In this episode, host Aaron Crow is joined by Peter Jackson, a seasoned expert from New Zealand with a robust background in industrial automation and cybersecurity. Together, they unravel the intricacies of balancing security with reliable operations and explore the evolving landscape of OT cybersecurity in critical infrastructure. Listen in as they discuss everything from the importance of safe operations and risk management to the nuances of vulnerability management in diverse industrial environments. 

Whether you're an OT professional or an IT practitioner, this episode is packed with insights that cater to both ends of the spectrum, all shared with a passion for protecting the future of our interconnected systems. 

Key Moments: 

05:22 Bridging IT and OT Silos

14:53 Business Risk Beyond Cyber Concerns

17:46 "OT Security Risks in Business"

25:46 Simplifying Complex OT Management

30:10 Cybersecurity Misunderstandings in Safety Systems

36:58 Prioritizing Systems and Security Integration

39:51 Improving Business Trust Tolerance Journey

44:42 Hesitancy and Future of OT Cloud

52:07 Operational Resilience and Risk Reduction

55:26 "Assessing System Security Strategies"

58:59 Network Security Maturity Strategies

01:05:00 "Improving IT Resilience and Preparedness"

01:13:43 "Towards Improved System Security Awareness"

01:15:03 Continuous Security Improvement Basics

01:20:00 Safety First: A Unique Culture

About the guest : 

Peter Jackson is a seasoned OT/ICS cybersecurity expert with deep roots in ICS programming, SIS engineering, and alarm management. He’s built high-performing OT security teams, led global projects across NZ, ANZ, APAC, and supported major acquisitions with his cyber expertise.

A certified SANS ICS515 instructor and global speaker, Peter also leads the NZ ICS Cyber Technical Network, driving collaboration and innovation in industrial cybersecurity.

Feel free to follow Peter on LinkedIn: https://www.linkedin.com/in/peterjnz/
If you’re interested in the NZ ICS/OT cyber community: https://icscyber.org.nz

If you’re interested in the work that he does with the SGS team: https://www.sgs.com/en/services/operational-technology-cyber-safety  or email [email protected]

Connect With Aaron Crow:

Learn more about PrOTect IT All:

To be a guest or suggest a guest/episode, please email us at [email protected]

Please leave us a review on Apple/Spotify Podcasts:

Apple   - https://podcasts.apple.com/us/podcast/protect-it-all/id1727211124

Spotify - https://open.spotify.com/show/1Vvi0euj3rE8xObK0yvYi4

In this episode, Aaron is joined by Jori VanAntwerp live from the s4 conference. Together, they unpack the intricacies of networking at industry events, the challenges and opportunities in OT cybersecurity, and the evolving technologies and strategies that are reshaping the field. 

From the significance of understanding asset owner needs to the promising future of AI and blockchain in cybersecurity, Aaron and Jori cover it all. Whether you're a seasoned professional or new to the field, this episode is packed with insights that will keep you informed and ahead in the ever-evolving cybersecurity landscape. 

So, tune in and get ready to explore the essential strategies for protecting it all.

Key moments: 

04:38 Asset Owner's Conference Dilemma

08:14 "Business at Speed of Trust"

10:45 Career Transition Acceptance

16:09 Limited Solution Compatibility Issues

18:41 Exploring Blockchain for Data Integration

20:47 Adapting to Imperfection with Technology

25:12 Dynamic Detection in Modern Substations

28:28 Rethinking Staffing for Power Utilities

31:45 Retiree Saves Power Plant Upgrade

35:37 Ford F-150 Taillights Theft Spike

39:08 Modular Redundancy in OT Security

42:20 "Advocating for Chipset Optimization"

45:32 "Call for Advanced PLC Monitoring Chip"

48:12 Complicated Security Measures Challenge Efficiency

49:28 Balancing Security and Operational Needs

52:57 IT Policy Disrupts Control Room Ops

56:43 Bridging OT and IT Teams

About the guest : 

For nearly two decades, Jori has enabled industrial and IT organizations to be successful in reducing risk, increasing compliance, and their overall security efforts. Jori has the ability to quickly evaluate situations and determine innovative solutions and possible pitfalls due to his diverse background in security, technology, partnering and client-facing experience. Approaching situations with intuitive insight and methodology, leveraging his deep understanding of business and technology, ranging from silicon to the cloud. He had the pleasure of working with such great companies as Gravwell, Dragos, CrowdStrike, FireEye, McAfee, and is now Founder and Chief Executive Officer at EmberOT, a cybersecurity startup focused on making security a reality.

