PrOTect It All

Work with Aaron: https://protectitallpod.com/work/

In this episode, host Aaron Crow sits down with cybersecurity professional Blake Hoge for an unscripted deep dive into the world of IT, OT, and everything in between. In this engaging conversation, Aaron and Blake share their personal journeys through the cybersecurity landscape—from consulting roots and data center audits, to navigating third-party risk, compliance programs, and even some unforgettable experiences in global call centers and power plants.

This episode goes beyond the technicalities, exploring the importance of hands-on assessments, the unexpected vulnerabilities that linger in even the most sophisticated environments, and why fresh eyes are crucial for spotting hidden risks. 

Aaron and Blake also open up about their favorite use cases for AI—both on and off the job, and how these evolving tools are reshaping everything from incident response planning to everyday productivity.

But it’s not all about cyber threats and compliance checklists. The conversation takes a thoughtful turn as the two discuss the vital role of mental health, physical wellness, and community in sustaining long careers in high-pressure fields. From rucking at dawn and cycling in Moab to decompressing at cyber shootouts and embracing new technologies, Aaron and Blake remind us that protecting it all starts with taking care of ourselves and each other.

Join us for a lively, candid episode packed with actionable insights, relatable stories, and a reminder that cybersecurity is, above all, a people business.

Key Moments: 

09:47 Power Plant Fire Recovery Chaos

13:36 Infrastructure Maintenance & Security Compliance

16:10 Access Control Testing Concerns

23:22 "Design Process: Theory vs. Reality"

31:22 Dynamic Incident Response Planning

33:07 Commitment to Security and Transparency

39:21 Customized Consultancy for Unique Needs

47:05 "Understanding Contract Essentials"

50:42 In-House AI to Safeguard Data

57:47 AI Simplifies Search and Booking

59:13 Mental Wellness Strategies in Tech

01:03:52 Fitness and Energy Through Activity

01:10:44 "Business is a People Endeavor"

About the guest : 

Blake Hoge leads third-party security at Airbnb, strengthening partnerships, and founded AmplifyGRC to support small businesses in building security and trust. At Instacart, he developed and scaled security and trust programs and compliance programs. At Salesforce, he managed security for global data and call centers. With over a decade in governance, risk, and compliance, Blake holds CISA, CDPSE, and PMP certifications, reflecting his expertise. Blake lives in the greater Austin, Texas area, and enjoys connecting with other professionals locally.

How to connect Blake: 

Linkedin page: https://www.linkedin.com/in/blakehoge/

Company website: https://www.amplifygrc.com/

Connect With Aaron Crow:

Learn more about PrOTect IT All:

Work with Aaron: https://protectitallpod.com/work/

To be a guest or suggest a guest or episode, email [email protected].

Please leave us a review on Apple or Spotify:

Work with Aaron: https://protectitallpod.com/work/

In this episode,  host Aaron Crow dives deep into the buzzing world of AI in cybersecurity, joined by special guest Amy Tom, Community Manager at D3 Security. With everyone chatting about AI these days, Aaron and Amy cut through the noise to explore how artificial intelligence is shaking up Security Operations Centers (SOCs)—from automating manual processes to transforming traditional analyst roles. 

Amy shares her unconventional journey into cybersecurity, demystifies what it means to be a "nerd translator," and unpacks how AI-driven platforms like D3’s Morpheus are changing the game for SOC teams.

Whether you’re a student considering a path in cybersecurity, a seasoned pro, or just curious about the future of AI in this field, you’ll hear practical advice, real-world examples, and insight into both the promise and challenges of adopting AI in high-stakes security environments. 

Plus, they touch on hot topics like AI fatigue, the evolving role of junior analysts, and the importance of business and communication skills in tech. Tune in for a candid, informative conversation to get you up to speed on one of cybersecurity’s most exciting frontiers!

