Industrial Cybersecurity Insider

We sit down with Debbie Gordon, the CEO of Cloud Range Cyber, to explore the groundbreaking world of cybersecurity training for ICS and the Operational Technology frontlines. Debbie shares her expertise on how virtualized training environments are transforming the way cybersecurity teams prepare for and respond to cyber attacks. We get into the significance of experiential learning in cybersecurity, discuss the challenges of talent shortages and the necessity for continuous, hands-on training. Listeners will gain a comprehensive understanding of how Cloud Range’s innovative approach is equipping cyber defense teams to face the ever-evolving landscape of cyber threats.

Chapters:

• 00:00:00 - Introducing Debbie Gordon: CEO of Cloud Range Cyber
• 00:00:59 - Exploring Cloud Range: A Revolutionary Virtual Cyber Range Platform
• 00:02:11 - The Critical Role of Simulated Cybersecurity Exercises
• 00:03:27 - Adapting to the Evolving Cybersecurity Threat Landscape
• 00:05:48 - The Genesis of Cloud Range: Innovating Cyber Training
• 00:08:11 - Addressing the Cybersecurity Skills Gap: Challenges and Solutions
• 00:11:23 - Customizing Training with Cloud Range for Effective Talent Development
• 00:16:02 - Harnessing Creativity and Analytical Skills in Cyber Defense
• 00:21:06 - Cybersecurity in the Post-COVID Era: New Challenges and Approaches
• 00:27:28 - Key Strategies for Organizations Embarking on Cybersecurity

Links And Resources:

• Debbie Gordon on LinkedIn
• Cloud Range Cyber
• Debbie Gordon on Twitter
• Cloud Range Cyber on Facebook
• Velta Technology
• Dino Busalachi on LinkedIn
• Jim Cook on LinkedIn
• Craig Duckworth on LinkedIn

Thanks so much for joining us this week. Want to subscribe to Industrial Cybersecurity Insider? Have some feedback you’d like to share? Connect with us on Spotify, Apple Podcasts, YouTube, and Google Podcasts to leave us a review!

Join us for an insightful conversation with Dino Busalachi, CTO; and Craig Duckworth, President and CEO, of Velta Technology. They also share their perspectives on some of the recent cyber attacks that have shaken the OT space, such as the Oldsmar water plant, the Colonial Pipeline, and the MGM casino. Dino and Craig reveal how they help various industrial sectors, from manufacturing to gaming, protect their operational technology systems from cyber threats.

They explain how IT and OT cybersecurity differ and overlap, and how to foster a collaborative and effective approach. They also highlight the key elements of a robust OT cybersecurity strategy, such as a defensible architecture, a continuous monitoring system, a vulnerability management program, a secure remote access tool, and an incident response plan. They also share some of the best practices, common pitfalls, and future trends in the OT cybersecurity field.

Chapters:

• 00:00:00 - Welcome to the Industrial Cybersecurity Insider Podcast
• 00:01:11 - How Hackers Tried to Poison a Florida City’s Water Supply
• 00:02:57 - The Unique Challenges and Opportunities of OT Cybersecurity in Manufacturing
• 00:04:15 - How to Secure Remote Access to Your Industrial Systems
• 00:06:37 - How a Ransomware Attack Shut Down a Major US Pipeline
• 00:07:20 - Why You Need to Monitor Your OT Network and Assets
• 00:09:49 - How to Bridge the Gap Between IT and OT Teams
• 00:20:12 - How Cyber Attacks Can Affect the Casino Business and Customers
• 00:23:12 - How Cybersecurity Insurance and Legal Issues Can Impact Your OT Strategy
• 00:26:35 - Key Takeaways and Tips from VELTA Technology Experts

Links And Resources:

• Velta Technology
• Dino Busalachi on LinkedIn
• Jim Cook on LinkedIn
• Craig Duckworth on LinkedIn

Thanks so much for joining us this week. Want to subscribe to Industrial Cybersecurity Insider? Have some feedback you’d like to share? Connect with us on Spotify, Apple Podcasts, YouTube, and Google Podcasts to leave us a review!

In this week's episode, Danielle Jablanski, an OT cybersecurity strategist at Nozomi Networks, discusses the current and future landscape of OT cybersecurity with Velta Technology's CTO, Dino Busalachi. Danielle shares her unique perspective as a former market analyst, a current educator, and a passionate advocate for OT security. She discusses the cultural and technical challenges of bridging the IT/OT divide, the impact of regulation and liability on OT security, the importance of building strong foundations and defensible architectures, and the need for workforce enablement and development. She also gives us some practical tips and resources on how to learn more about OT cybersecurity and how to apply it in different contexts and scenarios.

