Industrial Cybersecurity Insider

In this week's episode, Dino and Jim, CTO and COO for Velta Technology, discuss the misconceptions surrounding the security of operational technology in industrial settings.

They debunk the common belief around air-gapped systems, explaining how these are usually not as isolated as many think.

Dino and Jim talk about real-world examples of oversight and communication gaps that compromise plant operational security, stressing the need for better collaboration between IT and operational staff to safeguard critical infrastructure.

They also address the struggles of implementing cybersecurity measures on the plant floor, which are absolutely necessary to prevent costly downtime and protect against external threats.

Chapters:

• 00:00:00 - Kickoff: Unpacking Industrial Cybersecurity
• 00:00:51 - Introducing Your Guides: Dino and Jim
• 00:01:13 - Myth Busting: The Truth About OT Air Gaps
• 00:02:08 - Tales from the Plant Floor: Examples of Miscommunication
• 00:04:47 - Connectivity Challenges: The Realities of Remote Support
• 00:06:25 - The High Cost of Downtime: Strategies for Effective Remote Access
• 00:07:38 - Securing the Plant: Cybersecurity’s Critical Role in Operations
• 00:11:59 - Initiating the Hunt: Identifying and Closing Security Gaps
• 00:14:07 - Navigating Complex Plant Networks: Mergers, Acquisitions, and Legacy Systems
• 00:16:33 - Cybersecurity Ownership: Who's in Charge Here?
• 00:18:58 - Building Cybersecurity Practices in OT Supplier Networks
• 00:20:45 - Supply Chain Security: Bridging the Gap Between IT and OT
• 00:22:21 - On-the-Ground Insights: Practical Steps for Securing Industrial Environments
• 00:24:02 - The Crucial Role of Continuous Monitoring in Cybersecurity
• 00:26:09 - Closing Insights: Key Takeaways and Future Directions

Links And Resources:

• Velta Technology
• Dino Busalachi on LinkedIn
• Jim Cook on LinkedIn
• Craig Duckworth on LinkedIn

Thanks so much for joining us this week. Want to subscribe to Industrial Cybersecurity Insider? Have some feedback you’d like to share? Connect with us on Spotify, Apple Podcasts, YouTube, and Google Podcasts to leave us a review!

Ed Turkaly, Cybersecurity Offer Management Director at Schneider Electric, discusses the convergence of IT and OT in industrial cybersecurity.

Ed talks about the challenges and strategies for securing critical infrastructures, focusing on the importance of proactive measures over mere detection.

He shares insights into Schneider Electric's innovative approaches to integrating cybersecurity solutions into their offerings, discussing the necessity of collaboration between IT and OT.

Ed also talks about addressing the complexities of industrial cybersecurity, making this episode a must-listen for anyone interested in the future of digital security.

Chapters:

• 00:00:00 - Introduction to Industrial Cybersecurity
• 00:01:13 - Ed Turkaly's Cybersecurity Journey
• 00:02:14 - Building Trust and Understanding Cybersecurity Needs
• 00:04:59 - Bridging the Gap: IT and OT Convergence in Cybersecurity
• 00:06:50 - Addressing OT Cybersecurity Challenges and Misconceptions
• 00:09:38 - The Role of Cybersecurity Insurance in Modern Business
• 00:10:38 - Schneider Electric’s Cybersecurity Strategies
• 00:14:10 - Partnering and Certification in Cybersecurity Solutions
• 00:16:17 - Client Engagement and Effective Cybersecurity Strategy
• 00:19:00 - Moving from Visibility to Prevention
• 00:22:00 - Importance of OEM Partnerships in Cybersecurity
• 00:24:38 - Future Trends in Preventative Cybersecurity Measures

Links And Resources:

• Ed on LinkedIn
• Schneider Electric
• Velta Technology
• Dino Busalachi on LinkedIn
• Jim Cook on LinkedIn
• Craig Duckworth on LinkedIn

Thanks so much for joining us this week. Want to subscribe to Industrial Cybersecurity Insider? Have some feedback you’d like to share? Connect with us on Spotify, Apple Podcasts, YouTube, and Google Podcasts to leave us a review!

Cisco lead OT Security Solution Architect Andrew McPhee, sheds light on the often overlooked and misunderstood world of OT cybersecurity. He explains the complexities of combining IT and OT environments, emphasizing the hidden risks many industrial networks face.

Through real-world examples, Andrew reveals the dangers posed by outdated protocols and the importance of proper network segmentation and visibility in preventing costly shutdowns. With a mix of expert insights and practical advice, this episode is a wake-up call for those involved in maintaining and securing industrial control systems.

