PrOTect It All

Work with Aaron: https://protectitallpod.com/work/

Click here to participate in this exclusive event - https://corvosec.com/lonestar-cyber-shootout/

In this episode, Neal Conlon joins  Aaron Crow to dive into the details of an extraordinary event set to take place at the renowned STACCATO Ranch.

Listen in as Neal and Aaron describe an exclusive high-energy experience scheduled for cybersecurity decision-makers. Taking advantage of the expansive 800 Acres to Counter Ranch, this event promises tactical and adventurous activities like shooting from helicopters and professional tactical shooting instruction. Beyond the thrill, attendees will enjoy top-tier amenities such as cigars, bourbon, and gourmet food, all within a high-class, safe environment tailored for networking and learning.

Throughout the episode, listeners will hear how Neal Conlon transitioned from the Marine Corps mailroom to becoming a global leader in cybersecurity sales, offering a wealth of industry insights along the way. The hosts emphasize the importance of genuine relationship-building and soft skills in an industry often overshadowed by technical certifications. They critique traditional conferences for their superficial perks and excessive follow-up, promoting their unique event as a refreshing alternative designed to foster meaningful connections and strategic engagement.

Listeners will also gain valuable advice on navigating the complexities of the cybersecurity industry, from managing vendor relationships to understanding procurement cycles, and the crucial role of proactive networking in career advancement.

Tune in to this riveting episode for an inside look at an unparalleled cybersecurity event and invaluable career insights from Neal and Aaron. 

Key Moments: 

00:10 From hedge fund to data and marketing expert.

04:02 Evolved from client work to sales expertise.

09:23 Cybersecurity requires swift adaptation, networking, and leveraging skills.

13:34 Leadership program improved my skills over time.

17:30 AI evolution reduces need for abstract thinkers.

21:12 Lemming information creates noisy conflict and confusion.

23:53 People voluntarily attend for genuine networking opportunities.

26:39 Two people enjoy baseball game nosebleed seats.

31:06 Control initiatives, build relationships, secure deals.

34:29 Event's unique value and ROI for leaders/vendors.

35:20 Vendor leads often misclassified; true relationships matter.

38:33 Networking and shared experiences build valuable connections.

43:25 High-energy networking event with decision-makers.

Connect With Aaron Crow:

Learn more about PrOTect IT All:

Work with Aaron: https://protectitallpod.com/work/

To be a guest or suggest a guest or episode, email [email protected].

Please leave us a review on Apple or Spotify:

Work with Aaron: https://protectitallpod.com/work/

In this episode, host Aaron Crow dives into cybersecurity and risk management with guest Harry Thomas, CTO and co-founder of Freanos. This episode tackles the complexities of managing security risks in large organizations, from outdated systems to inconsistent cybersecurity postures across various sites.

Listeners will learn how companies leverage consultants and community support to bridge knowledge gaps and the importance of operationalizing cybersecurity tools. Harry Thomas shares his views on the evolving landscape of OT security tools, the role of AI in enhancing productivity, and innovative approaches to addressing vulnerabilities in critical infrastructure.

The episode also explores the advantages of hybrid cloud models for improved resilience and ROI and offers practical advice on risk management and adaptability. Get Harry's book recommendations and learn about Freanos' platform, which is designed to efficiently prioritize and mitigate risks.

Tune in for essential knowledge and strategies to "protect it all," whether you're an experienced cybersecurity professional or just starting out. This discussion is packed with actionable insights and innovative perspectives you won't want to miss.

Key Moments: 

04:07 Understanding comprehensive risk environments requires collective expertise.

11:43 Flexible onboarding for diverse technological infrastructures.

14:21 Tools are costly; operational transfer challenges value.

17:22 Replicated improves network security troubleshooting efficiency.

21:07 OT must embrace new technologies for growth.

25:17 Cloud's benefits outweigh outdated equipment's drawbacks.

27:12 Fast internet enables remote power plant operation.

30:46 Prioritize resources over patching 80,000 devices.

35:13 Patching insufficient in OT, unlike IT systems.

37:43 Different risk approaches for IT vs. OT scenarios.

45:41 All business involves people, adaptability, and growth.

47:42 Cybersecurity will shift focus to customer impact.