Chapters:

• 00:00:00 - Introduction and Overview with Danielle Jablanski
• 00:00:56 - Defining the Role of an OT Cybersecurity Strategist
• 00:01:54 - IT and OT: Collaboration and Challenges
• 00:03:28 - Professional Services in IT-OT Integration
• 00:05:37 - Contextualizing Security in the OT Environment
• 00:08:08 - Executive Leadership in OT Security Implementation
• 00:13:01 - Enhancing OT Security Through Workforce Development
• 00:17:21 - Future Outlook on OT Cybersecurity Trends
• 00:21:07 - Educational Resources for Advancing in OT Security
• 00:24:03 - Key Takeaways and Practical Tips in OT Security

Links And Resources:

• Danielle Jablanski(DJ) on LinkedIn
• Nozomi Networks
• Atlantic Council
• Industrial Cyber
• Velta Technology
• Dino Busalachi on LinkedIn
• Jim Cook on LinkedIn
• Craig Duckworth on LinkedIn

Thanks so much for joining us this week. Want to subscribe to Industrial Cybersecurity Insider? Have some feedback you’d like to share? Connect with us on Spotify, Apple Podcasts, YouTube, and Google Podcasts to leave us a review!

Craig Duckworth is joined by Dale Peterson, an esteemed figure in Industrial Control System (ICS) security. They explore the intricate interplay between Information Technology and Operational Technology, shedding light on the evolving challenges in cybersecurity for industrial sectors. Dale, with his rich background from founding the S4 conference to pioneering cybersecurity innovations, imparts invaluable insights for those navigating the complex landscape of industrial digital security, making this episode a must-listen for anyone invested in the future of industrial cybersecurity.

Chapters:

• 00:00:00 - Introduction: Craig Duckworth Welcomes Dale Peterson, ICS Security Expert
• 00:01:09 - Dale's Entry into Industrial Cybersecurity: Beginnings and Motivations
• 00:02:49 - Tracing the Transformation of Industrial Cybersecurity Over Time
• 00:03:53 - Addressing the Skills Gap in Industrial Cybersecurity
• 00:04:53 - Communicating Effectively in the World of Cybersecurity
• 00:06:10 - Delving Deeper into the Evolution of Industrial Cybersecurity
• 00:10:57 - The Critical Role of Metrics in Enhancing Cybersecurity
• 00:12:37 - Navigating Cybersecurity Regulations in Industrial Sectors
• 00:19:27 - The Genesis and Goals of the S4 Conference
• 00:25:25 - Expert Guidance for Thriving in Industrial Cybersecurity
• 00:28:58 - Wrapping Up: Key Takeaways and Conclusion

Links And Resources:

• Website
• Twitter/X
• LinkedIn
• Unsolicited Response Podcast
• Velta Technology
• Dino Busalachi on LinkedIn
• Jim Cook on LinkedIn
• Craig Duckworth on LinkedIn

Thanks so much for joining us this week. Want to subscribe to Industrial Cybersecurity Insider? Have some feedback you’d like to share? Connect with us on Spotify, Apple Podcasts, YouTube, and Google Podcasts to leave us a review!

We delve into the intricate world of operational technology (OT) cybersecurity with industry expert Dave Purdy. With his extensive experience transitioning from IT to OT, Dave discusses the unique challenges and vulnerabilities in protecting critical infrastructure and industrial networks. He shares his insights on safeguarding legacy systems, the importance of specialized skill sets in OT cybersecurity, and the evolving threats in this space. This conversation provides a comprehensive look at the current state and future direction of cybersecurity in operational technology, offering valuable takeaways for professionals in this field.

Chapters:

• 00:00:00 - Introduction to the World of OT Cybersecurity with Expert Dave Purdy
• 00:01:19 - Dave's Journey: Shifting Focus from IT to OT
• 00:02:54 - Exploring Unique Market Challenges in OT Cybersecurity
• 00:03:44 - Tackling the Complexities of Legacy Systems in Industrial Networks
• 00:05:04 - Cybersecurity: A Key Business Priority in the Digital Age
• 00:06:38 - The Influence of Cybersecurity on Industrial Insurance Policies
• 00:09:02 - Effective Strategies for Overcoming Cybersecurity Hurdles
• 00:14:33 - Tailoring Cybersecurity Solutions Across Various Industries
• 00:23:17 - Essential Tips for Organizations Embarking on Cybersecurity Initiatives
• 00:25:09 - Wrapping Up: Key Insights and Final Thoughts from Dave Purdy

Links And Resources:

• Dave Purdy on LinkedIn
• TXOne Networks
• Velta Technology
• Dino Busalachi on LinkedIn
• Jim Cook on LinkedIn
• Craig Duckworth on LinkedIn

Thanks so much for joining us this week. Want to subscribe to Industrial Cybersecurity Insider? Have some feedback you’d like to share? Connect with us on Apple Podcasts and leave us a review!