Don’t miss Andrew's eye-opening take on why your network might not be as secure as you think—and what you can do about it.

Chapters:

• 00:00:00 - Intro: Why IT Is Crucial for OT Network Success and Meet Andrew McPhee
• 00:01:39 - Inside the Job: What a Solution Architect Does
• 00:02:26 - Overcoming IT and OT Integration Hurdles
• 00:04:42 - Closing the IT and OT Skills Gap
• 00:06:00 - Real-World Examples of Skill Challenges
• 00:07:25 - Why Networking Knowledge is Essential in OT
• 00:08:40 - IT and OT: Different Worlds, Common Goals
• 00:09:30 - Training IT for OT: The Benefits and Hurdles
• 00:10:08 - Cisco's Journey in Industrial Networking
• 00:14:05 - New Cybersecurity Regulations: What They Mean for You
• 00:16:32 - Unpacking Cisco Cyber Vision: A Game Changer for OT Security
• 00:16:32 - Unpacking Cisco Cyber Vision: A Game Changer for OT Security
• 00:18:00 - How Cyber Vision Identifies Vulnerabilities
• 00:19:15 - Success Stories: Cyber Vision in Action
• 00:20:45 - The Importance of Visibility in OT Networks
• 00:22:10 - Balancing Passive and Active Network Monitoring
• 00:23:35 - Enhancing Security with Native Protocols
• 00:25:00 - The Role of Cyber Vision in Regulatory Compliance
• 00:26:20 - Preparing for Future Cybersecurity Threats
• 00:27:39 - AI's Potential in Strengthening OT Cybersecurity

Links And Resources:

• Andrew on LinkedIn
• Cisco
• Velta Technology
• Dino Busalachi on LinkedIn
• Jim Cook on LinkedIn
• Craig Duckworth on LinkedIn

Thanks so much for joining us this week. Want to subscribe to Industrial Cybersecurity Insider? Have some feedback you’d like to share? Connect with us on Spotify, Apple Podcasts, YouTube, and Google Podcasts to leave us a review!

John Vecchi, CMO of Phosphorus Cybersecurity, gives us a look into the rapidly evolving landscape of xIoT security, revealing the hidden vulnerabilities within our everyday devices.

From casinos to hospitals, John breaks down the immense challenges and critical risks facing industries reliant on interconnected technology.

With a mix of personal experiences and expert insights, he offers a roadmap for strengthening defenses against increasingly sophisticated cyber threats.

Tune in to uncover how the unseen intricacies of IoT can impact security and what steps can be taken to safeguard our digital and physical worlds against the invisible dangers lurking within our connected devices.

Chapters:

• 00:00:00 - Kicking Off: The Critical Need for Cybersecurity Visibility
• 00:01:07 - Meet John Vecchi: Champion of Cybersecurity at Phosphorus
• 00:02:01 - Unveiling IoT: Its Role Across Industries from Gaming to Healthcare
• 00:03:15 - Case Study: Gaming Industry and IoT Vulnerabilities
• 00:04:30 - Discussion on Cyber Attacks in Recent Times
• 00:05:45 - The Expanding Threat Landscape in IoT
• 00:07:00 - John Vecchi's Insights on Preventative Security Measures
• 00:08:26 - Spotlight on Security: Tackling IoT's Hidden Vulnerabilities
• 00:11:24 - Blueprints for Defense: Effective Strategies to Secure IoT
• 00:13:50 - The Role of Default Credentials in IoT Security
• 00:15:35 - Firmware Updates: A Necessary Step in IoT Protection
• 00:17:10 - Addressing the Challenges of Patch Management
• 00:19:05 - Real-World Examples of Effective IoT Security Enhancements
• 00:22:30 - Seeing the Unseen: Why Knowing Your Digital Terrain is Vital
• 00:24:50 - Importance of Visibility in Cybersecurity
• 00:26:40 - John Vecchi on Cybersecurity Best Practices
• 00:28:15 - Future Trends in IoT and Cybersecurity
• 00:30:00 - Concluding Thoughts: Securing IoT for Tomorrow
• 00:32:02 - Wrapping Up: Key Takeaways and Looking Ahead in IoT Security

Links And Resources:

• John Vecchi on LinkedIn
• Phosphorus
• Velta Technology
• Dino Busalachi on LinkedIn
• Jim Cook on LinkedIn
• Craig Duckworth on LinkedIn

Thanks so much for joining us this week. Want to subscribe to Industrial Cybersecurity Insider? Have some feedback you’d like to share? Connect with us on Spotify, Apple Podcasts, YouTube, and Google Podcasts to leave us a review!

