Industrial Cybersecurity Insider

Dino and Craig address the recent acknowledgment by China of their role in U.S. infrastructure hacks. They explore the urgent cybersecurity challenges facing industrial environments.

With rising geopolitical tensions, tariffs, the push to bring more manufacturing back to the U.S. and increasing attacks on critical infrastructure, the stakes have never been higher.

From end-of-life PLCs still running core operations, to the disconnect between IT and OT leadership, this conversation identifies the systemic gaps leaving industrial operations exposed.

They outline the pressing need for visibility, actionable incident response plans, and a cultural shift toward collaboration across the stack, from plant floor to the boardroom.

Whether you’re a CISO or an operations lead, this episode offers real-world insights, battle-tested perspectives, and one clear takeaway: in cybersecurity, doing nothing is no longer an option.

Chapters:

• 00:00:00 - Kicking Off: Why IT-OT Unity Isn’t Optional Anymore
• 00:01:17 - Cyber Threats, China, and the Global Wake-Up Call
• 00:02:16 - CISA’s New Role: From Background Player to OT Ally
• 00:05:32 - Still Separate, Still Vulnerable: Why IT & OT Must Sync Up
• 00:09:48 - Blind Spots Kill: Why Visibility Is the Real MVP
• 00:10:43 - Remote Access Realities and the Myth of the Air Gap
• 00:20:29 - Crisis Mode: Are You Ready for the Worst?
• 00:23:50 - Dino & Craig’s Parting Shot: Do Something - Now

Links And Resources:

• Industrial Cybersecurity Insider on LinkedIn
• Cybersecurity & Digital Safety on LinkedIn
• Dino Busalachi on LinkedIn
• Craig Duckworth on LinkedIn

Thanks so much for joining us this week. Want to subscribe to Industrial Cybersecurity Insider? Have some feedback you’d like to share? Connect with us on Spotify, Apple Podcasts, and YouTube to leave us a review!

In this special rewind episode, Dino Busalachi and Jim Cook address the messy but critical reality of implementing Zero Trust in operational technology (OT) environments.

Drawing from years of hands-on experience, they break down why traditional IT frameworks often fail on the plant floor, especially when facing flat OT networks, legacy assets, and limited change windows.

They introduce a "bucket approach" to segmenting and securing OT networks from the ground up. With real-world insights into asset inventory, process integrity, remote access challenges, and cross-functional collaboration, this episode is invaluable.

Whether you're a CISO, CTO, an OT engineer, or IT expert; this episode offers solid advice on navigating the convergence of IT and OT in complex industrial systems and environments.

Chapters:

• 00:00:00 – Why Zero Trust Doesn’t Fit the Plant Floor (Yet)
• 00:00:45 - Zero Trust : IT versus OT with Dino Busalachi and Jim Cook
• 00:15:59 - Zero Trust in OT: Adapting IT's Playbook for Enhanced Security

Links And Resources:

• Industrial Cybersecurity Insider
• LinkedIn Cybersecurity Group Page
• Dino Busalachi on LinkedIn
• Jim Cook on LinkedIn

Thanks so much for joining us this week. Want to subscribe to Industrial Cybersecurity Insider? Have some feedback you’d like to share? Connect with us on Spotify, Apple Podcasts, and YouTube to leave us a review!

In this episode, Dino and Craig address the practicalities of building cyber resilience directly into manufacturing environments - rather than after the fact.

Using real-world analogies and field-tested insights, they break down why treating OT security like physical safety is crucial.

They challenge the outdated mindset of retrofitting cybersecurity protection after deployment of industrial plant floor equipment.

This episode covers all the key elements of protecting your plant floor. From the importance of designing cybersecurity upfront, to implementing the SANS 5 Critical Controls, specific to cybersecurity in operational technology (OT) environments.

Whether you're planning a greenfield build or managing legacy systems, this episode equips mid-to-senior leaders with actionable strategies to align IT and OT teams, boost visibility across XIoT assets, and future-proof operational environments in high-risk industries.