Dino Busalachi, CTO and co-founder, and Jim Cook, COO from Velta Technology, discuss the heightened risks of cybersecurity during the holiday season, especially in industrial environments. They explore how reduced staffing, increased remote access, and operational shutdowns create vulnerabilities in control systems. They dive into the importance of maintaining operational resilience and the necessity of robust cybersecurity measures. Practical advice and experiences are shared, emphasizing the need for preparedness and vigilance in safeguarding against cyber threats during this critical period.

Chapters:

• 00:00:00 - Cybersecurity Challenges During the Holiday season
• 00:00:50 - Examining Cybersecurity Vulnerabilities During the Holiday Season
• 00:01:21 - Strategies for Effective Incident Response in Cybersecurity
• 00:02:19 - Analyzing Holiday Season Vulnerabilities in Control Systems
• 00:02:53 - Effect of Reduced Staffing on Cybersecurity During Holidays
• 00:04:54 - Supply Chain's Role in Ensuring Cybersecurity
• 00:06:39 - Preparing for Cyber Threats: Key Strategies and Tips
• 00:08:57 - Utilizing Advanced Tools and Technologies for Cybersecurity
• 00:11:20 - Identifying and Mitigating Cybersecurity Risks and Threats
• 00:15:01 - Importance of Continuous Monitoring in Cybersecurity
• 00:17:10 - Building Operational Resilience Against Cyber Threats
• 00:21:59 - Addressing Cybersecurity Issues: Admitting and Tackling Problems
• 00:24:40 - Wrapping Up: Key Takeaways and Final Thoughts on Cybersecurity

Links And Resources:

• Velta Technology
• Dino Busalachi on LinkedIn
• Jim Cook on LinkedIn
• Craig Duckworth on LinkedIn

Thanks so much for joining us this week. Want to subscribe to Industrial Cybersecurity Insider? Have some feedback you’d like to share? Connect with us on Apple Podcasts and leave us a review!

Craig Duckworth engages with Rogan Dwyer, a seasoned expert in the insurance space, to unravel the complexities of cybersecurity insurance. Dwyer, with his extensive background in risk mitigation and insurance, delves into the evolving landscape of cyber threats and the insurance industry's response to these challenges. They discuss the necessity of integrating insurance with broader risk management strategies and the importance of board-level understanding and involvement in cybersecurity.

Chapters:

• 00:00:00 – Diving Into the World of Cybersecurity Insurance
• 00:02:20 – Decoding Client Risks: A Critical Look at Policy Impacts
• 00:04:50 – The Hunt for Premium Clients: A Strategic Approach for Insurers
• 00:07:15 – The Future is Now: Innovations in Underwriting and Risk Mitigation
• 00:09:45 – Claims & Onboarding: Mastering Efficiency in Insurance
• 00:12:20 – Leaders in the Limelight: Executive Roles in Cyber Insurance Decisions
• 00:14:55 – Navigating Financial Hurdles: Large Loss Recovery Tactics
• 00:18:40 – Boardroom Dynamics: Steering the Insurance Decision Course
• 00:22:25 – Risk Management SOS: Where to Turn for Expert Advice
• 00:23:40 – Cyber Risks and Corporate Strategies: An Insurance Perspective
• 00:24:55 – Building Bridges: Collaborative Efforts in Risk and Insurance
• 00:28:40 – Key Takeaways: The Essence of Today's Cyber Insurance Talk

Links And Resources:

• Rogan Dwyer on LinkedIn
• Observatory Strategic Management
• Velta Technology
• Dino Busalachi on LinkedIn
• Jim Cook on LinkedIn
• Craig Duckworth on LinkedIn

Thanks so much for joining us this week. Want to subscribe to Industrial Cybersecurity Insider? Have some feedback you’d like to share? Connect with us on Apple Podcasts and leave us a review!

We delve into the complex world of cybersecurity in the industrial sector. Our experts, Dino Busalachi and Craig Duckworth, unpack the nuances of IT/OT convergence, the gaping holes in cybersecurity insurance, and the unique challenges faced by manufacturers across a diverse array of plants. They share firsthand experiences of cybersecurity incidents that have led to significant operational disruptions, highlighting the critical need for a robust security framework in the industrial control space. This conversation is a must-listen for anyone invested in the safeguarding of our industrial infrastructure for manufacturing and critical infrastructure organizations.