Craig Duckworth and Jim Cook discuss the critical yet often overlooked topic of budgeting for operational technology (OT) cybersecurity.

Throughout their discussion, they address the challenges and necessities of securing funding from executive teams, framing the conversation around liability, risk management, and the dire need for strategic investment to safeguard critical infrastructure.

They highlight the nuanced divide between IT and OT responsibilities and emphasize the vital role of clear communication in making cybersecurity a top priority for corporate budgeting.

By exploring real-world scenarios and the potential consequences of neglecting cybersecurity in OT, this episode serves as a compelling call to action for organizations to reassess their approach to cybersecurity funding and strategy, ensuring they are adequately prepared to handle emerging threats in an increasingly connected world.

Chapters:

• 00:00:00 - Welcome to Velta Technology: Introductions and Today's Focus
• 00:01:31 - Navigating the Budget Cycle for OT Cybersecurity
• 00:02:11 - Bridging the IT-OT Divide: Whose Responsibility Is Cybersecurity?
• 00:04:51 - Building the Business Case for OT Cybersecurity Funding
• 00:09:49 - Understanding the Real-World Impacts of Cybersecurity Failures
• 00:11:43 - Strategies for Addressing OT Cybersecurity: From Awareness to Action
• 00:16:03 - Leveraging Technology and Building Capability for Cybersecurity
• 00:20:58 - Making the Case to Executives: Risk Management and Cybersecurity Insurance
• 00:22:41 - Exploring Options and Taking Action Against Cybersecurity Threats
• 00:28:12 - Navigating Cyber Insurance: Adjusting to New Realities in Risk Coverage
• 00:33:37 - Concluding Thoughts: The Importance of Starting Cybersecurity Initiatives

Links And Resources:

• Velta Technology
• Dino Busalachi on LinkedIn
• Jim Cook on LinkedIn
• Craig Duckworth on LinkedIn

Thanks so much for joining us this week. Want to subscribe to Industrial Cybersecurity Insider? Have some feedback you’d like to share? Connect with us on Spotify, Apple Podcasts, YouTube, and Google Podcasts to leave us a review!

Enjoy this episode as Dino Busalachi, CTO and Co-Founder of Velta Technology, and Jim Cook, COO of Velta Technology, have a discussion about the complexities and challenges of using Zero Trust security frameworks within operational technology (OT) environments.

They explore the nuanced differences between IT and OT landscapes, pointing out the different challenges that arise when applying IT-centric security strategies to the distinct and varied needs of industrial settings.

From the more straightforward IT Zero Trust framework to the complexities of trying to apply that approach and managing system vulnerabilities on the OT side, the conversation offers a rich combination of technical insight and real-world applications.

If you’re involved in the intersecting worlds of IT and industrial operations, this episode is sure to provide valuable lessons on securing technological infrastructures against modern threats while considering the operational realities of the plant floor.

Chapters:

• 00:00:00 - Kickoff: The High Stakes of Zero Trust in OT
• 00:03:09 - Tracing the Roots: How Zero Trust Evolves with Network Security
• 00:04:17 - The Rise of AI and Its Influence on Security
• 00:06:50 - Operational Challenges with Applying New IT Frameworks
• 00:08:12 - Zero Trust's Fit with Industrial Protocols
• 00:10:28 - The OT Challenge: Applying the Bucket Strategy for Zero Trust
• 00:12:03 - Addressing Network Segmentation in OT
• 00:14:00 - Challenges with VPNs and Remote Access in Zero Trust
• 00:16:45 - Potential Misalignments in Applying IT Security to OT
• 00:17:46 - Identity Crisis: Managing Access Within Zero Trust Frameworks
• 00:19:12 - Implications of Shared Passwords and User Access
• 00:23:04 - Strategic Collaboration Between IT and OT for Enhanced Security
• 00:26:32 - Wrap-Up: Collaborative Paths to Effective Zero Trust in OT

Links And Resources:

• Velta Technology
• Dino Busalachi on LinkedIn
• Jim Cook on LinkedIn
• Craig Duckworth on LinkedIn

Thanks so much for joining us this week. Want to subscribe to Industrial Cybersecurity Insider? Have some feedback you’d like to share? Connect with us on Spotify, Apple Podcasts, YouTube, and Google Podcasts to leave us a review!

Join your host, CEO and President of Velta Technology, Craig Duckworth and special guest Chris Bihary, CEO and co-founder of Garland Technology, as they discuss the complexities of operational technology (OT) security within critical infrastructures.

