Craig Duckworth sits down with Jowanza Joseph, CEO of Parakeet Risk, to unpack why third-party risk has become one of the most urgent challenges facing manufacturers and critical infrastructure operators.

Jowanza spent 15 years in engineering roles at Adobe, Pluralsight, and MasterCard before founding Parakeet Risk to serve an industrial sector he saw as the most underserved when it comes to technology.

Together they address why simply knowing who your vendors are is harder than it sounds, how insurers are moving past checkbox questionnaires and demanding real evidence of controls, and what happens when contracts require you to identify a new asset in your OT environment within five minutes.

They also get honest about the organizational problem few want to own: security leaders who carry responsibility for the plant floor without the authority to change anything on it. Jowanza closes with a practical, low-cost starting point for any organization and a look at where vendor attestation is headed over the next five years.

Chapters:

• (00:00:00) Why industrial companies must become cybersecurity companies
• (00:02:08) Cataloging and prioritizing your most dangerous vendors
• (00:04:37) The hidden layers of subcontractors in your supply chain
• (00:06:42) Cyber insurance moves past the checkbox era
• (00:10:47) Contracts that demand new asset identification in five minutes
• (00:12:58) AI is multiplying vulnerabilities faster than solutions
• (00:16:31) Three hallmarks of a strong third party risk program
• (00:21:14) Incident response, game days, and who falls on the sword
• (00:23:42) Responsibility without authority across the IT and OT divide
• (00:28:31) Where to start today and the future of vendor attestation

Links And Resources:

• Want to Sponsor an episode or be a Guest? Reach out here.
• Industrial Cybersecurity Insider on LinkedIn
• Cybersecurity & Digital Safety on LinkedIn
• BW Design Group Cybersecurity
• Dino Busalachi on LinkedIn
• Craig Duckworth on LinkedIn

Thanks so much for joining us this week. Want to subscribe to Industrial Cybersecurity Insider? Have some feedback you’d like to share? Connect with us on Spotify, Apple Podcasts, and YouTube to leave us a review!

Klaus Mochalski und Profiler Dr. Mark T. Hofmann diskutieren die Motivation von Cyberkriminellen. Erfahren Sie, warum das "Hoodie"-Klischee veraltet ist, wie generative KI die Einstiegshürde für Angriffe drastisch senkt und weshalb die menschliche Firewall im Zeitalter von Deepfakes wichtiger denn je wird.

Mehr zum Thema OT Security Made simple findet Ihr auf rhebo.com oder schreibt uns mit Euren Ideen, Fragen oder Gastvorschlägen an [email protected].  

Effective OT penetration testing isn't just about finding vulnerabilities, it's about building trust.

In this episode of Protect It All, host Aaron Crow is joined by Oren Niskin and Reynaldo Gonzalez for an engaging discussion on the evolving role of penetration testing in operational technology (OT) environments.

Drawing from years of experience in industrial operations, IT, and OT cybersecurity, Oren and Reynaldo explain why successful OT security assessments require far more than technical expertise. They explore how trust, communication, and collaboration help bridge the gap between security teams and operations, making penetration testing a valuable business tool rather than something to fear.

The conversation also highlights the importance of diverse career paths, hands-on learning, and mentoring the next generation of cybersecurity professionals. From network segmentation and risk communication to creating realistic lab environments, this episode offers practical lessons for anyone responsible for securing critical infrastructure.

Key Learnings: 

Key Moments: 

07:00 Oren's technology and security approach

15:04 Discussing network security measures

19:16 Building Trust in Business Relationships

26:17 Understanding and planning security architecture

30:16 Network management and rule assessment

33:39 Managing and Assessing Tool Overload

38:39 Analyzing tool overlap and complementarity

48:41 Building a trusting team culture

49:48 Encouraging Open Communication

56:34 Getting into cybersecurity without IT experience

01:04:56 Entry-level ICS training courses

Whether you're an OT engineer, penetration tester, security leader, or just beginning your cybersecurity journey, this episode delivers practical insights into protecting industrial environments while building stronger relationships across teams.

Tune in to discover why the most successful OT penetration tests don't just identify vulnerabilities they build trust, strengthen teams, and improve security for the long term.

About the guests: 

Oren Niskin is Principal OT Security Engineer at GuidePoint Security. His 20-year arc runs from the US Navy as a Nuclear Electrician's Mate, to Electronics Technician on offshore drilling rigs, to office OT/IT management, to OT cybersecurity consulting at EY, and now into OT cyber engineering at GuidePoint. He also runs Packets Or It Didn't Happen, a YouTube livestream where he builds a factory-realistic PLC and HMI training kit on camera (the open-source PLC Trainer Kit), aimed at helping newcomers get hands-on with OT for under $500.

Link to connect Oren Niskin:

LinkedIn: https://www.linkedin.com/in/orenniskin/

YouTube: https://www.youtube.com/@PacketsOrItDidntHappen

PLC Trainer Kit (GitHub): https://github.com/oniskin/PLC-Trainer-Kit

LinkedIn Group: https://www.linkedin.com/groups/17708001/

Reynaldo Gonzalez is a recognized cybersecurity thought leader with 18+ years of experience helping organizations strengthen cyber resilience and secure critical infrastructure. His expertise spans cybersecurity strategy, IT/OT security, AI security, risk management, and digital transformation, complemented by a passion for education, innovation, and industry collaboration.

Link to connect Reynaldo Gonzalez: 

LinkedIn: https://www.linkedin.com/in/reynaldoglz/

Learn more about PrOTect IT All:

To be a guest or suggest a guest/episode, please email us at [email protected]

Please leave us a review on Apple/Spotify Podcasts:

Apple   - https://podcasts.apple.com/us/podcast/protect-it-all/id1727211124

Spotify - https://open.spotify.com/show/1Vvi0euj3rE8xObK0yvYi4

On this episode of the Bites and Bytes Podcast, your host, Kristin King, is back with the second installment of the Seafood Summer Series, sitting down with Emily De Sousa, a fisheries scientist who turned into a seafood educator and founder of Seaside with Emily. As you know, this podcast sits at the intersection of food systems and cybersecurity, examining what it takes to keep the systems that feed us running and secure. This episode looks at a different kind of vulnerability: trust. Emily has spent her career studying what happens when the seafood supply chain breaks down, from mislabeling and fraud to the myths that keep people confused at the fish counter, and turning that research into education people can use!

We get into seafood fraud, the myths around farmed versus wild seafood, and what it takes to buy, cook, and trust seafood again. It’s a bit of a look behind the curtain and some of your more burning seafood questions. 

If you missed the first installment of the Seafood Summer Series, please go back and listen to James Sibley, the “Fish Fluencer”, break down aquaculture.

Find Emily De Sousa:
Newsletter: https://www.seasidewithemily.com/newsletter-signup

Website: https://www.seasidewithemily.com/
LinkedIn: https://www.linkedin.com/in/emilycdesousa/
Instagram: https://www.instagram.com/seasidewithemily
TikTok: https://www.tiktok.com/@seasidewithemily
YouTube: https://www.youtube.com/@seasidewithemily

Thought Leader Product Safety Innovation Summit 2026

August 14, 2026 – Virtual – Free

Sign up here: https://sangha.controlpointholdings.com/c/tlpsi-summit-2026

---------------

Episode Key Highlights
00:00:21 — Why Seafood Confusion Costs Consumers and the Industry

00:12:20 — The Secret to Crispy Fish Skin

00:17:26 — The Biggest Seafood Misconceptions

00:22:19 — Why Wild-Caught Seafood Alone Cannot Meet Global Demand

00:29:31 — The Truth About Salmon Color

00:35:32 — How Seafood Fraud Happens

00:44:10 — Why Tinned Fish Is Having a Moment

00:54:42 — The Future of Seafood and Whole-Fish Use

00:58:24 — Understanding Food Systems Before Securing Them

---------------

📘 Kristin’s book, “Securing What Feeds Us:  Cybersecurity in Food and Agriculture,” is here.
Food & Agriculture Cyber Incident Atlas is located here: https://securingwhatfeedsus.com/atlas

---------------

🎤 Book Kristin Demoranville toSpeak

To invite Kristin to speak at your conference, corporate event, webinar, or workshop, visit the website and submit a request.