About the guest : 

Harry Thomas, a cybersecurity veteran with over a decade of expertise, specializes in offensive penetration testing and securing industrial and healthcare infrastructure. As CTO of Frenos, Harry leads the company’s strategic innovation, focusing on advanced cybersecurity solutions to safeguard critical systems against evolving threats.

An accomplished educator and speaker, Harry has taught “Hacking PLCs” at DefCon and BSIDES Orlando, spoken at BSIDES NH, and appeared on the Secure Insights podcast, sharing insights on cybersecurity challenges and advancements.

Previously, he served as Director of Product R&D at Dragos, where he strengthened security in industrial control systems, and at AWS, where he developed AI/ML-driven User Behavioral Analytics to enhance security. Known for his technical expertise and leadership, Harry is a prominent speaker at global cybersecurity conferences, offering strategic insights into threat mitigation.

Connect Harry:

https://frenos.io/

https://frenos.io/blog/atlas-advanced-threat-landscape-analysis-system

https://frenos.io/blog/proactive-defense-zero-disruption-why-frenos-won-the-datatribe-challenge

Connect With Aaron Crow:

Learn more about PrOTect IT All:

Work with Aaron: https://protectitallpod.com/work/

To be a guest or suggest a guest or episode, email [email protected].

Please leave us a review on Apple or Spotify:

Work with Aaron: https://protectitallpod.com/work/

In this episode, host Aaron Crow is joined by special guest  Mike Holcomb to discuss the intricate realm of Industrial Control Systems and Operational Technology (ICS/OT) cybersecurity. The episode also spotlights the upcoming event B Sides ICS, an open and community-centric conference set to run alongside the prestigious S4 conference in Tampa.

Mike Holcomb provides insights into the much-anticipated ticket sales for the event and underscores the importance of submitting papers or presentations by the end of the year. The discussion emphasizes the significance of expertise in OT, cyber, and enterprise operations for top-level management and how events like B Sides ICS and S4 promote networking, learning, and professional development.

Listeners will gain a deeper understanding of the origins of B Sides events, the excitement surrounding B Sides ICS, and the impactful discussions and innovations poised to shape the future of ICS/OT cybersecurity. Whether the audience comprises newcomers or seasoned professionals, this episode offers valuable takeaways for everyone.

Key Moments: 

00:00 Educating and supporting ICS & OT cybersecurity communities.

04:28 Passionate about learning and sharing cybersecurity knowledge.

08:59 B Sides: Global community-focused conference events.

10:43 Bringing B-Sides to Greenville increased attendance.

16:29 Promote diverse perspectives in OT cybersecurity.

19:01 Active Directory challenges in IT-OT integration.

21:07 Active Directory simplifies system management, poses risks.

28:57 Lean on IT for the correct Active Directory setup.

31:52 Availability is crucial in an OT environment.

34:14 Integrating IT and OT for enhanced cybersecurity collaboration.

36:16 IT and OT integration needs improvement.

40:54 Exploring cybersecurity in ICSOT across various sectors.

About the guest : 

Mike Holcomb is the Fellow of Cybersecurity and the ICS/OT Cybersecurity Global Lead for Fluor, one of the world’s largest engineering, procurement, and construction companies. His current role provides him with the opportunity to work in securing some of the world’s largest ICS/OT environments, from power plants and commuter rail to manufacturing facilities and refineries. He has his Masters degree in ICS/OT cybersecurity from the SANS Technology Institute. Additionally, he maintains cyber security and ICS/OT certifications such as the CISSP, GRID, GICSP, GCIP, GPEN, GCIH, ISA 62443, and more.

He posts regularly on LinkedIn and YouTube to help others learn more about securing ICS/OT and critical infrastructure.

How to contact Mike: 

Website : https://www.mikeholcomb.com/

Youtube :  https://www.youtube.com/@utilsec

LinkedIn: https://www.linkedin.com/in/mikeholcomb/

Connect With Aaron Crow:

Learn more about PrOTect IT All:

Work with Aaron: https://protectitallpod.com/work/

To be a guest or suggest a guest or episode, email [email protected].

Please leave us a review on Apple or Spotify:

Work with Aaron: https://protectitallpod.com/work/

In Episode 33, Aaron Crow explores the transformative impact of automation and AI in the Operational Technology (OT) sector, joined by industry expert Shane Cox from Morgan Franklin Cyber. This episode deepens how AI and automation can enhance security operations when balanced with human oversight and strategic implementation.