How to connect Jori : 

Website : https://emberot.com/

Linkedin : https://www.linkedin.com/in/jvanantwerp/

Connect With Aaron Crow:

Learn more about PrOTect IT All:

To be a guest or suggest a guest/episode, please email us at [email protected]

In this episode, host Aaron Crow tackles the ongoing debate of IT versus OT attacks, using the example of the Colonial Pipeline incident and others to illustrate his point. Aaron argues that focusing on whether an attack is an IT or OT issue misses the bigger picture - the real impact on operations. 

Through engaging stories and industry insights, Aaron emphasizes that asset owners ultimately care about operational continuity, revenue, safety, and risk management, rather than rigid definitions. 

Join us as we explore why understanding the broader business risks is crucial and how organizations can better protect themselves in this evolving landscape.

Key Moments; 

04:48 Key Role of OSI PI in Utilities

09:05 New Domain Issue: Same Name, No Access

11:26 IT vs. OT Asset Management Dilemma

15:28 OT Cybersecurity: Beyond Securing PLCs

18:47 Blurring Lines Between IT and OT

19:36 Business Risk and Cyber Protection

Connect With Aaron Crow:

Learn more about PrOTect IT All:

To be a guest or suggest a guest/episode, please email us at [email protected]

In this episode, host Aaron Crow is joined by Sulaiman Alhasawi, a cybersecurity expert based in Kuwait. Sulaiman shares his journey into OT security, beginning with his PhD research in Liverpool and leading to his creation of ICSrank.com, a search engine for OT devices. 

The discussion gets into individuals' unique cybersecurity paths, emphasizing the importance of learning from diverse experiences. They explore the challenges asset owners face in understanding vulnerabilities, the role of AI in cybersecurity, and the international perspective on OT security. 

Throughout the episode, Aaron and Sulaiman highlight the significance of community, knowledge sharing, and taking actionable steps to improve cybersecurity posture in critical infrastructure. Whether you’re an industry veteran or a newcomer, this episode is packed with insights and practical advice to help you protect it all.

Key Moments: 

01:10 Sharing Diverse Experiences

05:44 Simplifying Asset Management Challenges

08:15 Action Transforms Ideas to Value

11:44 Unexpected Targets in Cyber Attacks

13:20 "Obscurity Isn't Security"

16:50 Simplifying Cybersecurity Communication

21:12 Unintended Internet Exposure Risks

24:49 Podcasting for Community Impact

28:53 OT's Vital Role in Hospitals

32:26 Diverse Experiences in Power Plants

35:54 OT Data Integration Priorities

36:55 Prioritizing Safety Over Immediate Updates

42:10 Global Business Resource Allocation Challenges

46:08 Finding Our Podcast & Resources

47:25 Global Unity in Shared Struggles

About The Guest : 

Sulaiman Alhasawi is an active researcher  in ICS/OT cybersecurity, with a PhD specializing in securing critical infrastructure. He is the founder of ICSrank.com, a platform dedicated to discovering and assessing security risks in Industrial Control Systems (ICS), Operational Technology (OT), and Industrial IoT.

As the host of the ICS Arabia Podcast, Sulaiman brings together global experts to discuss cutting-edge topics in OT security, bridging the gap between research, industry, and real-world cyber threats.