Key Moments: 

04:27 "Nerd Translator: Bridging Tech Gaps"

08:29 "Questioning Data Metrics and Value"

10:57 AI Streamlining Security Automation

15:14 "AI and Low-Code Automation Evolution"

17:27 API Management Complexity

22:12 Migrating from Legacy SOAR Platforms

26:55 Streamlining Phishing Response with SOAR

36:05 AI-Driven Incident Remediation

39:49 AI Summaries vs. Human Summaries

41:19 Effective Communication for All Audiences

46:24 AI Transforming SOC Analyst Roles

48:33 Versatile Skills Boost Career Success

51:58 "Explore and Experiment Creatively"

About the guest : 

Amy Tom’s journey into cybersecurity is anything but conventional. With no background in IT or security, she started out answering phones, unsure of how to respond to technical questions and heavily relying on engineers for answers. Through curiosity and persistence, Amy asked questions, learned on the job, and gradually built a deep understanding of the cybersecurity landscape. Today, she works on the business side, supporting engineers and helping solve real problems by bridging the gap between business needs and technical solutions. Her path is a testament to learning by doing and growing into expertise through determination and collaboration.

How to connect Amy : 

LinkedIn: https://www.linkedin.com/in/amymtom/

D3 security podcast:  https://d3security.com/lets-soc-about-it-podcast/=

Connect With Aaron Crow:

Learn more about PrOTect IT All:

Work with Aaron: https://protectitallpod.com/work/

To be a guest or suggest a guest or episode, email [email protected].

Please leave us a review on Apple or Spotify:

Work with Aaron: https://protectitallpod.com/work/

In this episode of Protect It All, host Aaron Crow sits down with Steve Kiss, founder and CEO of IPMeter, for an eye-opening discussion on the future of OT (Operational Technology) and IT cybersecurity. With over 25 years of hands-on experience, Steve shares his journey from network engineering to designing practical cybersecurity tools for real-world OT environments.

They dive into the unique challenges faced by operators in sectors like wastewater treatment, building management, and power utilities—where frontline professionals often shoulder critical cybersecurity responsibilities without formal training or extensive resources. Steve and Aaron emphasize the urgent need for simple, scalable, and reliable tools that empower these “full stack” operators to secure critical infrastructure effectively.

From bridging the IT-OT divide to managing legacy system risks and improving procurement practices, this conversation offers actionable insights for municipalities, utilities, and smaller organizations aiming to take greater ownership of their cyber defenses. Packed with real-world examples, strategic advice, and a touch of industry humor, this episode is essential listening for anyone focused on protecting essential services and strengthening community resilience.

Key Moments: 

10:40 Understanding Factory Acceptance Test (FAT)

16:41 Transitioning to Local Water Management

19:52 Compliance and Cybersecurity Standards

25:03 "Digital Spins on Security Concepts"

32:30 Standardizing Power Systems Configurations

35:00 Basic Security Steps for Operators

40:28 Balancing IoT Features and Control

45:01 Durability and Setup for Rail Tech

48:58 "Basic Network Foundations Needed"

54:35 Wastewater's Overlooked Importance

About the guest: 

Steve Kiss is a seasoned cybersecurity leader with over two decades of experience in engineering, infrastructure security, and strategic leadership. As the inventor of IPMeter™ and a contributor to the NIST 800-53 SP2 standards, he has played a pivotal role in advancing vulnerability management practices. Throughout his career, Steve has been deeply involved in the design, construction, and security of critical infrastructure across sectors such as aviation, defense, data centers, and utilities. 

His expertise uniquely bridges the worlds of operational technology (OT) and information technology (IT), addressing the evolving challenges of modern network environments. In addition to founding multiple companies focused on infrastructure security, Steve regularly shares his insights at industry events, including the IMRON Security & Safety Summit at SoFi Stadium. 

He also publishes a weekly newsletter, HOTw (Hack of the Week), spotlighting trends and incidents in OT cybersecurity. Through his latest venture, IPMeter, Steve continues to drive innovation in cybersecurity testing and resilience.