Shane Cox shares insights on Morgan Franklin's flexible and expert-driven approach to Managed Detection and Response (MDR) services, emphasizing the importance of tailored client partnerships and continuous collaboration. The discussion highlights the potential of AI to revolutionize security while addressing the unique challenges and risks of integrating automated solutions.

Tune in to learn how the right blend of technology, expertise, and strategy can drive effective security solutions and foster long-term client relationships in today's evolving cybersecurity landscape.

Key Moments: 

05:15 Flexible, evolving security service, partnership-focused approach.

07:06 Diverse tools are essential for all organizations.

12:58 Weekend setup complete; improved over subsequent months.

15:30 MDR/XDR: Cloud-based threat detection and response.

18:21 Flexible MDR service integrates client environments efficiently.

21:38 Integration speeds up threat detection and response.

24:52 Cautious automation best balances efficiency and control.

29:50 AI assists coding by highlighting potential errors.

32:12 People are crucial for effective security automation.

35:51 Superior team preferred over superior product.

39:06 AI integration risks due to untested promises.

41:46 Adapting security training amidst AI automation challenges.

Guest Profile: 

Shane Cox leads the Cyber Fusion Center at MorganFranklin Cyber where he is responsible for the delivery of managed services such as Orion MDR, Advanced Detection and Response (ADR), Threat Hunting, Adversary Simulation, Cyber Threat Intelligence (CTI), and Incident Response and Management. 

Shane has over 25 years of experience in IT and Cyber Security, leading the development and optimization of security programs within enterprise and managed services environments. He has deep experience and success providing customized, business-aligned security outcomes for a diverse range of client environments and industry verticals. 

How to connect with Shane:

https://www.linkedin.com/feed/update/urn:li:activity:7264640034891337730

https://www.sdxcentral.com/articles/stringerai-announcements/morganfranklin-consulting-launches-orion-mdr-service-with-stellar-cyber/2024/11/

Connect With Aaron Crow:

Learn more about PrOTect IT All:

Work with Aaron: https://protectitallpod.com/work/

To be a guest or suggest a guest or episode, email [email protected].

Please leave us a review on Apple or Spotify:

Work with Aaron: https://protectitallpod.com/work/

In this episode, Aaron is joined by Paul Shaver, an experienced OT security consultant from Mandiant, part of Google Cloud. Together, they navigate the nuanced landscape of operational technology (OT) cybersecurity.

The episode begins with Aaron recalling a critical incident at a power plant that underscores the potential pitfalls in OT environments. This sets the stage for a rich discussion on the evolution of OT technology, with Aaron and Paul reminiscing about primary domain controllers and early NT workstations.

The conversation shifts to the future of OT in the cloud, where Paul highlights the benefits of cloud solutions, including enhanced resiliency, security, and data optimization through AI. A compelling customer case study illustrates modern technology adoption with web-based HMIs and Chromeboxes.

Paul offers a detailed analysis of the current OT cybersecurity landscape, addressing the persistent legacy system challenges and the need for a cohesive IT-OT security strategy. He discusses the evolving threat landscape influenced by global geopolitical tensions and the rise of zero-day vulnerabilities.

Listeners will gain practical insights into foundational cybersecurity measures, such as network segmentation, asset inventory management, and robust access control..

Key Moments: 

04:14 Connecting IT and OT optimizes processes securely.

09:54 Lost production severely impacts manufacturing revenue recovery.

14:06 Ensure network notifications; control access, separate credentials.

17:10 Engineers need secure access to adjust parameters.

21:55 Endpoint detection on older systems is critical.

28:47 Resilience is crucial in CrowdStrike incident response effectiveness.

32:11 Limited resources for global incident response efforts.=

39:22 Rebuilt domain controller caused authentication issues.

42:37 Focus on resiliency and cloud opportunities, leveraging multi-cloud.

44:59 Improve grid operations using cloud and hyper-converged technology.

48:38 Local cloud provides redundancy for remote sites.

51:15 Critical for acquisition process and problem-solving.

About the guest : 

Paul Shaver has dedicated more than two decades to various roles in Operational Technology (OT), primarily within the oil and gas industry. His expertise spans OT architecture, design, and build, along with run and maintaining responsibilities as an asset owner. 