Chapters:

• 00:00:00 - Kicking Off: Why Cybersecurity Can’t Be an Afterthought in Manufacturing
• 00:01:52 - Dino’s Five Must-Have OT Security Controls You Should Already Be Using
• 00:03:45 - When IT and OT Collide: Real Talk on Silos, Strategy, and Responsibility
• 00:06:08 - You Can’t Protect What You Can’t See: The Visibility Wake-Up Call
• 00:11:24 - Build It In, Don’t Bolt It On: Making Cybersecurity Part of the Machine
• 00:19:26 - Lost Docs and Retiring Experts: Managing Risk Across the Lifecycle
• 00:20:41 - Dino and Craig’s Final Word: Start Now, Start Smart—Security Is the New Safety

Links And Resources:

• Industrial Cybersecurity Insider on LinkedIn
• Cybersecurity Insider Newsletter
• Dino Busalachi on LinkedIn
• Craig Duckworth on LinkedIn

Thanks so much for joining us this week. Want to subscribe to Industrial Cybersecurity Insider? Have some feedback you’d like to share? Connect with us on Spotify, Apple Podcasts, and YouTube to leave us a review!

In this episode, Dino and Craig dive deep into the disturbing talent exodus in cybersecurity. The discussion is sparked by Gartner’s prediction that 25% of cybersecurity professionals will leave the field in the next year.

They explore the growing gap between IT and OT teams, the lack of CISO influence in executive leadership, and the friction between cybersecurity goals and operational uptime.

With real-world anecdotes and hard-hitting insights, they unpack everything from rogue assets and malware in OT environments to the challenges of implementing EDR tools in live production lines.

Whether you're a CISO, CIO, or plant manager, this episode offers a candid look at the complex dynamics of securing industrial environments — and how collaboration is the only path forward.

Chapters:

• 00:00:00 – Kicking Off with a Brutal Reality Check on Cybersecurity
• 00:01:06 – Gartner Says 25% of Cyber Pros Are Leaving — Here’s Why That Matters
• 00:03:15 – IT vs OT: The Culture Clash Still Killing Cyber Progress
• 00:09:35 – Why the Wrong Service Partner Could Be Your Biggest Risk
• 00:14:05 – Malware, Rogue Assets, and the Ugly Truth About Your Plant Floor
• 00:18:22 – Real Strategies for Fixing the IT/OT Disconnect (Without Killing Uptime)
• 00:24:06 – Stop Talking. Start Acting. What Cyber Leaders Need to Do Today

Links And Resources:

• Industrial Cybersecurity Insider on LinkedIn
• Cybersecurity Insider Newsletter
• Dino Busalachi on LinkedIn
• Craig Duckworth on LinkedIn

Thanks so much for joining us this week. Want to subscribe to Industrial Cybersecurity Insider? Have some feedback you’d like to share? Connect with us on Spotify, Apple Podcasts, and YouTube to leave us a review!

In this episode, Dino and Craig tackle one of the most overlooked vulnerabilities in industrial cybersecurity: the unintentional chaos caused when IT security procedures are blindly applied to OT environments.

Using real-world examples like the CrowdStrike EDR failure, they illustrate how tools meant to protect can actually shut down production lines, cripple HMIs, and introduce massive operational risk.

They call out the air-gap myth, the need for shared authority between IT and OT, and the critical importance of context when deploying cybersecurity solutions on the plant floor.

For executives and practitioners alike, this episode is a wake-up call to rethink governance, accountability, and collaboration between traditionally siloed IT and OT teams.

Chapters:

• 00:00:00 – IT vs. OT: The Unspoken War
• 00:01:03 – Meet Your Guides: Dino & Craig
• 00:01:05 – IT/OT Explained… Without the Jargon
• 00:02:26 – How IT Crashed the Plant Floor
• 00:05:12 – Talk to Me Like I’m Production
• 00:08:53 – Security Priorities: Worlds Collide
• 00:13:40 – Vendors, Integrators & Invisible Risks
• 00:21:52 – Who Owns the Fallout?

Links And Resources:

• Cybersecurity & Digital Safety Group on LinkedIn
• Dino Busalachi on LinkedIn
• Craig Duckworth on LinkedIn

Thanks so much for joining us this week. Want to subscribe to Industrial Cybersecurity Insider? Have some feedback you’d like to share? Connect with us on Spotify, Apple Podcasts, and YouTube to leave us a review!

Dino Busalachi sits down with Carlos Buenaño, CTO of Armis, to explore the evolving cybersecurity challenges in industrial control systems (ICS) and operational technology (OT).

Carlos shares insights from his extensive experience in process control engineering, industrial network security, and IT-OT convergence. He sheds light on how organizations can gain visibility into their OT environments, mitigate cyber risks, and implement effective security frameworks.

From real-world ransomware incidents to strategies for network segmentation and asset monitoring, this discussion provides actionable insights for anyone involved in securing industrial infrastructure.

Whether you're a plant manager, security leader, or IT-OT strategist, this episode is packed with valuable takeaways.

Chapters:

• 00:00:00 - The High-Stakes World of Plant Management and Control Systems
• 00:01:20 - Meet the Experts: Dino and Carlos on Industrial Cybersecurity
• 00:01:55 - From Engineer to CTO: Carlos’ Journey in Securing ICS
• 00:03:15 - Designing Secure Control Networks: Lessons from Australia
• 00:05:17 - IT vs. OT: Why the Security Approach Must Change
• 00:08:14 - Breaking Down IT-OT Conflicts and Finding Common Ground
• 00:13:52 - Hidden Cyber Threats in Industrial Control Systems
• 00:23:16 - How to Stay Ahead of Cyber Attacks in OT Environments
• 00:24:15 - Key Takeaways and Actionable Steps for Industrial Security

Links And Resources:

• Juan Carlos (Carlos) Buenaño on LinkedIn
• Cybersecurity & Digital Safety Group on LinkedIn
• Dino Busalachi on LinkedIn
• Craig Duckworth on LinkedIn

Thanks so much for joining us this week. Want to subscribe to Industrial Cybersecurity Insider? Have some feedback you’d like to share? Connect with us on Spotify, Apple Podcasts, and YouTube to leave us a review!

Organizations in the industrial sector continue to invest in cybersecurity, but are they truly secure, or just leaning on a false sense of comfort?

In this episode, industry experts Dino Busalachi and Craig Duckworth, dive into the dangerous gap between perception and reality when it comes to OT cybersecurity.

They discuss real-world challenges, from blind spots in asset visibility to leadership misalignment and third-party risks.

With a focus on practical steps, they explore why security frameworks must go beyond IT, how to align business needs with security, and why treating cybersecurity like safety is essential.

This episode is a must-listen for anyone serious about protecting their industrial environments.

Chapters:

• 00:00:00 - Kicking Off: Are You Truly Secure or Just Comfortable?
• 00:00:47 - A Quick Timeout: NCAA Madness Before Cyber Madness
• 00:01:15 - OT Security Reality Check: Do You Really Know Your Risks?
• 00:01:45 - The Hidden Challenges Holding OT Security Back
• 00:03:15 - Lack of Skilled Resources: The Biggest Barrier to Security
• 00:05:30 - Security Frameworks: Are They Reaching the Plant Floor?
• 00:06:15 - The Dangerous Myth of “Isolated” OT Systems
• 00:07:58 - From Theory to Action: Winning Strategies for OT Security
• 00:12:13 - Leadership’s Role in Cybersecurity: Who’s Driving the Change?
• 00:19:55 - No More Blind Spots: Key Takeaways for a Secure Future

Links And Resources:

• Cybersecurity LinkedIn Group
• Dino Busalachi on LinkedIn
• Craig Duckworth on LinkedIn

Thanks so much for joining us this week. Want to subscribe to Industrial Cybersecurity Insider? Have some feedback you’d like to share? Connect with us on Spotify, Apple Podcasts, and YouTube to leave us a review!

Industrial cybersecurity is no longer an option—it’s a necessity. 

In this episode, Kimberly Anderson, Managing Director at UHY, joins Craig Duckworth to explore the growing cybersecurity challenges facing manufacturers and industrial operations. 

They discuss the gaps in cybersecurity accountability, IT/OT entanglement, and why network segregation is still a major hurdle. 

Kimberly shares insights on cyber insurance pitfalls, compliance best practices, and why businesses should move beyond "checking the box" to build a truly resilient cybersecurity program. 

Whether you're facing vendor or OEM remote access risks, securing legacy systems, or navigating industrial cybersecurity regulations, this conversation provides actionable insights to help you stay in compliance and ahead of common cybersecurity pitfalls.

