems, cybersecurity and engineering must evolve from traditional information assurance toward full-spectrum mission assurance. This presentation introduces a Cyber-Informed Engineering (CIE) approach that embeds engineered controls into system design to ensure mission-critical functions remain safe, reliable, and performant—even under cyber attack.

Engineered controls are physical and algorithmic design features that remove avenues of cyber attack and prevent or mitigate the impacts of cyber intrusions. Unlike conventional cybersecurity tools that protect data and networks, engineered controls act directly on the physical process to ensure that unacceptable outcomes—such as equipment damage, mission failure, or personnel harm—are inherently limited or prevented. These controls are evaluated not for confidentiality or data integrity, but for their ability to uphold operational continuity and mission effectiveness; thus, delivering true resilient outcomes and not just fail-safe behaviors.

This session will present a structured framework and curated examples of engineered controls applicable to critical infrastructure. It will clarify how these controls differ from IT-centric defenses and how they can be integrated into the engineering lifecycle to support resilient-by-design architectures. By shifting the focus from perimeter defense to consequence-based design, this approach aligns with the modern expectations of assured operations in our contested environments. Attendees will gain practical insights into how engineered controls can be applied to enhance mission assurance across domains.

Bio: I am an Engineer and Researcher at the Idaho National Laboratory (INL), specializing in Cyber-Informed Engineering and Cybersecurity Education since September 2023. I am the Principal Investigator for the Cyber-Informed Engineering Program at the INL. Previously, I held a position as a faculty member in the ICS Cybersecurity program at Idaho State University from August 2021 to September 2023, where I was a Joint Appointee with the INL and received recognition as the New Teacher of the Year for the State of Idaho Region 5. My professional journey includes significant roles at the Naval Nuclear Laboratory (NNL) from January 2012 to October 2021, where I served as an Operational Technology (OT) Enterprise Architect, Systems Analyst, and a Controls Engineer. In these roles, I formulated the OT technical strategy and implemented a nation-wide OT infrastructure between the NNL’s process systems. As a Control Engineer, I maintained a myriad of process and monitoring systems within power distribution, water and wastewater management, building automation, and radiological monitoring. Educationally, I possess a Bachelor of Science with a major in Electrical Engineering from the University of Wyoming, and a Master of Science with a major in Computer Science from the University of Idaho.

Ben also provides a link to the CIE EC Database on GIthub: https://github.com/idaholab/CIE_EC_Database  Cyber-Informed Engineering addresses how cyberattacks on engineered systems threaten physical safety and reliability beyond data loss. This database provides guidance on defining and applying engineered controls, explaining their distinction from information security measures and their integration into system design.