How to connect Steve : 

Website for IPMeter

www.ipmeter.net

LinkedIn

https://www.linkedin.com/in/stevekiss/

Blog (once to twice a month- includes HOTw (IoT hack of the week)

https://www.ipmeter.net/blog

Contact for IPMeter demos

[email protected]

Connect With Aaron Crow:

Learn more about PrOTect IT All:

Work with Aaron: https://protectitallpod.com/work/

To be a guest or suggest a guest or episode, email [email protected].

Please leave us a review on Apple or Spotify:

Work with Aaron: https://protectitallpod.com/work/

Episode 53 gets into the intricate world of IT and OT cybersecurity with host Aaron Crow and guest Joshua Kuntz, the Chief Information Security Officer for a state agency in Texas. With a comprehensive background spanning two decades and involvement with seven state agencies, Joshua shares his journey from the Marine Corps to leading security programs in the public sector. 

The episode covers a range of topics, including the transition from military to government cybersecurity roles, the intricacies of budget allocation, and the significance of mastering both technical and business soft skills in cybersecurity leadership. 

Joshua provides insights into navigating legislative changes, adapting to rapid technological advances, and the essential task of balancing cybersecurity risks with operational priorities. 

Listeners are treated to an engaging conversation that offers practical strategies and real-world experiences aimed at protecting critical assets in today’s dynamic cyber landscape.

Key Moments: 

05:46 Ownership Alters Risk Perception

09:39 Technical Leaders Developed Through Soft Skills

11:52 "Value of MBA Over Technical Expertise"

14:29 Navigating Ambiguity in Future Planning

19:46 "Questioning Budget Cuts Amid Surplus"

21:05 Efficient Resource Sharing in Texas

25:31 Remote Work Cybersecurity Challenges

27:36 VPN Secure Access for Remote Work

33:21 Prioritizing Critical Executive Decisions

34:45 Understanding Cyber Risk Impact

38:16 CISO Role: Beyond "Yes Men"

41:05 "Exploring IT and OT Cybersecurity"

About the guest : 

Joshua Kuntz is a dedicated professional who successfully transitioned from a military career as an electronics technician to a role with the Texas Department of Public Safety. Embracing the paramilitary structure of the department, Joshua leveraged his military experience to adapt to the law enforcement environment, focusing on protecting citizens. 

While he found comfort in the familiar rank structure and chain of command, Joshua faced challenges in adjusting to personnel management outside the military realm. Despite the loss of certain disciplinary tools common in the military, Joshua continues to evolve as a leader, emphasizing adaptability and commitment to public service.

How to connect Joshua  - https://www.linkedin.com/in/joshua-kuntz-cissp-35a825176/

Connect With Aaron Crow:

Learn more about PrOTect IT All:

Work with Aaron: https://protectitallpod.com/work/

To be a guest or suggest a guest or episode, email [email protected].

Please leave us a review on Apple or Spotify:

Work with Aaron: https://protectitallpod.com/work/

In this episode, host Aaron Crow celebrates the first anniversary of this insightful podcast. Over the past year, Aaron has delved deep into the world of cybersecurity, bringing listeners compelling stories and expert insights from across the globe, including guests from the United States, Iraq, South Africa, and New Zealand.

In this milestone episode, Aaron reflects on the journey so far, recounting pivotal moments and important lessons learned. The podcast has covered a wide range of topics, from AI and cloud technology to IT/OT convergence, always aiming to provide real value and foster a community of learners and protectors.

Listeners can expect a continuation of this engaging content, with plans for more panel discussions, live events, and an ongoing focus on building trusted relationships in the cybersecurity field. 

As Aaron emphasizes, the podcast isn't just about defending digital assets; it's about empowering individuals, fostering dialogue, and driving innovation in the industry. 

