Is your shop floor as secure as you think it is? Innovation in the manufacturing world has made IT-OT convergence much more commonplace today, but is the industry taking the potential risks seriously enough?

In this episode, we hear from Fortinet’s Director of Marketing for OT Solutions, Rich Springer, about the real threats facing manufacturers within OT networks, and why effective OT security is a non-negotiable today...

Rich brings bags of experience to the table, from his early days in furniture and glass factories to his time as a Navy submarine officer and later as the global head of SCADA operations for a major wind turbine company. He shares how these experiences shaped his understanding of the unique cybersecurity challenges facing the manufacturing sector.

Painting a picture of how an OT threat can bring production to a standstill, Rich recommends that manufacturers use tabletop exercises to assess risk points and their impact on the whole production line. Rich also explains that part of protecting your OT network is about getting IT and OT teams to work together, and he gives practical advice on how to bridge the gap.

In this episode, find out:

• Rich explains Fortinet’s position on OT network security
• We hear about Rich’s diverse career background and how his previous roles prepared him for his role at Fortinet
• The current state of OT convergence and why companies are yet to take action
• Rich breaks the misconception that air gaps will protect manufacturers from digital threats
• Advice for better collaboration between IT and OT teams
• Rich explains why he’s optimistic that manufacturers are paying attention to the right things in security
• What the report says about manufacturers and their approach to OT systems today
• What it takes for cybersecurity experts to get executives to pay attention to the threats facing OT
• How to run a tabletop exercise to assess threat and impact on production
• What surprises Rich most about cybersecurity in manufacturing today

Enjoying the show? Please leave us a review here. Even one sentence helps. It’s feedback from Manufacturing All-Stars like you that keeps us going!

Tweetable Quotes:

• “The separation of duties should be decided on the tabletop exercise, not when the fire is burning.”
• “The technology has evolved. So therefore, it has made this air gap strategy a little less realistic over the years. And this is a common challenge.”
• “When the systems go down, they go to paper. So if the line hasn't stopped, what happens with our suppliers if we have to go paper? Take your tabletop exercise to that level.”

Links & mentions:

• Advancing Digital Transformation in a Time of Unprecedented Cybersecurity Risk, a report on how digital transformation in manufacturing has driven a widespread need for cybersecurity awareness
• 2024 State of Operational Technology and Cybersecurity Report, Fortinet’s report on OT cybersecurity

Make sure to visit http://manufacturinghappyhour.com for detailed show notes and a full list of resources mentioned in this episode. Stay Innovative, Stay Thirsty.

Welcome to Episode 25 of the Protect It All podcast, titled "Funding OT Cybersecurity: Priority Setting and Practical Approaches." In this episode, host Aaron Crow tackles the pressing issue of securing Operational Technology (OT) systems in critical sectors like energy, manufacturing, and transportation. Although often overshadowed by IT security, the increasing number of OT system attacks makes it clear that underfunding is no longer an option.

Aaron explores the unique challenges of OT cybersecurity, such as legacy thinking and budget constraints. He offers strategies to align cybersecurity with business goals, prioritize investments effectively, and implement risk-based funding approaches. The episode emphasizes the importance of understanding asset inventories and making incremental improvements to strengthen security.

Listeners will also learn how to bridge the communication gap between OT teams and business executives and translate technical risks into business impacts. With real-world examples and actionable insights, this episode is essential for anyone tasked with protecting OT environments.

Tune in to gain valuable knowledge and start effectively prioritizing and funding your OT cybersecurity initiatives.

Key Moments : 

00:10 Cybersecurity requires comprehensive, risk-aware approach beyond basic safety.

05:18 Understanding OT risks is crucial for prioritization.

09:11 We do business at the speed of trust.

12:13 Communicate cybersecurity's financial impact to business leaders.

13:58 Cost-benefit analysis of asset inventory in OT.

18:15 Establish security basics before advanced AI implementation.

23:21 Easier board conversations amid constant news events.

Connect With Aaron Crow:

Learn more about PrOTect IT All:

To be a guest or suggest a guest/episode, please email us at [email protected]

This episode dives into OT Cybersecurity and discusses:

SCADA, ICS & IIoT Cybersecurity

How do we define an OT-related cyber incident?

What are the leading standards and guidelines for managing OT Cybersecurity and resilience?