Chapters:

• 00:00:00 - Ransomware Isn’t Your Biggest Threat—Human Error Is
• 00:00:44 - Meet Kimberly Anderson: From Chemistry to Cybersecurity Leadership
• 00:01:17 - Why Technology Risk & Compliance Can’t Be Ignored in Industrial Cybersecurity
• 00:02:29 - IT/OT Security Integration: Why It’s a Struggle and How to Get It Right
• 00:03:56 - Network Segregation: The Critical Security Step Most Companies Overlook
• 00:05:42 - The IT/OT “Divorce”: Why Separating Networks is a Game-Changer
• 00:06:41 - Rushing to the Cloud? Avoid These Vendor Security Pitfalls
• 00:11:48 - Cyber Insurance Isn’t a Safety Net—Here’s What You’re Missing
• 00:14:43 - Beyond “Checking the Box”: How to Build a Resilient Cybersecurity Strategy
• 00:18:25 - Final Takeaways: Simple Steps to Strengthen Your Security Today

Links And Resources:

• Kimberly Anderson on LinkedIn
• UHY Advisors, Inc.
• Industrial Cybersecurity LinkedIn Group
• Dino Busalachi on LinkedIn
• Craig Duckworth on LinkedIn

Thanks so much for joining us this week. Want to subscribe to Industrial Cybersecurity Insider? Have some feedback you’d like to share? Connect with us on Spotify, Apple Podcasts, and YouTube to leave us a review!

In this episode, we dive into the latest Gartner Magic Quadrant report for OT cybersecurity and analyze key players, market trends, and strategies for selecting the right security partners.

We also discuss insights from the recent S4 conference, the growing importance of cyber-informed engineering, and how organizations can effectively align IT and OT security strategies.

We discuss CapEx versus OpEx and potential implications of the DOGE initiative around industrial cybersecurity investments.

Whether you're planning your next cybersecurity investment or tackling legacy system challenges, this episode provides practical guidance to help you navigate the OT security landscape.

Chapters:

• 00:00:00 -Think Globally, Secure Locally: Crafting an Effective OT Cyber Strategy
• 00:00:31 -Meet Dino & Craig: Cybersecurity Pros with Real-World OT Experience
• 00:01:03 -Cybersecurity Headlines That Matter: What’s Shaping OT Security Today
• 00:02:20 -Gartner’s Magic Quadrant Revealed: Who’s Leading OT Cybersecurity?
• 00:03:08 -Why OT Teams Hold the Key to Cybersecurity Success
• 00:04:24 -Your OT Ecosystem is Bigger Than You Think—Here’s Why That Matters
• 00:05:08 -S4 Conference Takeaways: The Future of Secure-By-Design Machines
• 00:11:39 -CapEx vs. OpEx: Smart Budgeting for OT Cybersecurity Investments
• 00:19:08 -AI, Onshoring, and the Next Big Shifts in Industrial Cybersecurity
• 00:20:50 -IT vs. OT? No—IT & OT: How to Bridge the Divide for Better Security
• 00:23:02 -Final Insights: The Must-Know Takeaways for Securing Your OT Environment

Links And Resources:

• Cybersecurity Group Page on LinkedIn
• Dino Busalachi on LinkedIn
• Craig Duckworth on LinkedIn

Thanks so much for joining us this week. Want to subscribe to Industrial Cybersecurity Insider? Have some feedback you’d like to share? Connect with us on Spotify, Apple Podcasts, and YouTube to leave us a review!

The rapid evolution of AI is reshaping industrial cybersecurity, but are organizations ready for the risks?

In this episode, three different experts explore the complexities of securing OT environments, the rising role of AI in threat detection, and the challenges of integrating IT and OT security.

From governance and compliance to workforce development and emerging cyber threats, this discussion sheds light on the shifting cybersecurity landscape.

Gain insights into the future of industrial security, the impact of AI-driven decision-making, and the importance of balancing innovation with risk management.

Chapters:

• 00:00:00 - Diving into AI’s evolving role in industrial cybersecurity—threats, solutions, and what’s next
• 00:00:43 - AI, Global Trends, and More: A Glimpse into the Future of OT Cybersecurity with Claroty
• 00:5:16 - AI in Industrial Cybersecurity: Friend, Foe, or Something in Between?
• 00:10:58 - From Legacy Systems to Ransomware: The Evolution of OT Cybersecurity

Links And Resources:

• Cybersecurity Group Page on LinkedIn
• Dino Busalachi on LinkedIn
• Craig Duckworth on LinkedIn

Thanks so much for joining us this week. Want to subscribe to Industrial Cybersecurity Insider? Have some feedback you’d like to share? Connect with us on Spotify, Apple Podcasts, and YouTube to leave us a review!