Join Aaron in celebrating this landmark and look forward to the exciting path ahead.

Key Moments: 

06:21 Building Trust in Cybersecurity Careers

08:36 Candid Cybersecurity Conversations

13:16 Unified IT and OT Collaboration

16:03 "Embrace Salesmanship and Global Insights"

19:22 "Podcast Topic Suggestions Welcome"

Connect With Aaron Crow:

Learn more about PrOTect IT All:

Work with Aaron: https://protectitallpod.com/work/

To be a guest or suggest a guest or episode, email [email protected].

Please leave us a review on Apple or Spotify:

Work with Aaron: https://protectitallpod.com/work/

In this episode, host Aaron Crow dives deep into the world of OT cybersecurity alongside guest Oakley Cox, the director of product for Darktrace OT. They explore the unique journey of how Oakley transitioned from a chemistry background to cybersecurity, highlighting the role of AI and machine learning in evolving OT environments. 

With a focus on strategies for tackling cybersecurity challenges in critical infrastructure, the conversation covers the innovative ways AI is being used to enhance security measures and prepare for future threats. 

Tune in for insights on how Darktrace is redefining security through AI, and the importance of adapting and innovating in the ever-evolving landscape of OT and IT cybersecurity convergence.

Key Moments: 

05:49 Bridging IT and OT Skills

11:00 AI's Practical Use and Future Prospects

13:28 Rethinking Tabletop Exercises

16:39 Self-Learning AI for Network Security

21:37 "Security Vendor: Adapting to Cloud Risks"

26:22 OT Environment Change Awareness

35:28 Embracing Ambiguity in Data Analysis

38:52 AI-Assisted Unusual Activity Blocking

41:51 Enhancing Security with Smarter Tools

44:50 Power Utility Data Management Constraints

About the guest : 

Oakley Cox embarked on an academic journey in chemistry, completing an undergraduate degree which led to a PhD position. During their doctoral studies, Oakley discovered a passion not for the hands-on lab work typically associated with chemistry, but rather for the emerging field of machine learning and big data. Their PhD research focused on integrating these computational tools to streamline laboratory processes, thus bridging the gap between traditional chemistry and modern technology. Recognizing that his genuine interest lay in the computational aspects, Oakley shifted his career focus post-PhD, seeking opportunities that allowed them to apply machine learning and big data solutions outside of the chemistry lab.

How to connect Oakley Cox : https://www.linkedin.com/in/oakley-c-73aa27111/

Resources Mentioned:
The AI Arsenal (Darktrace White Paper): https://www.darktrace.com/resources/the-ai-arsenal

Comparing AI Approaches for anomaly based threat detection (Research Journal): https://hstalks.com/article/7177/anomaly-based-threat-detection-behavioural-fingerp/

Connect With Aaron Crow:

Learn more about PrOTect IT All:

Work with Aaron: https://protectitallpod.com/work/

To be a guest or suggest a guest or episode, email [email protected].

Please leave us a review on Apple or Spotify:

Work with Aaron: https://protectitallpod.com/work/

In this episode, host Aaron Crow is joined by Peter Jackson, a seasoned expert from New Zealand with a robust background in industrial automation and cybersecurity. Together, they unravel the intricacies of balancing security with reliable operations and explore the evolving landscape of OT cybersecurity in critical infrastructure. Listen in as they discuss everything from the importance of safe operations and risk management to the nuances of vulnerability management in diverse industrial environments. 

Whether you're an OT professional or an IT practitioner, this episode is packed with insights that cater to both ends of the spectrum, all shared with a passion for protecting the future of our interconnected systems. 