---------------

🎤 Bites and Bytes Podcast Info:

Website: Explore all our episodes, articles, and more on our official website.  

MerchShop: Show your support with some awesome Bites and Bytes gear!

Substack: Stay updated with the latest insights and stories from the world of cybersecurity in the food industry.

Socials: TikTok;Instagram;LinkedIn;BlueSky

---------------

🛡️ About AnzenSage & AnzenOT

AnzenSage is a cybersecurity advisory firm specializing in security resilience for the food, agriculture, zoo, and aquarium industries.  AnzenSage offers practical, strategic guidance to help organizations anticipate risks and build resilience.  Learn more about their offerings at anzensage.com.​

AnzenO helps organizations understand and prioritize operational risk faster, without slow or static assessments. Subscription access is available, including a student option. Learn more at anzenot.com.

🛡️ Thibault Morin, Solution Architect en Factory Automation chez Bosch Rexroth, décrypte les enjeux de la cybersécurité industrielle et du Cyber Resilience Act.

Fort de plus de 20 ans d’expérience dans l’industrie, il nous explique pourquoi la cybersécurité ne peut plus être considérée comme un simple sujet informatique. Face à une cyberattaque, une usine doit non seulement protéger ses machines, ses automates et ses réseaux, mais aussi être capable de poursuivre ou de rétablir rapidement son activité.

Quelle différence entre cybersécurité et cyber-résilience ? Quels sont les risques pour les industriels ? Et comment anticiper les nouvelles exigences réglementaires ? Un échange clair et accessible pour mieux comprendre les transformations à venir.

Découvrez tous nos podcasts, livres blancs, webinars... sur expertise.boschrexroth.fr

Contenu proposé par Bosch Rexroth France.

Hébergé par Ausha. Visitez ausha.co/politique-de-confidentialite pour plus d'informations.

Jessica Ji, a Senior Research Analyst at Georgetown’s Center for Security and Emerging Technology and its CyberAI Project, joins the Nexus Podcast to discuss how frontier AI models such as Claude Mythos are changing cybersecurity for practitioners and policymakers alike. 

Jessica works closely with policymakers in the U.S. government. She discusses how they view AI models' offensive and defensive capabilities, the need for a long-term strategy on AI and cybersecurity, and the disparate incentives between private AI companies such as Anthropic and OpenAI and the government as these models are developed and deployed. 

Subscribe and listen to the Nexus Podcast here. 

Two global dairy producers made headlines this week after breaches that started with third party vendors.

Dino and Craig break down how it happened and why it keeps happening. They walk through the reality of remote access on the plant floor, from cellular modems to TeamViewer installs nobody remembers approving, and explain why a single sensor in a plant might show you 25 percent of your assets at best.

The conversation gets to the root of the problem: people, not technology.

OT teams still lock IT out of critical systems, CISOs carry responsibility without authority, and incident response plans rarely account for the integrators working across multiple plants at any given moment.

If you lead security for a manufacturing organization, this episode arms you with the tough questions to bring back to leadership before your company is the one filing with the SEC.

Chapters:

• (00:00:00) - The CISO gets hung out to dry, not the third-party vendor
• (00:01:02) - Two global dairy producers breached through third-party vendors
• (00:02:12) - The messy reality of remote access on the plant floor
• (00:03:47) - Why IT has no visibility into what's connected in manufacturing
• (00:05:29) - North-south versus east-west traffic monitoring
• (00:06:41) - The culture problem of OT locking IT out
• (00:08:14) - Responsibility versus authority for CISOs
• (00:10:47) - The budget excuse and the real cost of downtime
• (00:14:32) - Incident response plans that leave system integrators out
• (00:18:56) - SEC filings, brand damage, and the tough questions to ask

Links And Resources:

• Want to Sponsor an episode or be a Guest? Reach out here.
• Industrial Cybersecurity Insider on LinkedIn
• Cybersecurity & Digital Safety on LinkedIn
• BW Design Group Cybersecurity
• Dino Busalachi on LinkedIn
• Craig Duckworth on LinkedIn

Thanks so much for joining us this week. Want to subscribe to Industrial Cybersecurity Insider? Have some feedback you’d like to share? Connect with us on Spotify, Apple Podcasts, and YouTube to leave us a review!