His latest research, "How to Find Water Systems on the Internet", was featured in SecurityWeek magazine, shedding light on OSINT techniques used to uncover vulnerable water infrastructure. (Read it here: https://zerontek.com/zt/2024/09/30/how-to-find-water-systems-on-the-internet-a-guide-to-ics-ot-osint/)

Follow Sulaiman for insights on ICS/OT security, threat intelligence, and ethical hacking:

Connect With Aaron Crow:

Learn more about PrOTect IT All:

To be a guest or suggest a guest/episode, please email us at [email protected]

Please leave us a review on Apple/Spotify Podcasts:

Apple   - https://podcasts.apple.com/us/podcast/protect-it-all/id1727211124

Spotify - https://open.spotify.com/show/1Vvi0euj3rE8xObK0yvYi4

In this episode of Protect It All, host Aaron Crow gets into pressing cybersecurity issues currently making headlines. Listeners are invited to explore the complex challenges governments face to ensure accountability without compromising security. 

Aaron examines the implications of global policies that could force tech companies to undermine encryption. Steering clear of political discourse, he focuses on real cybersecurity risks, from untracked government spending to potential backdoors in personal devices and broader national security concerns. 

Aaron provides critical insights into how these issues impact businesses, private citizens, and infrastructure, raising questions about privacy and data protection in today's digital age. 

Whether you're a cybersecurity expert, a business leader, or someone who values privacy, this episode offers valuable perspectives and strategies to navigate the intricate IT and OT cybersecurity landscape. Join Aaron as he tackles these pressing topics and discusses how to maintain transparency and security for everyone.

Key Moments

00:00 Demanding Oversight for Sensitive Expenditures

05:42 Fragmented Infrastructure and Cybersecurity Challenges

09:19 Suing for Backdoors in Secure Communication

11:35 Phone Security and Privacy Concerns

13:40 Cybersecurity Risks of Government Backdoors

16:54 Encryption Backdoors: Security vs. Privacy?

Connect With Aaron Crow:

Learn more about PrOTect IT All:

To be a guest or suggest a guest/episode, please email us at [email protected]

Please leave us a review on Apple/Spotify Podcasts:

Apple   - https://podcasts.apple.com/us/podcast/protect-it-all/id1727211124

Spotify - https://open.spotify.com/show/1Vvi0euj3rE8xObK0yvYi4

In this episode, host Aaron Crowe speaks to Dan Ricci, founder of the ICS Advisory Project, to delve into OT cybersecurity. Dan brings a wealth of experience from his time in the Navy, transitioning through various cybersecurity roles, and finally taking the leap to establish a platform that addresses the complex needs of critical infrastructure sectors. 

In this conversation, they explore the genesis of the ICS Advisory Project, a tool designed to streamline vulnerability management for small to medium-sized organizations. Aaron and Dan also discuss the challenges of transitioning from military service to civilian cybersecurity roles, emphasizing the importance of mentorship, risk-taking, and continual self-improvement. 

This episode offers valuable insights for anyone in the cybersecurity community and those looking to bridge the gap between IT and OT spheres. Join us as we explore strategies to enhance resilience and share lessons from the field.

Key Moments: 

09:17 Building Dashboards with Google Studio

14:41 Cybersecurity: Secondary Concern for Operators

20:48 Supporting Small Supply Chain Contributors

23:23  OT Cybersecurity Impact and Mentorship

27:48 Bridging Cybersecurity and Critical Sectors

34:16 Opportunities to Share Project Insights

38:24 Adapting Skills for Career Growth

45:58 Cyber Career Evolution and Growth

56:14 Leadership vs. Management Distinction

01:00:56 Relentless Daily Self-Improvement

About the guest : 

With over 28 years of Cybersecurity experience, Dan is the Senior Cybersecurity Consultant at

Ampyx Cyber, leading engagements with Rural Cooperatives and Utilities to improve their

Cybersecurity programs and protect critical infrastructure. In 2023, he founded Industrial Data Works to provide independent consulting and vulnerability intelligence API subscription services.

He is also the founder of the ICS Advisory Project, an open-source initiative to help small and medium-sized ICS asset owners across the 16 critical infrastructure sectors prioritize vulnerabilities and plan mitigation for their ICS/OT environments. He aims to provide free and accessible resources to secure critical infrastructure and protect the public.