Key Moments: 

05:22 Bridging IT and OT Silos

14:53 Business Risk Beyond Cyber Concerns

17:46 "OT Security Risks in Business"

25:46 Simplifying Complex OT Management

30:10 Cybersecurity Misunderstandings in Safety Systems

36:58 Prioritizing Systems and Security Integration

39:51 Improving Business Trust Tolerance Journey

44:42 Hesitancy and Future of OT Cloud

52:07 Operational Resilience and Risk Reduction

55:26 "Assessing System Security Strategies"

58:59 Network Security Maturity Strategies

01:05:00 "Improving IT Resilience and Preparedness"

01:13:43 "Towards Improved System Security Awareness"

01:15:03 Continuous Security Improvement Basics

01:20:00 Safety First: A Unique Culture

About the guest : 

Peter Jackson is a seasoned OT/ICS cybersecurity expert with deep roots in ICS programming, SIS engineering, and alarm management. He’s built high-performing OT security teams, led global projects across NZ, ANZ, APAC, and supported major acquisitions with his cyber expertise.

A certified SANS ICS515 instructor and global speaker, Peter also leads the NZ ICS Cyber Technical Network, driving collaboration and innovation in industrial cybersecurity.

Feel free to follow Peter on LinkedIn: https://www.linkedin.com/in/peterjnz/
If you’re interested in the NZ ICS/OT cyber community: https://icscyber.org.nz

If you’re interested in the work that he does with the SGS team: https://www.sgs.com/en/services/operational-technology-cyber-safety  or email [email protected]

Connect With Aaron Crow:

Learn more about PrOTect IT All:

Work with Aaron: https://protectitallpod.com/work/

To be a guest or suggest a guest or episode, email [email protected].

Please leave us a review on Apple or Spotify:

Work with Aaron: https://protectitallpod.com/work/

In this episode, Aaron is joined by Jori VanAntwerp live from the s4 conference. Together, they unpack the intricacies of networking at industry events, the challenges and opportunities in OT cybersecurity, and the evolving technologies and strategies that are reshaping the field. 

From the significance of understanding asset owner needs to the promising future of AI and blockchain in cybersecurity, Aaron and Jori cover it all. Whether you're a seasoned professional or new to the field, this episode is packed with insights that will keep you informed and ahead in the ever-evolving cybersecurity landscape. 

So, tune in and get ready to explore the essential strategies for protecting it all.

Key moments: 

04:38 Asset Owner's Conference Dilemma

08:14 "Business at Speed of Trust"

10:45 Career Transition Acceptance

16:09 Limited Solution Compatibility Issues

18:41 Exploring Blockchain for Data Integration

20:47 Adapting to Imperfection with Technology

25:12 Dynamic Detection in Modern Substations

28:28 Rethinking Staffing for Power Utilities

31:45 Retiree Saves Power Plant Upgrade

35:37 Ford F-150 Taillights Theft Spike

39:08 Modular Redundancy in OT Security

42:20 "Advocating for Chipset Optimization"

45:32 "Call for Advanced PLC Monitoring Chip"

48:12 Complicated Security Measures Challenge Efficiency

49:28 Balancing Security and Operational Needs

52:57 IT Policy Disrupts Control Room Ops

56:43 Bridging OT and IT Teams

About the guest : 

For nearly two decades, Jori has enabled industrial and IT organizations to be successful in reducing risk, increasing compliance, and their overall security efforts. Jori has the ability to quickly evaluate situations and determine innovative solutions and possible pitfalls due to his diverse background in security, technology, partnering and client-facing experience. Approaching situations with intuitive insight and methodology, leveraging his deep understanding of business and technology, ranging from silicon to the cloud. He had the pleasure of working with such great companies as Gravwell, Dragos, CrowdStrike, FireEye, McAfee, and is now Founder and Chief Executive Officer at EmberOT, a cybersecurity startup focused on making security a reality.

How to connect Jori : 

Website : https://emberot.com/

Linkedin : https://www.linkedin.com/in/jvanantwerp/

Connect With Aaron Crow:

Learn more about PrOTect IT All:

Work with Aaron: https://protectitallpod.com/work/

To be a guest or suggest a guest or episode, email [email protected].

