Over 150 people drawn from industry, government and academia came to the first Industrial Control Systems Community of Interest event, held at Nova South, London. A keynote talk from cyber-security company FireEye highlighted the ingenious techniques that criminals and state actors use in launching cyber-attacks. They described a detailed forensic analysis of one such attack, called Triton. There was also a talk from the Health and Safety Executive that described how they are now beginning to formulate detailed security audits. And Kevin Jones from Airbus explained practical techniques his company were using to protect against cyber-crime. There were also several ‘snappy chats’ about specific aspects of cyber-security in industrial control systems.