Link to Industrial Data Works:

https://www.industrialdataworks.com/ics-advisory-project-api

Links to ICS Advisory Project:

https://www.icsadvisoryproject.com/

ICS Advisory Project Github Repository:

https://github.com/icsadvprj/ICS-Advisory-Project

Receive ICS Advisory Project Weekly Summary Slides and Other CERT & Vendor Advisory Summaries in your email every Monday:

https://docs.google.com/forms/d/e/1FAIpQLSfC490BHoCR4gHekZcMLBgbHMhUQZr7ZVYZG1OkaWdKGwH73g/viewform

Connect With Aaron Crow:

Learn more about PrOTect IT All:

To be a guest or suggest a guest/episode, please email us at [email protected]

Please leave us a review on Apple/Spotify Podcasts:

Apple   - https://podcasts.apple.com/us/podcast/protect-it-all/id1727211124

Spotify - https://open.spotify.com/show/1Vvi0euj3rE8xObK0yvYi4

In this episode, host Aaron Crow welcomes Chris Robertson, CISO at Apogee Defense, to discuss the evolving landscape of cybersecurity, focusing on the distinction and strategy behind Virtual CISO (vCSO) roles. 

Chris shares insights from his dual roles at Apogee Defense and as a virtual chief security officer for various companies. The conversation dives into the intricacies and responsibilities of vCSOs, the importance of understanding IT and OT risks, and the necessity of integrating cybersecurity deeply into business practices. 

Chris and Aaron explore practical solutions for businesses, emphasizing adaptability and continuous improvement in security measures, drawing parallels between accounting a century ago and cybersecurity today. 

They also touch on future trends, the impact of AI on security, and the importance of setting aside egos to foster a culture of learning and collaboration. 

Join them as they navigate the challenges and opportunities at the intersection of IT and OT cybersecurity, offering actionable advice and anecdotes from their extensive experience in the field.

Key Moments: 

00:00 Outsourcing Risk Management Expertise

08:22 Hiring External Experts: Cost-Effective Strategy

12:04 Understanding OT Risks in Cyber Leadership

20:36 MBA Curriculum Needs Security Focus

23:31 Integrating Security in Legacy Systems

27:47 Tech Efficiency and Shadow IT Challenges

35:56 Optimizing Inefficient Appointment Systems

39:08 Bridging Tech and Business Worlds

45:43 Simplifying Risk Communication

51:52 Joe Rogan's Impact and Risks

57:09 AI Evolution: Professionals Riding the Wave

01:05:53 "Embrace Vulnerability, Seek Help"

About the guest : 

Chris Robertson is a seasoned cybersecurity expert, currently serving as the Chief Information Security Officer (CISO) at Apogee Defense. In addition to this role, Chris extends his expertise as a virtual CISO for various companies across multiple sectors. He specializes in implementing robust security solutions that Apogee Defense delivers to its clients, predominantly within the Small and Medium Business (SMB) space. 

With a keen focus on the defense industrial base, Chris's work also spans various other industries, enabling businesses to strengthen their cybersecurity frameworks. He is highly regarded in the industry for facilitating vital connections and contributing to advancing cybersecurity practices.

How to connect Chris: https://www.linkedin.com/in/christophersrobertson/

Connect With Aaron Crow:

Learn more about PrOTect IT All:

To be a guest or suggest a guest/episode, please email us at [email protected]

Please leave us a review on Apple/Spotify Podcasts:

Apple   - https://podcasts.apple.com/us/podcast/protect-it-all/id1727211124

Spotify - https://open.spotify.com/show/1Vvi0euj3rE8xObK0yvYi4

In this episode, host Aaron Crow engages in a riveting conversation with Anusha Iyer, the CEO and founder of Corsha, a Washington, D.C.-based cybersecurity company. With over 25 years of experience in the cybersecurity space and a newfound interest in operational technology (OT), Anusha shares insights into her company's innovative approach to identity and access management for machines.