Chapters:

• 00:00:00 - Exploring Industrial Cybersecurity: Insights into the Industrial Security Landscape
• 00:03:00 - Crisis Averted: Rescuing IP Addresses from a Denial of Service Attack
• 00:04:47 - Concerns Raised: Unauthorized Scanning of Control System Networks
• 00:07:30 - Costly Consequences: Duplicate IP Address Mishap in Automotive Manufacturing
• 00:10:27 - Managing Risks in Diverse Industrial Environments
• 00:12:00 - Cybersecurity Risks in Industrial Control Systems: Default Passwords on Plant Printers
• 00:14:03 - Firewall Limitations in the Realm of Industrial Cybersecurity
• 00:16:36 - Challenges in Handling Equipment and Software in Industrial Environments
• 00:20:22 - Bridging the Gap: Applying IT Practices to Operational Technology
• 00:22:56 - Recruiting Cybersecurity Talent for Industrial Control Systems: Challenges and Solutions
• 00:26:35 - Assigning Roles: The Importance of OT Cybersecurity in Industrial Facilities

Links And Resources:

• Velta Technology
• Dino Busalachi on LinkedIn
• Jim Cook on LinkedIn
• Craig Duckworth on LinkedIn

Thanks so much for joining us this week. Want to subscribe to Industrial Cybersecurity Insider? Have some feedback you’d like to share? Connect with us on Apple Podcasts and leave us a review!

We delve into the critical intersection of finding talent for operational technology and cybersecurity roles within industrial environments. Dino and Jim engage in a discussion about the urgent need for cyber talent for industrial environments including manufacturing and critical infrastructure environments. They explore the potential for a new breed of cyber ops roles, the current state of industrial cybersecurity educational offerings, and the importance of immersing yourself in industrial environments to truly understand and protect the plant floor. This episode is a must-listen for anyone invested in the future of industrial safety and cybersecurity.

Chapters:

• 00:00:00 - Meet the Leadership Team at Velta Technology
• 00:03:57 - Closing the Gap: Collaborating Between IT and Engineering for Industrial Cybersecurity
• 00:07:32 - Prioritizing Safety and Work Environment in Industrial Operations
• 00:11:28 - Cybersecurity's Vital Role and the Demand for Technical Expertise
• 00:13:05 - Dispelling Myths and Confronting Challenges in Industrial Cybersecurity
• 00:16:16 - The Imperative for Cybersecurity Training and Education
• 00:20:42 - Enhancing Cybersecurity Measures and Data Management in Modern Machine Centers

Links And Resources:

• Velta Technology
• Dino Busalachi on LinkedIn
• Jim Cook on LinkedIn
• Craig Duckworth on LinkedIn

Thanks so much for joining us this week. Want to subscribe to Industrial Cybersecurity Insider? Have some feedback you’d like to share? Connect with us on Apple Podcasts and leave us a review!

Jim and Dino dive deep into the intricate world of IT and OT convergence, exploring the unseen challenges and silent variables that permeate the manufacturing floor. From the metaphorical porcupines of IT issues to the invisible activities within plant walls, the discussion unveils the criticality of aligning IT and OT for robust industrial control system security. They also navigate through the complexities of managing varied technologies across different plants, especially in the context of mergers and acquisitions, offering listeners a rare glimpse into the delicate balancing act of thinking globally while acting locally in manufacturing cybersecurity.

Chapters:

• 00:00:00 Exploring IT and OT Convergence in Industrial Cybersecurity
• 00:04:37 Navigating Equipment Lifecycles: The IT and OT Dilemma
• 00:10:22 Behind Plant Walls: Understanding Network Connections in Manufacturing
• 00:12:45 Securing Industrial Controls: The Value of Dedicated OT Firewalls
• 00:16:32 Importance of focusing on all layers of the OSI Model
• 00:20:54 Decoding the Tech Enigma: Cybersecurity Governance and the C-Suite
• 00:21:44 The CFO Discovering Hidden Industrial Plant Floor Assets Story
• 00:23:25 The Cornerstone of Cybersecurity: Maintaining Accurate IT Inventory in Manufacturing

Links And Resources:

• Velta Technology
• Dino Busalachi on LinkedIn
• Jim Cook on LinkedIn
• Craig Duckworth on LinkedIn

Thanks so much for joining us this week. Want to subscribe to Industrial Cybersecurity Insider? Have some feedback you’d like to share? Connect with us on Spotify, Apple Podcasts and Google Podcasts, and leave us a review!