Cyber Senate Podcast

In this conversation, David Raviv interviews Jamison Nesbitt, who shares insights from his extensive experience in cybersecurity and event management. They discuss the importance of events for information sharing among C-level executives, the challenges posed by ransomware and supply chain issues, and the role of regulation in ensuring accountability in critical infrastructure. 

Jamison emphasizes that collaboration and content-driven discussions are key to successful events, while also highlighting the need for organizations to be proactive in their cybersecurity measures. In this conversation, David Raviv and Jamison discuss the complexities of data privacy regulations like GDPR, the challenges of balancing airline costs with regulatory compliance, and the importance of cybersecurity investment. T

hey explore the role of AI in cybersecurity, emphasizing the need for responsible use and the human element in innovation. The discussion also highlights the significance of engaging with cybersecurity events and communities to foster collaboration and awareness in critical infrastructure sectors.

Next Cyber Senate events can be found at www.cybersenate.com

ERTMS Unit Project Officer for European Union Agency for Railways discusses Cybersecurity with Cyber Senate at the 10th annual Rail Cybersecurity UK EU conference in London 2024. Learn more at www.railcybersecurity.com or www.cybersenate.com
#railcybersecurity

A interview with Joseph Mager, Deputy CISO, NS Cybersecurity for NS Rail Netherlands. This interview took place at the Cyber Senate Rail Cybersecurity UK EU Summit in London 2024. www.railcybersecurity.com or www.cybersenate.com
Two main topics that rail sector professionals consider their biggest challenges:
NIS 2 legistlation and Supply Chain Risk Management

We hope you enjoy this interview as much as we did working with NS Rail.

Cyolo recently presented at the Rail Cybersecurity UK EU conference 2024 in London. Their presentation was highly valued, "Securing and Simplifying Privileged Remote Operations in the Rail Industry"
In this interview they discuss why their solution is a great fit for the rail sector.
Their presentation touched on the following points:

• Understand how traditional IT remote access and PAM solutions cannot effectively secure operational technology environments
• Learn from the experience of other industry peers in CNI and manufacturing how best to provide simplified yet secure remote access
• Understand how best of breed Remote Privileged Remote Access does not require the cloud
• Understand the challenges being faced by Critical National Infrastructure providers securing access to privileged environments

Cracking the code for cybersecurity, interview from the Rail Cybersecurity UK EU 10th annual conference, with Johannes Emmelheinz, CEO Siemens Mobility Customer Services

Cracking the code for cybersecurity 

Legislation, such as NIS2, the Cyber Resilience Act and other national cyber regulation, require cybersecurity to be sustained actively by the rail industry.

This challenge must be managed by suppliers, integrators and operators jointly with automated, coordinated work processes which are supported by tools adapted to the assets.

The presentation will provide an overview of Siemens Mobility's comprehensive approach to increase the resilience of its customers.

Presented through practical examples such as cloud security, vulnerability monitoring and management with decision support for the operators, security monitoring and incident response.

Cyber Senate had the privilige of having Dr. Andreas Hamprecht, CIO/CDO DB Regio AG join us as a presenter and speaker at the Rail Cybersecurity UK EU conference in London 2024. Here is an extract of an interview our team did with him at the event. We hope you enjoy his insight as much as we enjoyed hearing it and working with him. 

As defenders, how are we implementing controls and how do we do it better? Join Jamison Nesbitt and Stefan Liversage for this educational, thought provoking and controversial conversation.

The fundamentals are simple; patching, segmentation, malware controls, visibility – but what we are trying to achieve is no easy feat when you look to dismantle more than 20 years of ad hoc OT security measures as there is still risk during the implementation phase.

Key points to be discussed:

• Technical controls / process and people
• Poor visibility (automation)
• Organisational structure to support OT
• Manage risk faster
• Contain threats quicker
• Minimise impact
• Green field vs brown field
• Skills from the ground up
• Managed services
• Managing multiple streams of activity
• Iterative, agile process, we learn, we move forward
• Rapid threat containment

Cyber Senate had the privilege of catching up with Willi Nelson, CISO, Operational Technologies, Fortinet to discuss their forthcoming presentation on Cyber Preparedness September 29-30th in Celebration Florida, for the 9th annual Control System Cybersecurity USA conference.  

Large or small, cyberattacks are making headlines and elevating executive attention toward cyber resiliency. Preparing for, responding to and recovering from cyberattacks should be a strategic part of any business continuity plan. As recent cyberattacks have demonstrated increased risk to both IT and operational technology (OT) environments, readiness equates to enforcement of rules and policies that provide the visibility, control and situational awareness to respond at the speed of business.  Cybercriminals are maximizing their opportunity by exploiting older vulnerabilities and an expanding attack surface. Strategic readiness should be underpinned with the notion that eventually an attack will happen, and when it occurs, you are proactively ready to respond. During this session, we will explore security considerations for developing cyber resilience covering security fundamentals and readiness planning to protect your IT and OT environments.


Willi joined Fortinet as the CISO for Operational Technology in August 2022. He brings more than 25 years of experience in Information Security working across industry verticals such as Healthcare, Telecom, Financials, Manufacturing, and Life Sciences. Most recently with GlaxoSmithKline (GSK), he established and directed the Global OT Infrastructure Security team charged with monitoring and protecting the OT assets for GSK. Globally, the team deployed 43 additional controls across the OT landscape assessed against NIST CSF and aligned business units to embrace a unified model for security, incident response, and risk reporting. During Willi’s tenure, he also oversaw the creation of the Security Organization and the Global Cyber Defense team for GSK’s Consumer Health startup (now called Haleon). Beyond building and leading the OT and Consumer Health security teams, he led the security team responsible for Cloud transformation for both IT and OT. Willi relies on a pragmatic and systematic approach to achieve company goals while also maturing the organizations and teams he leads.

Willi is a graduate of Rockhurst University in Kansas City, MO, USA and holds a CISSP (Certified Information Security Professional) certification in good standing. Willi lives in NW Arkansas with his family. He’s an avid outdoorsman, cyclist, woodworker, and veteran.