John Phelps
Acting Chief, Cyber-Physical Forensics Section
CISA
John Phelps is currently the Acting Chief of CISA Threat Hunting Incident Response Branch's Cyber-Physical Forensics Section which focuses on operational technology (OT) hunt and incident response for critical infrastructure. When not supporting engagements, Mr. Phelps leads the development of new tradecraft for detecting threats to OT. Prior to joining CISA, Mr. Phelps spent over 14 years in DoD, including working on OT device and system security assessments.
