Today, Derek Harp is happy to welcome Paul Forney, the Chief Security Architect for Schneider Electric, as his guest for another episode in the (CS)2AI podcast series on security leaders. Paul is a true pioneer in the industry of securing industrial control systems.

Paul traveled the world while growing up because his dad was a cryptographer working for Military Intelligence. His dad was serious about his job, and although he could not talk to Paul about what he did at work, he explained all the basics of encryption and taught him how to protect documents and information. 

In his first year of college, Paul joined a band. The band got a record deal, so Paul left home and college and traveled the world as a rock and roll bass player. He always wanted to learn about technology, however. So after finally returning to college, he graduated as an electrical engineer in 1990 and went into industrial control systems. Paul still plays music in a small band for fun and to raise money for various children’s causes. 

Security is a journey that is always changing! The threat-scape and the way we think about security are constantly evolving. In this episode of the (CS)²AI Podcast, Paul shares some valuable nuggets of information around the best approach to take and the right processes to design and produce resilient, high-quality security systems. He explains how to get involved with industry standards bodies, talks about how experts from across the world should take a leaf out of the book of the World Health Organization to collaborate to solve industry problems a whole lot faster, and offers his ideas for future careers. He also tells his story, talks about various elements in his professional journey, and discusses his way of bringing balance into his life.  

If you are interested in making a career in the field of cybersecurity, this is a conversation you won’t want to miss! Stay tuned for more!

Show highlights:

• Paul plays bass in a group called The Jazz Execs. They are a consortium of musicians who raise money for children’s causes. (4:42)
• In 1969, Paul started college as an electrical engineer. (8:06)
• Paul went straight into industrial control systems after graduating from the University of South Florida, in Tampa, with a degree in Electrical Engineering. He eventually moved into designing security for internet portals and communications systems. (9:34)
• Paul finds that many aspects of control systems are similar to orchestras. (10:16)
• Some of the patents that Paul came up with are for technology to look for events happening on offshore oil platforms. That kind of work still excites him! (13:49)
• He was always involved with communications in the early part of his career. (15:25)
• It was 9/11 that brought Paul into the world of cybersecurity. (17:30)
• As a security architect, Paul always has to look at the bigger picture to see how data moves around a system to design resilient ways to protect those systems. (22:05)
• Paul talks about looking at the bigger picture to see how data moves around a system to design resilient ways to protect the system. (22:05)
• You need to have processes, procedures, and technology to design and produce a quality security product. (24:59)
• Paul has always sought to learn from those who think outside of the box in the control system world, like his late friend and mentor, Michael Assante. (29:14)
• Young people can gain a lot of value from mentorship and getting involved with today’s standards bodies. (32:19)
• New technologies, like blockchain, have great value and potential for future careers. (46:27)