The discussion covers key topics such as the convergence of IT and OT, the essential need to understand machine-to-machine communication, and the revolutionary potential of machine identity and multi-factor authentication (MFA) in securing industrial environments. Aaron and Anusha explore practical strategies for bridging IT and OT gaps and highlight real-world examples of implementing zero-trust principles.

This episode is a treasure trove of knowledge for cybersecurity professionals, OT engineers, and tech enthusiasts alike. It emphasizes how modern security measures can transform and protect critical infrastructure. Tune in to gain valuable insights into the future of OT cybersecurity and the importance of embracing comprehensive security measures.

Key Moments: 

06:16 Machine Identity in OT Environments

08:40 Machine MFA for Secure Access

10:23 Understanding Secure Endpoint Communication

14:07 Cybersecurity vs. Safety Concerns

17:37 Achieving Zero Trust in Network Security

20:50 Overcoming Cloud Security Fears

26:10 Tech Implementation and Management Challenges

31:54 Complex Architecture: Costly and Complex

36:05 Understanding System Data Flow Benefits

40:36 Technology Deployment Before Cybersecurity Era

47:50 Simplifying Machine Implementation Benefits

51:19 Manual System Updates Challenges

51:58 Balancing IT and OT Efficiency

About the guest : 

Anusha Iyer is the Founder and CEO of Corsha - a leader in identity and access management for operational systems and critical infrastructure. With over 20 years in cybersecurity, Anusha is passionate about demystifying cyber and security, making it accessible, easy to adopt, and self-assuring.

Reach out to Anusha at [email protected] if you want to talk OT and Cyber and how to use machine identity in your industrial networks to unlock secure automation.

Find out more about Corsha and request a demo here: https://corsha.com/request-a-demo

Connect With Aaron Crow:

Learn more about PrOTect IT All:

To be a guest or suggest a guest/episode, please email us at [email protected]

Please leave us a review on Apple/Spotify Podcasts:

Apple   - https://podcasts.apple.com/us/podcast/protect-it-all/id1727211124

Spotify - https://open.spotify.com/show/1Vvi0euj3rE8xObK0yvYi4

In this episode, host Aaron is joined by cybersecurity expert Adam Robbie, the head of OT threat research at Palo Alto Networks. The discussion begins with Aaron sharing his extensive experience deploying Palo Alto firewalls in operational technology (OT) environments, highlighting the key troubleshooting and application-aware capabilities these firewalls offer.

Adam delves into his role at Palo Alto Networks, focusing on the critical task of identifying and mitigating threats in the OT landscape. He discusses the unique challenges of securing OT environments, including the convergence of various technologies and the necessity for proactive defense strategies.

The conversation covers important topics such as the importance of team collaboration across IT and OT, the complexities of deploying firewalls in OT situations, and the ever-evolving threats facing the industry. 

Tune in for a comprehensive exploration of the intersection of cybersecurity and OT, and gain valuable insights from experts on the front lines of protecting critical infrastructure.

Key Moments: 

00:00 Evolving Threat Analysis Focus

08:38 IT vs OT Firewall Responses

12:17 PLC Configuration and Remote Access Challenges

18:43 "Career Progress Through Strategic Moves"

23:05 Evolving OT Firewall Technologies

31:08 Malware Analysis and Threat Detection

35:34 Strategic Cybersecurity Using Game Theory

40:39 Hidden Vulnerabilities in OT Environments

44:44 Geographical Data Challenges in Analysis

49:24 OT Cybersecurity Segmentation Challenges

54:41 OT Systems: Challenges in Updates

01:00:02 Augmented Reality for Remote Problem-Solving

About the guest : 

Adam is the Head of OT Threat Research at Palo Alto Networks since 2022, with over 15 years of OT and IT experience. He's a publisher with SANS, IEEE, and other conferences, focusing on securing critical infrastructure, finding vulnerabilities, and developing best practices. He holds a Bachelor's and Master's in Electrical Engineering and advanced certifications like GICSP and GRID. Adam also teaches cybersecurity bootcamps at top universities and advises on curriculum development. Previously, as a Senior Cyber Security Consultant at Deloitte, he specialized in ICS/IoT penetration testing, threat hunting, and vulnerability research.