Please leave us a review on Apple or Spotify:

Work with Aaron: https://protectitallpod.com/work/

In this episode, host Aaron Crow tackles the ongoing debate of IT versus OT attacks, using the example of the Colonial Pipeline incident and others to illustrate his point. Aaron argues that focusing on whether an attack is an IT or OT issue misses the bigger picture - the real impact on operations. 

Through engaging stories and industry insights, Aaron emphasizes that asset owners ultimately care about operational continuity, revenue, safety, and risk management, rather than rigid definitions. 

Join us as we explore why understanding the broader business risks is crucial and how organizations can better protect themselves in this evolving landscape.

Key Moments; 

04:48 Key Role of OSI PI in Utilities

09:05 New Domain Issue: Same Name, No Access

11:26 IT vs. OT Asset Management Dilemma

15:28 OT Cybersecurity: Beyond Securing PLCs

18:47 Blurring Lines Between IT and OT

19:36 Business Risk and Cyber Protection

Connect With Aaron Crow:

Learn more about PrOTect IT All:

Work with Aaron: https://protectitallpod.com/work/

To be a guest or suggest a guest or episode, email [email protected].

Please leave us a review on Apple or Spotify:

Work with Aaron: https://protectitallpod.com/work/

In this episode, host Aaron Crow is joined by Sulaiman Alhasawi, a cybersecurity expert based in Kuwait. Sulaiman shares his journey into OT security, beginning with his PhD research in Liverpool and leading to his creation of ICSrank.com, a search engine for OT devices. 

The discussion gets into individuals' unique cybersecurity paths, emphasizing the importance of learning from diverse experiences. They explore the challenges asset owners face in understanding vulnerabilities, the role of AI in cybersecurity, and the international perspective on OT security. 

Throughout the episode, Aaron and Sulaiman highlight the significance of community, knowledge sharing, and taking actionable steps to improve cybersecurity posture in critical infrastructure. Whether you’re an industry veteran or a newcomer, this episode is packed with insights and practical advice to help you protect it all.

Key Moments: 

01:10 Sharing Diverse Experiences

05:44 Simplifying Asset Management Challenges

08:15 Action Transforms Ideas to Value

11:44 Unexpected Targets in Cyber Attacks

13:20 "Obscurity Isn't Security"

16:50 Simplifying Cybersecurity Communication

21:12 Unintended Internet Exposure Risks

24:49 Podcasting for Community Impact

28:53 OT's Vital Role in Hospitals

32:26 Diverse Experiences in Power Plants

35:54 OT Data Integration Priorities

36:55 Prioritizing Safety Over Immediate Updates

42:10 Global Business Resource Allocation Challenges

46:08 Finding Our Podcast & Resources

47:25 Global Unity in Shared Struggles

About The Guest : 

Sulaiman Alhasawi is an active researcher  in ICS/OT cybersecurity, with a PhD specializing in securing critical infrastructure. He is the founder of ICSrank.com, a platform dedicated to discovering and assessing security risks in Industrial Control Systems (ICS), Operational Technology (OT), and Industrial IoT.

As the host of the ICS Arabia Podcast, Sulaiman brings together global experts to discuss cutting-edge topics in OT security, bridging the gap between research, industry, and real-world cyber threats.

His latest research, "How to Find Water Systems on the Internet", was featured in SecurityWeek magazine, shedding light on OSINT techniques used to uncover vulnerable water infrastructure. (Read it here: https://zerontek.com/zt/2024/09/30/how-to-find-water-systems-on-the-internet-a-guide-to-ics-ot-osint/)

Follow Sulaiman for insights on ICS/OT security, threat intelligence, and ethical hacking:

Connect With Aaron Crow:

Learn more about PrOTect IT All:

Work with Aaron: https://protectitallpod.com/work/

To be a guest or suggest a guest or episode, email [email protected].

Please leave us a review on Apple or Spotify: