Industrial Cybersecurity Insider

OT Cybersecurity Engineer, Noah Duckworth, joins Dino Busalachi for this episode. They discuss the challenges and nuances of industrial cybersecurity, as he shares insights from his experience working in the OT (Operational Technology) cybersecurity space.

Noah talks about the complexities of integrating traditional IT cybersecurity measures within industrial networks, the specific tools and practices used, and the importance of safe, industry-specific approaches to vulnerability management.

He also provides a perspective on various industrial sectors, such as food and beverage and transportation, and how cybersecurity requirements vary across different verticals and environments.

This episode offers valuable insights into the evolving field of OT cybersecurity and practical advice for professionals interested in protecting critical infrastructure as well as entering the field of industrial cybersecurity.

Chapters:

• 00:00:00 - Introduction to Engineering Problem-Solving in Cybersecurity
• 00:00:46 - Guest Introduction: Meet OT Cybersecurity Engineer & Expert Noah Duckworth
• 00:00:58 - Noah’s Path into OT Cybersecurity and His Industry Experience
• 00:02:13 - Key Differences Between OT and IT Cybersecurity
• 00:03:01 - Addressing Common OT Cybersecurity Challenges and Tools
• 00:06:22 - Navigating Cybersecurity Across Industrial Sectors
• 00:08:06 - Insights for New Professionals in Industrial Cybersecurity
• 00:10:13 - The Evolving Landscape of OT Cybersecurity
• 00:15:22 - Inspiring the Next Generation of Cybersecurity Leaders
• 00:16:35 - Closing Thoughts: Practical Advice for Early-Career Professionals

Links And Resources:

• Velta Technology
• Noah Duckworth on LinkedIn
• Dino Busalachi on LinkedIn
• Jim Cook on LinkedIn
• Craig Duckworth on LinkedIn

Thanks so much for joining us this week. Want to subscribe to Industrial Cybersecurity Insider? Have some feedback you’d like to share? Connect with us on Spotify, Apple Podcasts, and YouTube to leave us a review!

This episode we dive into the critical strategies necessary for securing operational technology (OT) environments, with OT/ICS Strategy Lead at CISA, Danielle Jablanski.

Danielle explores the evolving role of CISA in assisting asset owners and government sectors, emphasizing the importance of collaboration and understanding in cybersecurity.

From building resilience against "shiny object syndrome" to prioritizing effective incident response and vendor relationships, this conversation provides valuable insights into crafting an actionable, sustainable OT security strategy.

Danielle also shares how workforce development is crucial in creating a robust cybersecurity posture and discusses CISA’s approach to integrating AI and machine learning into OT security cautiously and strategically.

Chapters:

• 00:00:00 - Understanding Outsourcing and Effective Incident Management in OT
• 00:01:21 - Welcoming Danielle Jablanski from CISA to the Show
• 00:01:47 - CISA’s Expanding Role in Supporting Critical Infrastructure Security
• 00:03:32 - Key Challenges Facing OT Cybersecurity Today
• 00:06:27 - Navigating the Convergence of IT and OT Security
• 00:11:36 - CISA’s Approach to Risk Management and Its Global Impact
• 00:13:40 - Overview of CISA Services and Regional Cybersecurity Initiatives
• 00:16:36 - Enhancing Incident Response Capacity and Cross-Agency Coordination
• 00:17:30 - Fusion Centers: Interagency Collaboration for Better Threat Intelligence
• 00:18:55 - Guiding Organizations in Reporting and Responding to Incidents
• 00:21:03 - Developing Effective Incident Response Playbooks for OT Environments
• 00:22:08 - Opportunities and Risks of AI in OT Cybersecurity
• 00:24:32 - Emerging Threats: Targeted Attacks on Control Systems
• 00:27:00 - Final Thoughts on Workforce Development and Building Cybersecurity Resilience

Links And Resources:

• Danielle Jablanski on LinkedIn
• Dino Busalachi on LinkedIn
• Jim Cook on LinkedIn
• Craig Duckworth on LinkedIn

Thanks so much for joining us this week. Want to subscribe to Industrial Cybersecurity Insider? Have some feedback you’d like to share? Connect with us on Spotify, Apple Podcasts, and YouTube to leave us a review!

In this week's episode, Dino Busalachi is joined by Gary Kneeland from Claroty. With over nine years of experience at Claroty, Gary discusses the evolution of OT security, the convergence of IT and OT, and the growing importance of cybersecurity in protecting critical infrastructure.

The conversation touches on how regulatory changes, ransomware threats, and AI advancements are shaping the industry.

Whether you’re dealing with outdated systems or navigating complex industrial environments, this episode provides practical insights into the challenges and opportunities ahead.

Chapters:

• 00:00:00 - Pandemic's Impact on Critical Infrastructure
• 00:01:08 - Introduction to Gary Neelan and Claroty
• 00:01:41 - Gary's Role in OT Cybersecurity
• 00:02:49 - Evolution of OT Cybersecurity: From Compliance to Strategy
• 00:05:23 - IT and OT Convergence: Securing Cyber-Physical Systems
• 00:09:46 - Addressing Complex Challenges in OT Cybersecurity
• 00:11:56 - OT Cybersecurity Talent Shortage and Managed Services
• 00:13:01 - Future of OT Cybersecurity: Adapting to New Threats
• 00:14:36 - Modernizing Manufacturing Systems for Enhanced Security
• 00:15:52 - Global Cybersecurity Trends in Critical Infrastructure
• 00:18:01 - Regional OT Cybersecurity Challenges and Responses
• 00:25:01 - The Role of AI in Defending OT Environments
• 00:28:19 - Final Thoughts on OT Cybersecurity's Future

Links And Resources:

• Gary Kneeland on LinkedIn
• Dino Busalachi on LinkedIn
• Jim Cook on LinkedIn
• Craig Duckworth on LinkedIn

Thanks so much for joining us this week. Want to subscribe to Industrial Cybersecurity Insider? Have some feedback you’d like to share? Connect with us on Spotify, Apple Podcasts, and YouTube to leave us a review!

Craig sits down with Jessica Cook, a computer science engineering senior at Mississippi State University, to explore her journey into industrial cybersecurity.

From discovering her passion for tech in high school to gaining hands-on experience in OT cybersecurity, Jessica discusses how internships and real-world exposure have shaped her understanding of the industry.

She talks about the exciting evolution of industrial careers, highlighting how traditional manufacturing roles are becoming more technical and data-driven.

Jessica shares valuable advice on building relationships, leveraging networking opportunities, and overcoming the challenges of being a woman in a traditionally male-dominated field.

As she prepares to graduate, she reflects on her career path and the opportunities ahead in cybersecurity and OT.

Chapters:

• 00:00:00 - Introduction and Jessica’s Background in Cybersecurity
• 00:01:19 - Discovering a Passion for Tech and Breaking Into STEM
• 00:03:11 - Industrial Cybersecurity: Navigating a Changing Landscape
• 00:05:29 - Mississippi State’s Cybersecurity Program and Its Growth
• 00:06:58 - Real-World Experience: Internships and Co-Ops in OT Cybersecurity
• 00:10:06 - Key Courses and Mentors Shaping a Cybersecurity Career
• 00:14:30 - Leadership, Networking, and Extracurriculars in Engineering
• 00:19:06 - Practical Advice for Students and Early-Career Professionals
• 00:21:15 - Looking Ahead: Graduation and Career Prospects in OT Cybersecurity

Links And Resources:

• Velta Technology
• Dino Busalachi on LinkedIn
• Jim Cook on LinkedIn
• Craig Duckworth on LinkedIn

Thanks so much for joining us this week. Want to subscribe to Industrial Cybersecurity Insider? Have some feedback you’d like to share? Connect with us on Spotify, Apple Podcasts, and YouTube to leave us a review!

In this rewind episode, we explore the critical role CISOs play in bridging the gap between operational technology (OT) and enterprise cybersecurity.

With manufacturing and critical infrastructure facing increasing cyber threats, CISOs must navigate both the boardroom and the plant floor to secure complex environments without disrupting production.

This discussion focuses on the importance of risk assessment, real-time monitoring, and the adoption of specialized cybersecurity tools.

The episode highlights the need for cross-functional collaboration, leveraging external expertise, and shifting toward proactive, secure-by-design approaches.

It also addresses the vulnerabilities in supply chains, the limitations of relying on cybersecurity insurance, and the necessity of actionable, strategic measures to protect industrial environments.

Chapters:

• 00:00:00 - Kicking Off: How CISOs Are Redefining Industrial Cybersecurity from the Ground Up
• 00:00:54 - Cybersecurity Missteps Putting the C-Suite at Risk
• 00:12:31 - CISO Resignations: Is the Industrial Sector Prepared for the Fallout?
• 00:23:43 - Securing Critical Assets: What Every CISO Should Know

Links And Resources:

• Velta Technology
• Dino Busalachi on LinkedIn
• Jim Cook on LinkedIn
• Craig Duckworth on LinkedIn

Thanks so much for joining us this week. Want to subscribe to Industrial Cybersecurity Insider? Have some feedback you’d like to share? Connect with us on Spotify, Apple Podcasts, and YouTube to leave us a review!

In this reflective episode, we revisit the real-world challenges of securing industrial environments, where the intersection of IT and OT often creates unforeseen cybersecurity vulnerabilities.

From mismanaged remote access to the critical need for continuous asset monitoring, our experts dive deep into the lessons learned from boots on the ground work in the field.

They share insights on managing OT cybersecurity risks while maintaining production uptime and operational integrity.

This episode provides invaluable takeaways for those navigating the complexities of protecting industrial networks, offering practical solutions for balancing security with operational demands.

Chapters:

• 00:00:00 - A rewind to the biggest OT cybersecurity lessons and surprising moments!
• 00:01:05 - Missteps and Common Blunders with Manufacturing, ICS and Cybersecurity
• 00:10:26 - Industrial Cybersecurity Lessons From the Field
• 00:20:19 - The State of OT Cybersecurity From the Field

Links And Resources:

• Velta Technology
• Dino Busalachi on LinkedIn
• Jim Cook on LinkedIn
• Craig Duckworth on LinkedIn

Thanks so much for joining us this week. Want to subscribe to Industrial Cybersecurity Insider? Have some feedback you’d like to share? Connect with us on Spotify, Apple Podcasts, and YouTube Podcasts to leave us a review!

In this episode, Craig and Dino explore the evolving responsibilities of the CISO in managing cybersecurity within operational technology (OT) environments.

They address the persistent disconnect between IT and OT teams and the unique challenges CISOs face in bridging this gap.

With a focus on collaboration, they discuss the critical role of external partnerships and the importance of understanding the industrial landscape to implement effective security measures.

The conversation highlights how CISOs can balance rigorous cybersecurity protocols with operational demands, ensuring both safety and continuous uptime in complex industrial systems.

Chapters:

• 00:00:00 - Prioritizing Safety and Minimizing Downtime
• 00:00:48 - The Evolving Role of CISOs in Operational Technology (OT)
• 00:02:11 - Overcoming IT and OT Collaboration Challenges
• 00:03:09 - The Persistent Disconnect Between IT and OT
• 00:04:06 - CISOs' Responsibility for OT Security
• 00:05:08 - Balancing Security and Operational Uptime
• 00:06:57 - The Role of External Resources in Cybersecurity
• 00:11:38 - Limited CISO Interaction with the Board
• 00:20:38 - The Realities of Relying on Cybersecurity Insurance
• 00:24:18 - Conclusion: Moving Forward with IT-OT Collaboration

Links And Resources:

• Velta Technology
• Dino Busalachi on LinkedIn
• Craig Duckworth on LinkedIn

Thanks so much for joining us this week. Want to subscribe to Industrial Cybersecurity Insider? Have some feedback you’d like to share? Connect with us on Spotify, Apple Podcasts, and YouTube, to leave us a review!

We revisit key insights from past conversations with Dave Purdy and Debbie Lay of TXOne Networks, who shared their expertise on the critical cybersecurity challenges facing industrial environments.

The episode delves into innovative solutions such as virtual patching and deep packet inspection, which are vital for securing legacy systems without causing operational disruption.

With a focus on mitigating zero-day vulnerabilities and ransomware threats, the discussions also emphasize the importance of bridging the IT/OT divide to create cohesive, secure environments.

This episode provides actionable strategies for professionals responsible for managing the cybersecurity of critical infrastructure in sectors like energy, manufacturing, and utilities.

Chapters

• 00:00:00 – Introduction to Key Cybersecurity Challenges in Industrial Environments
• 00:01:19 – Why Visibility is Critical for Securing Industrial Operations
• 00:01:36 – TXOne Networks' Native Protocols and the Power of Deep Packet Inspection
• 00:02:53 – Addressing Zero-Day Vulnerabilities through the Zero Day Initiative
• 00:04:26 – Personal Insights and Fun Facts from Industry Experts
• 00:05:23 – Overcoming Barriers to Industrial Cybersecurity Adoption
• 00:06:35 – IT-OT Collaboration: A Must for Comprehensive Cybersecurity
• 00:09:22 – Global Cybersecurity Trends and Adoption in Industrial Sectors
• 00:10:54 – Virtual Patching: A Game-Changer for Securing OT Systems
• 00:13:50 – Navigating IT-OT Convergence for Improved Security Outcomes
• 00:19:30 – TXOne's Innovative Security Solutions for Industrial Environments

Links And Resources:

• Crowdstrike, Virtual Patching, and Industrial OT Environments with Debbie Lay
• Unmasking Industrial Cybersecurity Threats and Solutions with Dave Purdy
• Velta Technology
• Dino Busalachi on LinkedIn
• Craig Duckworth on LinkedIn

Thanks so much for joining us this week. Want to subscribe to Industrial Cybersecurity Insider? Have some feedback you’d like to share? Connect with us on Spotify, Apple Podcasts, YouTube, and Google Podcasts to leave us a review!

In this week's episode, Craig Duckworth and LuRae Lumpkin dive into the critical need for translating high-level cybersecurity solutions and priorities into clear, succinct communication across the industrial cybersecurity industry.

They focus on bridging the communication gap between IT and OT teams, discussing how a unified approach from both leadership and operations can strengthen security efforts.

The episode highlights evolving strategies for addressing breaches, improving risk management, and safeguarding critical infrastructure.

Key takeaways include the importance of tailoring cybersecurity communication to different audiences, implementing proactive measures, and fostering a consistent, organization-wide message that integrates cybersecurity into the core culture regardless of the organization.

Chapters:

• 00:00:00 - Setting the Stage: Why Cybersecurity Communication Matters
• 00:00:54 - LuRae Lumpkin's Proven Expertise in Industrial Cybersecurity
• 00:01:34 - How Cybersecurity Messaging Has Evolved Across IT and OT
• 00:04:49 - Lessons from Major Cyber Breaches: What You Need to Know
• 00:06:47 - Why Being Proactive is Crucial in Cybersecurity Communication
• 00:08:41 - Building a Cybersecurity-Driven Culture from the Top Down
• 00:10:44 - Simplifying Complex Cybersecurity Issues for Maximum Impact
• 00:12:30 - Making Cybersecurity a Company-Wide Priority
• 00:14:15 - Bridging the Communication Gap Between IT and OT
• 00:16:00 - Creating a Unified Language Across Teams
• 00:18:45 - The Role of External Vendors in Cybersecurity Communication
• 00:20:27 - Practical Advice to Strengthen Your Organization's Cybersecurity
• 00:24:39 - Final Insights on Fostering a Cyber-Aware Organization

Links And Resources:

• LuRae Lumpkin on LinkedIn
• Velta Technology
• Dino Busalachi on LinkedIn
• Craig Duckworth on LinkedIn

Thanks so much for joining us this week. Want to subscribe to Industrial Cybersecurity Insider? Have some feedback you’d like to share? Connect with us on Spotify, Apple Podcasts, YouTube, and leave us a review!

In this episode, Craig Duckworth is joined by Roger Hill, founder of Hillstrong Group Security.

Roger is a seasoned 30-year industry veteran in the field of industrial automation and cybersecurity. He joins Craig to discuss the critical challenges and emerging trends in industrial cybersecurity.

From the evolution of security practices in industrial environments to the complexities of integrating modern solutions with legacy systems, Roger offers invaluable insights.

He delves into the importance of breaking down silos between IT and OT teams, the rise of ransomware as a major threat, and the need for collaborative approaches to secure critical infrastructure.

Whether you're grappling with aging systems or looking to future-proof your OT security, this conversation is packed with practical advice and forward-thinking strategies.

Chapters:

• 00:00:00 - Introduction to OT Cybersecurity
• 00:00:46 - Meet Roger Hill: A Veteran in Industrial Automation and Cybersecurity
• 00:00:57 - How OT Security Has Evolved Over 30 Years
• 00:01:52 - The Impact of Stuxnet: A Turning Point in OT Cybersecurity
• 00:03:41 - Navigating Emerging Technologies and the Rising Ransomware Threat
• 00:05:32 - Overcoming Challenges in Adopting New Technologies
• 00:07:13 - Why Context and Visibility Are Key to Effective OT Security
• 00:09:10 - Budgeting and Governance: The Backbone of OT Security
• 00:11:13 - Breaking Down Silos: The Critical Role of IT and OT Collaboration
• 00:13:00 - Challenges in Global OT Security: Governance and Compliance
• 00:14:50 - The Aging Workforce Problem: Building and Retaining Talent
• 00:17:00 - Importance of Cross-Functional Teams in OT Security
• 00:23:24 - What’s Next? The Future of OT Cybersecurity
• 00:28:29 - Final Thoughts: Practical Advice and Forward-Looking Strategies

Links And Resources:

• Roger Hill on LinkedIn
• Dino Busalachi on LinkedIn
• Craig Duckworth on LinkedIn

Thanks so much for joining us this week. Want to subscribe to Industrial Cybersecurity Insider? Have some feedback you’d like to share? Connect with us on Spotify, Apple Podcasts, YouTube, and Google Podcasts to leave us a review!