Contact Adam at: https://www.linkedin.com/in/adamrobbie/

Connect With Aaron Crow:

Learn more about PrOTect IT All:

To be a guest or suggest a guest/episode, please email us at [email protected]

Please leave us a review on Apple/Spotify Podcasts:

Apple   - https://podcasts.apple.com/us/podcast/protect-it-all/id1727211124

Spotify - https://open.spotify.com/show/1Vvi0euj3rE8xObK0yvYi4

In this episode, host Aaron Crow converses with Lesley Carhart, Technical Director at Dragos, who brings over 15 years of experience in incident response and forensics within critical infrastructure sectors.

The episode dives deep into the standard practices in industrial settings, such as operators shutting down power plants for safety and the lack of forensic investigation into equipment failures. Lesley emphasizes the importance of integrating cybersecurity into these environments, pointing out that many failures are due to maintenance or human error, though a notable portion does involve cyber threats.

Listeners will learn about the challenges and necessary collaborations between operational technology (OT) and information technology (IT) teams. The discussion addresses cultural and trust barriers that hinder effective cybersecurity measures and advises on how organizations can improve their defenses regardless of size and resources.

Lesley also highlights the evolving landscape of cyber threats, including the increasing sophistication of adversaries and the vulnerabilities caused by standardizations in industrial systems. Real-world examples underscore the complexity of securing these environments, emphasizing the need for proactive and informed cybersecurity practices, such as "cyber-informed engineering."

Tune in to better understand the critical intersections of cybersecurity and industrial operations, and learn practical strategies to safeguard essential services.

Key Moments: 

05:00 IT-OT miscommunication leads to cybersecurity risks.

09:23 IT processes are too slow; bypassing is required for solutions.

11:36 Leaving an outdated system may pose less risk.

15:09 Slow changes in OT due to unforeseen impacts.

19:17 Include cybersecurity in root cause analysis discussions.

20:31 Nation-states analyze and bypass industrial control systems.

25:40 Cybersecurity is essential to combat potential system threats.

29:27 Communication, champions, and leadership crucial for cybersecurity.

31:37 Cybersecurity struggle due to resources community helps.

35:03 OT vs. IT language differences affect incident classification.

38:08 Empowered safety culture prevents accidents and retribution.

40:22 Few people have diverse cybersecurity skills and experience.

45:05 Experience across all 17 critical infrastructure verticals.

48:29 Evading detection in the nuclear enrichment process.

51:25 Identify industrial devices, build security program.

About the guest : 

Lesley Carhart is a renowned cybersecurity expert specializing in industrial control systems (ICS) security. With a keen understanding of the convergence between traditional IT and operational technology (OT), Lesley has been at the forefront of safeguarding critical infrastructures. Her work emphasizes the vulnerabilities of human-machine interfaces (HMIs) and programming devices, which are increasingly resembling typical computers and thus becoming prime targets for malware and ransomware attacks. Lesley's insights highlight the significant risks posed by these hybrid systems, underscoring the importance of robust cybersecurity measures in protecting essential processes. Lesley is honored to be retired from the United States Air Force Reserves, and to have received recognition such as “DEF CON Hacker of the Year”, “SANS Difference Maker”, and “Power Player” from SC Magazine.

How to connect Lesley: 

Instagram : https://www.instagram.com/hacks4pancakes/

Blog: https://tisiphone.ne

Mastodon : https://infosec.exchange/@hacks4pancakes

Linkedin : https://www.linkedin.com/in/lcarhart/

Connect With Aaron Crow:

Learn more about PrOTect IT All:

To be a guest or suggest a guest/episode, please email us at [email protected]

Please leave us a review on Apple/Spotify Podcasts:

Apple   - https://podcasts.apple.com/us/podcast/protect-it-all/id1727211124

Spotify - https://open.spotify.com/show/1Vvi0euj3rE8xObK0yvYi4