Threat intelligence and suitable ISAC models

Vendor platform insights and cyber maturity landscape

Speakers include:

Daniel Ehrenreich, Secure Communications and Control Experts

Lesley Carhart, Director of Incident Response - Dragos

Ilan Barda, Founder - Radiflow

Rahul Thakkar, Team Lead, System Engineering, ANZ, Forescout

Dean Frye, Solutions Architect ANZ, Nozomi Networks

To visit and subscribe to the full series visit https://mysecuritymarketplace.com/security-risk-professional-insight-series/

#mysecuritytv #otcybersecurity

Further reading:

https://mysecuritymarketplace.com/reports/your-guide-to-nis2-compliance/

https://www.forescout.com/research-labs/ot-iot-routers-in-the-software-supply-chain/

https://cyberriskleaders.com/critical-infrastructure-organisations-remain-poorly-prepared-against-cyber-attacks/

חזרת ממילואים ומצאת את עצמך בלי עבודה ופרנסה קבועה רוצה להיכנס להייטק או כול תחום אחר כג'וניור רוצה להחליף מקום עבודה כסיניור רוצה לעשות שינוי כיוון בקריירה שלך סדרת הפודקאסטים הזו נועדה עבורך

נחשון פינקו מארח את דפנה הר-לבן מנהלת קשרי הייטק בקריה האקדמית אונו ומנהלת מחלקת גיוסים בעברה. בתפקידה הנוכחי דפנה מסייעת לסטודנטים במכללה במציאת עבודה.

הפודאסט כולו סביב מציאת עבודה, איך מחפשים עבודה בצורה אקטיבית ואיך עוברים את המשוכה המשמעותית הראשונה, השיחה (ראיון) עם המגייס/ת.

מודיעין איומי סייבר הוא משכבות הקריטיות בהגנת סייבר. הכרת האויב שלך, הבנת מטרותיו וביצוע מראש של מהלכים מתאימים ימנעו מתקפה משמעותית ונזק משמעותי לארגון. התוקף תמיד יחפש פריצה פשוטה במקום לבזבז זמן על התקפות ארוכות עם פוטנציאל גילוי גבוה.

נחשון פינקו מארח את אסף חזן, סמנכ"ל טכנולוגיות של קספרסקי ישראל וצייד איומי סייבר ידוע, בשיחה על חשיבות מודיעין איומי סייבר, המידע שהוא מספק לחברות מדי יום והרשת העצומה שקספרסקי בנתה ברשת האפלה במשך שנים עם מספר עצום של חיישנים

.Cyber threat intelligence is one of the most critical layers in cyber defense. Knowing your enemy, understanding his targets, and making the appropriate next moves will prevent disaster. The attacker will always look for a straightforward breach rather than wasting time on long attacks with a high potential for discovery.

Nachshon Pincu hosts Assaf Hazan, the CTO of Kaspersky Israel and a renowned Cyber Threat Hunter, in a conversation on the importance of Cyber Threat Intelligence. Assaf shares the information he provides to companies daily, and the extensive network Kaspersky has built in the dark net over the years, boasting a significant number of sensors.

En este episodio de Secure Tracks, el presentador Omar Benjumea conversa con Isabel Pardo de Vera, exsecretaria de Estado de Transportes, Movilidad y Agenda Urbana de España y expresidenta de Adif. Isabel comparte sus experiencias en el ámbito de la ingeniería civil y el sector ferroviario, abordando la creciente importancia de la ciberseguridad en las operaciones ferroviarias, los desafíos para proteger infraestructuras críticas y la transformación cultural necesaria para mejorar la conciencia sobre seguridad. También destaca el valor de la diversidad en el liderazgo y la necesidad de colaboración entre los sectores público y privado para mejorar la resiliencia cibernética en el sector del transporte.English description: Engineering the Future of Railway Cybersecurity | Isabel Pardo de Vera PosadaIn this episode of Secure Tracks, host Omar Benjumea speaks with Isabel Pardo de Vera, former Secretary of State for Transport, Mobility, and Urban Agenda of Spain and former President of Adif. Isabel shares insights from her extensive experience in civil engineering and the rail sector, discussing the increasing importance of cybersecurity in railway operations, the challenges of securing critical infrastructure, and the cultural transformation needed to enhance security awareness. She also highlights the value of diversity in leadership and the need for collaboration between public and private sectors to improve cybersecurity resilience across the transport industry.

We revisit key insights from past conversations with Dave Purdy and Debbie Lay of TXOne Networks, who shared their expertise on the critical cybersecurity challenges facing industrial environments.

The episode delves into innovative solutions such as virtual patching and deep packet inspection, which are vital for securing legacy systems without causing operational disruption.

With a focus on mitigating zero-day vulnerabilities and ransomware threats, the discussions also emphasize the importance of bridging the IT/OT divide to create cohesive, secure environments.

This episode provides actionable strategies for professionals responsible for managing the cybersecurity of critical infrastructure in sectors like energy, manufacturing, and utilities.

Chapters

• 00:00:00 – Introduction to Key Cybersecurity Challenges in Industrial Environments
• 00:01:19 – Why Visibility is Critical for Securing Industrial Operations
• 00:01:36 – TXOne Networks' Native Protocols and the Power of Deep Packet Inspection
• 00:02:53 – Addressing Zero-Day Vulnerabilities through the Zero Day Initiative
• 00:04:26 – Personal Insights and Fun Facts from Industry Experts
• 00:05:23 – Overcoming Barriers to Industrial Cybersecurity Adoption
• 00:06:35 – IT-OT Collaboration: A Must for Comprehensive Cybersecurity
• 00:09:22 – Global Cybersecurity Trends and Adoption in Industrial Sectors
• 00:10:54 – Virtual Patching: A Game-Changer for Securing OT Systems
• 00:13:50 – Navigating IT-OT Convergence for Improved Security Outcomes
• 00:19:30 – TXOne's Innovative Security Solutions for Industrial Environments

Links And Resources:

• Crowdstrike, Virtual Patching, and Industrial OT Environments with Debbie Lay
• Unmasking Industrial Cybersecurity Threats and Solutions with Dave Purdy
• Velta Technology
• Dino Busalachi on LinkedIn
• Craig Duckworth on LinkedIn

Thanks so much for joining us this week. Want to subscribe to Industrial Cybersecurity Insider? Have some feedback you’d like to share? Connect with us on Spotify, Apple Podcasts, YouTube, and Google Podcasts to leave us a review!

In this episode of Protect It All, host Aaron Crow is joined by Christopher Stein from Royal Caribbean Group to delve into the fascinating evolution of maritime technology. This discussion explores the dramatic journey ships have taken from their analog origins to becoming digitally advanced behemoths of the seas, emphasizing the critical importance of safety and redundancy.

Listeners will understand how automation has revolutionized ship operations, allowing for reduced crew workload and increased efficiency. The episode also highlights the intricate management behind running a fleet of 68 ships, each functioning as an autonomous mobile city with numerous interconnected systems.

Christopher Stein provides an insider’s perspective on the maritime industry's latest cybersecurity challenges and compliance requirements. He discusses the careful processes of ensuring all onboard systems run smoothly and safely, from cybersecurity assessments to integrating digital sensors and control mechanisms.

This episode offers a deep dive into the complexities of maritime operations, emphasizing the behind-the-scenes efforts that keep voyages safe and efficient. 

Through engaging storytelling and expert insights, Protect It All takes listeners on a journey through the melding of technology and tradition in the maritime world. Tune in to discover how these advancements are shaping the future of safe sea travel!

Key Moments: 

00:10 OT systems require constant uptime; no outage windows.

05:06 OT and IT convergence misunderstood; safety risk emphasized.

08:18 Testing must ensure safety, operational integrity, and collaboration.

10:25 Cybersecurity must integrate with overall system design.

14:21 No pool, casino, water slides, roller coasters.

17:29 Systems affect availability, reliability, safety, and billing.

21:24 Managing vast logistics for seamless vacation experiences.

25:14 Royal Caribbean's efficient logistics and management impress.

27:28 Family surprised internet works during power outage.

33:26 Apollo 13 movie: interconnected digital procedures, limited power.

36:20 All systems have manual control for safety.

37:55 Operator rounds involved manual inspection of equipment.

41:27 Early immigrants faced harsh, uncertain voyages to America.

45:32 Technology makes formerly unattainable achievements accessible today.

49:08 Internet outage impacts due to maritime dependency.

About the guest : 

Christopher Stein is a proficient maritime systems specialist who ensures the operational safety of onboard systems. Recognizing the potential dangers of propulsion loss, Christopher meticulously coordinates maintenance tasks while vessels are docked. He emphasizes precise timing and a clear understanding of assessment objectives to execute system tests and shutdowns safely. His expertise ensures voyages proceed without incidents, reflecting his commitment to maritime safety and system reliability.

Connect With Aaron Crow:

Learn more about PrOTect IT All:

To be a guest or suggest a guest/episode, please email us at [email protected]