Before transitioning into cybersecurity, Paul served as a Technology Director for an oil and gas company in California. Driven by a burgeoning interest in security, he joined Mandiant nearly five years ago. At Mandiant, now part of Google, Paul relishes the mission of enhancing security postures in OT and critical infrastructure, contributing to significant advancements in the field.

How to connect Paul: https://www.linkedin.com/in/pbshaver/

Connect With Aaron Crow:

Learn more about PrOTect IT All:

Work with Aaron: https://protectitallpod.com/work/

To be a guest or suggest a guest or episode, email [email protected].

Please leave us a review on Apple or Spotify:

Work with Aaron: https://protectitallpod.com/work/

In this episode, host Aaron Crow addresses the pressing issue of cybersecurity for small and medium-sized businesses. With their limited budgets and resources, these enterprises are often prime cyberattack targets.

Aaron explains why these businesses are particularly vulnerable, the potentially devastating impacts of a cyber incident, and practical measures they can adopt to strengthen their cybersecurity without incurring significant costs.

Listeners will uncover insights on establishing basic cybersecurity policies, the critical importance of monitoring, and strategies for preparing for potential breaches. 

This episode is filled with valuable tips that could ensure the survival and success of your business amid today's escalating cyber threats.

Key Moments; 

00:00 Cybersecurity challenges and solutions for small businesses.

03:24 Startups are vulnerable due to inadequate cybersecurity measures.

06:30 Use secure passwords, educate employees, and use tools.

11:26 Segregate networks to protect sensitive data.

14:46 Effective monitoring requires time, effort, and setup.

16:10 DNS filtering blocks malicious sites, prevents attacks.

20:29 Plan proactively to manage events before crises.

Connect With Aaron Crow:

Learn more about PrOTect IT All:

Work with Aaron: https://protectitallpod.com/work/

To be a guest or suggest a guest or episode, email [email protected].

Please leave us a review on Apple or Spotify:

Work with Aaron: https://protectitallpod.com/work/

In this episode, host Aaron Crow is joined by Clint Bodungen, Director of Cybersecurity Innovation at Morgan Franklin Cyber and founder of Threatgen, alongside Michael Welch, Managing Director at Morgan Franklin Cyber. Together, they delve into the ever-evolving world of cybersecurity in honor of Cybersecurity Awareness Month.

Aaron kicks things off by discussing the importance of iterative processes and tabletop exercises in enhancing decision-making and preparedness. The conversation then shifts to the exciting yet complex role of AI in cybersecurity, particularly in operational technology (OT) and critical infrastructure. The experts emphasize the potential of generative AI for data analysis while underscoring the need for human oversight to avoid biases and misinformation.

Clint introduces an “engineering informed cyber” approach to better integrate OT and IT in managing cybersecurity risks, while Aaron stresses the importance of collaboration between cybersecurity professionals and engineers. The episode also tackles balancing convenience and security, the intricacies of password management, and the critical role of communication and trust.

Listeners will gain valuable insights into AI’s role in enhancing security operations, the consequences of system failures, and the debate between compliance and true security. This episode offers expert opinions, real-world examples, and practical advice for navigating today’s cybersecurity challenges. Join us for a comprehensive discussion on protecting our digital world.

Key Moments: 

04:20 Generative AI aids efficient GRC and cybersecurity management.

08:40 AI lacks context for verifying asset information.

11:38 Generative AI creating and automating malware tools.

15:58 Building data centers using decommissioned power plants.

17:14 Regulation growing in infrastructure for compliance security.

22:09 Compliance is binary; partial compliance isn't sufficient.

24:33 Prioritize "engineering informed cyber" for OT resilience.

28:14 Collaboration between IT and OT is essential.

33:54 Frustration with excessive video game security measures.

34:49 Cybersecurity fails due to over-engineering complexity.

40:49 Make security easy with password managers, authenticators.

42:31 AI improves tabletop exercises for comprehensive insights.

45:31 Generative AI augments human capabilities and creativity.

48:08 Automated injects streamline engagement and business continuity.

53:46 Executives misunderstand risk, leading to false security.

54:29 Strong IT security, but vulnerable weak points.