Chris shares his fascinating journey from spontaneous problem-solving to developing essential security hardware like network taps and data diodes that are now crucial in major industries.

Discover how Garland Technology collaborates with Velta Technology to tackle common and emerging challenges in network security through innovative solutions.

Whether you're a tech enthusiast or a professional navigating the intricate world of IT and OT security, this episode offers valuable insights into the foundational strategies that protect your digital landscape from unseen threats.

Tune in to explore how these tech pioneers are enhancing network security, making the invisible, visible and secure.

Chapters:

• 00:00:00 - Expert Dialogues: Chris Bihary and Craig Duckworth Unpack OT Security
• 00:00:59 - Genesis of Garland: Chris's Journey from Idea to Industry
• 00:01:45 - Practical Tech: Crafting Solutions for Real-world OT Problems
• 00:03:41 - The Visibility Factor: Why Seeing is Securing in Network Safety
• 00:05:35 - Sensor Strategy: Optimizing Deployment in Complex Networks
• 00:07:22 - Foundations of Security: Building Reliable OT Networks
• 00:09:58 - Enhancing Visibility: The Key to Proactive Security Management
• 00:13:11 - Overcoming Obstacles: Adapting to Diverse Technological Landscapes
• 00:17:56 - Regulatory Impact: How New Standards Shape Security Measures
• 00:21:07 - Starting Points: Tactical Advice for Embarking on Security Improvements
• 00:24:34 - Leveraging Industry Insights: How to Utilize Market Intelligence for Security Advancements
• 00:28:16 - Wrapping Up: Key Takeaways and Forward-Looking Strategies

Links And Resources:

• Chris Bihary on LinkedIn
• Garland Technology
• Velta Technology
• Dino Busalachi on LinkedIn
• Jim Cook on LinkedIn
• Craig Duckworth on LinkedIn

Thanks so much for joining us this week. Want to subscribe to Industrial Cybersecurity Insider? Have some feedback you’d like to share? Connect with us on Spotify, Apple Podcasts, YouTube, and Google Podcasts to leave us a review!

Join Velta Technology’s CTO, Dino Busalachi and COO, Jim Cook, as they delve into the intricate world of IT and OT integration. Explore the challenges and transformative strategies involved in merging these critical technologies within industrial environments.

Dino and Jim share their expert knowledge and decades of experience, discussing the potential for synergy between operational and information technology to enhance cybersecurity, reduce downtime, and drive company revenue. They liken the integration process to navigating a complex maze where every turn could lead to innovative solutions or unforeseen challenges.

This episode is a must-listen if you’re looking to understand the future of technology in manufacturing and beyond, promising valuable lessons on collaboration and technological convergence.

Chapters:

• 00:00:00 - Meet the Minds: Dino & Jim’s Take on Bridging Tech Gaps
• 00:01:20 - Deep Dive: Contrasting IT & OT Roles and Responsibilities
• 00:03:00 - Snapshot: Current Landscape of OT Cybersecurity
• 00:06:45 - Bridging the Communication Gap: Techniques and Tools
• 00:09:18 - Collaboration Overviews: Building a Unified Tech Framework
• 00:10:34 - Synergy Benefits: How Merging IT and OT Strengthens Security
• 00:12:47 - Real-time Responses: IT-OT Coordination in Action
• 00:16:04 - From Theory to Action: Success Stories in IT-OT Integration
• 00:17:05 - Case Study Deep Dive: Effective IT-OT Integration Practices
• 00:19:21 - Lessons Learned: Overcoming Obstacles in IT-OT Convergence
• 00:21:33 - Harnessing Tech for Operational Efficiency
• 00:23:58 - Future-Proofing Industries through IT-OT Synergy
• 00:26:09 - Closing Loop: Sustaining Collaboration between IT and OT Teams
• 00:28:01 - Final Reflections: Next Steps for IT and OT Integration
• 00:29:13 - Parting Wisdom: Empowering IT and OT Teams to Innovate Together

Links And Resources:

• Velta Technology
• Dino Busalachi on LinkedIn
• Jim Cook on LinkedIn
• Craig Duckworth on LinkedIn

Thanks so much for joining us this week. Want to subscribe to Industrial Cybersecurity Insider? Have some feedback you’d like to share? Connect with us on Spotify, Apple Podcasts, YouTube, and Google Podcasts to leave us a review!