The biggest cybersecurity challenge isn't technology - it's people.

In this episode of Protect It All, host Aaron Crow welcomes Swapnil Kachave for an insightful conversation about what it really takes to build high-performing cybersecurity teams in an era of AI, automation, and increasing cyber threats.

Having built and led Security Operations Center (SOC) teams across five industries, Swapnil shares why successful cybersecurity programs are driven by leadership, communication, and continuous learning - not just the latest tools.

Together, Aaron and Swapnil explore the growing impact of alert fatigue, burnout, workforce development, and the changing role of AI in modern security operations. They also discuss why "people debt" can become just as dangerous as technical debt and how organizations can create resilient teams prepared for the future.

Key Moments: 

Whether you're leading a SOC, managing cybersecurity programs, or just beginning your security career, this episode delivers practical leadership lessons that extend far beyond technology.

Key Moments: 

06:04 Dealing with alert fatigue

07:55 Navigating SOC career growth

13:54 From network admin to new opportunities

14:41 Diverse career path overview

21:02 Translating tech issues for executives

23:41 Importance of Soft Skills in Tech

25:50 Prioritizing practical knowledge over trends

31:03 Prototyping and learning new skills

35:26 Using AI to validate ideas

37:57 Human awareness vs. tech evolution

41:32 Quality assurance in AI responses

42:40 Discussing AI system reliability

46:05 Accelerating processes with AI tools

Tune in to discover why investing in people is still the most effective cybersecurity strategy - only on Protect It All.

About the guest : 

Swapnil Kachave is a cybersecurity operations leader with extensive experience building and leading Security Operations Center (SOC) teams across five industries. Passionate about developing people as much as technology, Swapnil specializes in security operations, incident response, and leadership development. They focus on helping organizations build resilient cybersecurity teams by balancing technical excellence with communication, mentorship, and continuous learning in an increasingly AI-driven world.

How to connect Swapnil: 

LinkedIn: https://www.linkedin.com/in/swapniilkachave/

Website: https://www.optiv.com/=

Learn more about PrOTect IT All:

To be a guest or suggest a guest/episode, please email us at [email protected]

Please leave us a review on Apple/Spotify Podcasts:

Apple   - https://podcasts.apple.com/us/podcast/protect-it-all/id1727211124

Spotify - https://open.spotify.com/show/1Vvi0euj3rE8xObK0yvYi4

Open Source Security welcomes Josh Corman to talk about the challenges around securing our critical infrastructure. Specifically the discussion centers around our water supplies. There are a lot of really wild things happening right now with attacks like Volt Typhoon and Salt Typhoon. Josh has an amazing ability to make these sort of discussions easy to understand without spreading FUD. Josh also has suggestions for actions that need to be taken to help deal with these problems. It's not all technical solutions, there are non technical things we can do to help reduce the risk posed by our technical systems failing.

The show notes and blog post for this episode can be found at https://opensourcesecurity.io/2026/2026-07-critical-infrastructure-josh-corman

In this episode of Exploited: The Cyber Truth, host Paul Ducklin is joined by RunSafe Security Chief Strategy Officer Doug Britton and special guest Andrew Ginter, Vice President of Industrial Security at Waterfall Security Solutions, an author, and a leading voice in OT cybersecurity.

Andrew explains why industrial security cannot simply borrow the same tools and practices used in enterprise IT. In OT environments, the physical process is the asset, and malicious information entering the system can become the threat. Doug explores how organizations can reduce exploitability, protect existing software, and maintain deterministic behavior without relying solely on disruptive patching cycles.

Together, Doug and Andrew explore:

• Why OT security must be stronger than traditional IT security
• How cyber attacks can create real-world safety and operational consequences
• The risks created by IT/OT convergence
• How cyber-informed engineering strengthens industrial resilience
• The role of unidirectional gateways and deterministic protections
• Why patch management alone cannot keep pace with AI-driven threats

For critical infrastructure leaders, engineers, and security teams, this episode offers a practical look at designing industrial systems that remain safe, reliable, and resilient when cyber threats become physical.