About the Guests : 

Clint Bodungen: 

Clint Bodungen is a globally recognized cybersecurity professional and thought leader with 30 years of experience (focusing primarily on industrial cybersecurity, red teaming, and risk assessment). He is the author of two best-selling books, "Hacking Exposed: Industrial Control Systems" and “ChatGPT for Cybersecurity Cookbook. Clint is a United States Air Force veteran and has worked for notable cybersecurity firms like Symantec, Booz Allen Hamilton, and Kaspersky Lab, and is currently the founder of ThreatGEN and Director of Cybersecurity Innovation at Morgan Franklin Consulting. Renowned for his creative approach to cybersecurity education and training, he has been at the forefront of integrating gamification and AI applications into cybersecurity training; he created ThreatGEN® Red vs. Blue, the world's first online multiplayer computer designed to teach real-world cybersecurity. His latest innovation is AutoTableTop, which uses the latest generative AI technology to automate, simplify, and revolutionize IR tabletop exercises. As AI technology continues evolving, so does his pursuit of helping revolutionize the cybersecurity industry using gamification generative AI. Connect Clint at - https://www.linkedin.com/in/clintb/

Michael Welch : 

Michael Welch has over twenty-five years of expertise in Governance, Risk Management, Compliance and Cybersecurity.  In his role as Sector Lead, Michael  will focus on the importance of cybersecurity in Utilities and Industrial Manufacturing.  Michael understands that robust cybersecurity measures are not just a regulatory requirement but are pivotal in safeguarding the resilience of organizations, safety of its people, and overall economic stability.  Michael has worked for organizations such as NextEra and Duke Energy as well as engineering firm Burns & McDonnell.  In addition, he was the Global CISO for the food manufacturing firm OSI Industries.Some of the certifications he has obtained through his career are Certified Information System Security Professional (CISSP), Certified Information Security Manager (CISM), Certified Information Security Auditor (CISA), Global Industrial Cyber Security Professional (GICSP), Certified Data Privacy Solutions Engineer (CDPSE) and CMMC - Registered Practitioner Advanced (RPA).  Connect Michael Welch at : https://www.linkedin.com/in/michael-welch-93375a4/

Connect With Aaron Crow:

Learn more about PrOTect IT All:

Work with Aaron: https://protectitallpod.com/work/

To be a guest or suggest a guest or episode, email [email protected].

Please leave us a review on Apple or Spotify:

Work with Aaron: https://protectitallpod.com/work/

In Episode 29, host Aaron Crow is joined by cybersecurity expert Jori VanAntwerp to delve into Power Grid Security and Redundancy.

This episode explores the segmented design of the US power grid, addressing the challenges and necessary upgrades to mitigate cyber vulnerabilities. Jori highlights security monitoring gaps, the impact of hardware updates, and the cost implications of modernizing infrastructure. The discussion also emphasizes the importance of asset inventory and collaborative efforts between IT and OT professionals.

Real-world incidents, such as unexplained power plant reboots, illustrate the critical role of operator awareness and system maintenance. The potential of AI in cybersecurity, alongside the need for a collaborative, learning-focused approach, is also discussed.

Tune in to gain expert insights on balancing modernization, cost, and operational efficiency to ensure the stability and security of our power infrastructure. Join us for a packed episode to learn how to "Protect It All."

Key Moments: 

05:30 Restoring power grids involves complex, staged processes.

11:01 Centralizing data improves efficiency, introduces vulnerabilities.

17:47 Network segmentation essential for security, mitigates risks.

26:12 Cybersecurity tools revealed crucial system issues.

32:15 Understanding systems fully prevents unintended negative impacts.

36:31 Understand OT environment before implementing IT solutions.

41:24 Equip must survive extreme heat, unlike typical data centers.

54:28 Strict access control in nuclear power plant.

57:48 Assess likely risks for protecting plant operations.

01:00:59 Rushed training weakens foundational cybersecurity skills.

About the guest : 

For nearly two decades, Jori has enabled industrial and IT organizations to be successful in reducing risk, increasing compliance, and their overall security efforts. Jori has the ability to quickly evaluate situations and determine innovative solutions and possible pitfalls due to his diverse background in security, technology, partnering and client-facing experience. Approaching situations with intuitive insight and methodology, leveraging his deep understanding of business and technology, ranging from silicon to the cloud. He had the pleasure of working with such great companies as Gravwell, Dragos, CrowdStrike, FireEye, McAfee, and is now Founder and Chief Executive Officer at EmberOT, a cybersecurity startup focused on making security a reality.