Gerry Kennedy, CEO of Observatory Strategic Management, alongside Dino Busalachi, co-founder and CTO of Velta Technology, talk about the complex and evolving world of cybersecurity insurance. They unpack the nuances of IT and OT risk management, revealing how past incidents and technological advancements have shaped current practices.

Their discussion traverses the history from Y2K to present-day cybersecurity challenges, highlighting the crucial role of insurance in mitigating these risks. As they discuss their professional experiences and expert insights, the conversation sheds light on the importance of understanding legal and insurance frameworks in protecting against cyber threats.

This episode not only demystifies the intricate relationship between technology and insurance but also emphasizes the need for a holistic approach to cybersecurity, making it a must-listen for anyone looking to navigate the digital age safely.

Chapters:

• 00:00:00 - Unveiling the Shadows: The Hidden Dangers Behind Kinetic Events
• 00:01:04 - First Impressions: A Blizzard, A Hat, and The Cybersecurity Nexus
• 00:02:00 - The Road Less Traveled: From Texting Bans to Cybersecurity Vanguard
• 00:04:19 - From Y2K Fears to Today's Cyber Insurance: A Historical Perspective
• 00:05:20 - Bridging Worlds: The Indispensable Roles of IT and OT in Securing the Digital Frontier
• 00:08:47 - The Cyber Insurance Conundrum: Untangling the Web of IT and OT Risks
• 00:13:08 - Beyond the Code: Legal Frameworks Shaping Cybersecurity's Future
• 00:17:33 - Looking Ahead: The Interwoven Future of Insurance and Cybersecurity
• 00:20:33 - The Underwriter's Lens: Enhancing Insurance with Cybersecurity Insights
• 00:23:30 - A Call to Arms: The Imperative of Employee Awareness and OSHA's Emerging Role
• 00:25:00 - The Unseen Liability: Navigating the Risks of Digital Premises
• 00:28:45 - Fostering Unity: The Power of Community in Bolstering Cyber Resilience
• 00:31:50 - The Bedrock of Business: Operational Technology's Critical Role in Cybersecurity
• 00:32:28 - On the Horizon: The Evolving Interface of Cybersecurity and Operational

Links And Resources:

• LinkedIn
• Observatory Strategic Management
• CPO Magazine
• Velta Technology
• Dino Busalachi on LinkedIn
• Jim Cook on LinkedIn
• Craig Duckworth on LinkedIn

Thanks so much for joining us this week. Want to subscribe to Industrial Cybersecurity Insider? Have some feedback you’d like to share? Connect with us on Spotify, Apple Podcasts, YouTube, and Google Podcasts to leave us a review!

Dino Busalachi and Craig Duckworth, leaders and co-founders of Velta Technology, are discussing the paramount importance of safety, quality, and cybersecurity in the operational technology (OT) sector.

Drawing from their extensive field experience, they illuminate the challenges and solutions in safeguarding industrial environments against cyber threats. Their discussion sheds light on the pervasive issue of underpreparedness in OT cybersecurity, highlighting the critical need for robust defense mechanisms.

By exploring the intersection of IT and OT cybersecurity strategies, they offer valuable perspectives on building resilient systems that can withstand the evolving landscape of cyber threats. Dino and Craig not only emphasize the urgency of addressing cybersecurity in industrial operations but they’re also giving actionable advice for organizations to fortify defenses and ensure operational continuity.

Chapters:

• 00:00:00 - Navigating the Cybersecurity Terrain in Operational Tech
• 00:02:37 - Ownership Dilemmas: Who Holds the Cybersecurity Reins?
• 00:04:07 - IT and OT: Collaborating for Stronger Cyber Defenses
• 00:05:22 - The Essential Cybersecurity Triad in Action
• 00:06:48 - Inside the Cyber Defense Strategy: Real-World Insights
• 00:08:15 - The Critical Role of Visibility in Cybersecurity
• 00:09:40 - Addressing the Cybersecurity Skills Gap in Industrial Sectors
• 00:11:05 - The Evolution of Cyber Threats in Operational Technology
• 00:13:50 - Key to Protection: Asset Inventories and Secure Remote Access
• 00:21:17 - Lessons from the Field: The Stakes of Cybersecurity Neglect
• 00:26:41 - Wrapping Up: Future Directions in OT Cyber Resilience

Links And Resources:

• Velta Technology
• Dino Busalachi on LinkedIn
• Jim Cook on LinkedIn
• Craig Duckworth on LinkedIn

Thanks so much for joining us this week. Want to subscribe to Industrial Cybersecurity Insider? Have some feedback you’d like to share? Connect with us on Spotify, Apple Podcasts, YouTube, and Google Podcasts to leave us a review!