How to connect Jori : 

Website : https://emberot.com/

Linkedin : https://www.linkedin.com/in/jvanantwerp/

Connect With Aaron Crow:

Learn more about PrOTect IT All:

Work with Aaron: https://protectitallpod.com/work/

To be a guest or suggest a guest or episode, email [email protected].

Please leave us a review on Apple or Spotify:

Work with Aaron: https://protectitallpod.com/work/

This episode delves into the world of cybersecurity with the esteemed guest, Ken Foster. With over 30 years of experience and a career that began in the Navy, Ken has comprehensive expertise in managing firewalls and antivirus systems and addressing today’s complex cybersecurity challenges.

This episode, hosted by Aaron Crow, explores the evolving cybersecurity industry, emphasizing the crucial roles of mentorship and networking. Ken and Aaron discuss the strategic importance of aligning security with business goals, the impact of leadership training and honest feedback on developing better leaders, and the necessity of balancing technical skills with effective communication.

Ken shares his insights on the dangers of over-relying on AI, the essential need for disaster preparedness and business continuity, and the importance of continuously evaluating business investments to avoid unnecessary expenses. The episode highlights the value of informal networks and mentorship in overcoming industry challenges and fostering personal growth.

Listeners will gain practical strategies and invaluable lessons to navigate the ever-changing cybersecurity landscape while ensuring their personal and professional development.

Key Moments: 

06:59 Translate tech leadership into business risk communication.

11:51 Integrating expertise, technical skills, and communication effectively.

18:13 No disaster recovery plan; business disrupted by flood.

25:36 Building relationships and listening are crucial successes.

31:39 Simplify explanations for effective cross-team communication.

33:53 Realized technical focus limited career growth.

42:12 Networking is crucial for finding senior roles.

44:06 Produced content led to advisory board roles.

50:06 Who supports post-handover? Security can't do it alone.

57:44 Translate work into clear business value requirements.

01:04:11 Ensure clarity and continuity for cybersecurity's future.

About the guest : 

Ken Foster is a cybersecurity leader with over 25 years of experience in risk management, global team development, and IT infrastructure. As Head of Global Architecture at Adient, Ken oversees global teams to align technical initiatives with business goals, driving innovation while managing risks. His career includes key roles at Fleetcor and Fiserv, where he built large-scale cybersecurity programs and led risk governance and cloud security efforts. With a strong focus on client trust and board-level advisory, Ken brings deep expertise in navigating regulatory landscapes and developing risk-based, business-aligned strategies.

Connect Ken Foster : https://www.linkedin.com/in/kennethfoster/

Connect With Aaron Crow:

Learn more about PrOTect IT All:

Work with Aaron: https://protectitallpod.com/work/

To be a guest or suggest a guest or episode, email [email protected].

Please leave us a review on Apple or Spotify:

Work with Aaron: https://protectitallpod.com/work/

In this episode, host Aaron Crow takes a deep dive into the essential aspects of cyber hygiene. 

As part of the Cybersecurity Awareness Month spotlight, Aaron discusses actionable steps to enhance your digital safety, whether at home or work. This episode covers everything from the significance of strong, unique passwords and multifactor authentication to keeping your software updated and recognizing phishing attacks. 

Aaron also provides expert advice on securing home networks and introduces useful tools like password managers and antivirus software. Designed for both cybersecurity novices and seasoned professionals, this episode is a must-listen for anyone looking to improve their cyber hygiene. 

Tune in to arm yourself and your family with the knowledge needed to stay safe in the digital age.

Key Moments: 

06:06 Secure email with strong, unique password, multifactor authentication.

07:10 Multifactor: Password plus physical authentication like YubiKey.

10:42 Always update devices, avoid phishing attacks.

16:14 Use VPNs and password managers for Wi-Fi security.

19:00 Securely share credentials without sending clear text.

20:56 Regularly backup devices to prevent data loss.

25:18 Practice cyber hygiene and educate your family.

Connect With Aaron Crow:

Learn more about PrOTect IT All:

Work with Aaron: https://protectitallpod.com/work/

To be a guest or suggest a guest or episode, email [email protected].

Please leave us a review on Apple or Spotify: