PrOTect It All

Work with Aaron: https://protectitallpod.com/work/

In this episode of Protect It All, host Aaron Crow gets into pressing cybersecurity issues currently making headlines. Listeners are invited to explore the complex challenges governments face to ensure accountability without compromising security. 

Aaron examines the implications of global policies that could force tech companies to undermine encryption. Steering clear of political discourse, he focuses on real cybersecurity risks, from untracked government spending to potential backdoors in personal devices and broader national security concerns. 

Aaron provides critical insights into how these issues impact businesses, private citizens, and infrastructure, raising questions about privacy and data protection in today's digital age. 

Whether you're a cybersecurity expert, a business leader, or someone who values privacy, this episode offers valuable perspectives and strategies to navigate the intricate IT and OT cybersecurity landscape. Join Aaron as he tackles these pressing topics and discusses how to maintain transparency and security for everyone.

Key Moments

00:00 Demanding Oversight for Sensitive Expenditures

05:42 Fragmented Infrastructure and Cybersecurity Challenges

09:19 Suing for Backdoors in Secure Communication

11:35 Phone Security and Privacy Concerns

13:40 Cybersecurity Risks of Government Backdoors

16:54 Encryption Backdoors: Security vs. Privacy?

Connect With Aaron Crow:

Learn more about PrOTect IT All:

Work with Aaron: https://protectitallpod.com/work/

To be a guest or suggest a guest or episode, email [email protected].

Please leave us a review on Apple or Spotify:

Work with Aaron: https://protectitallpod.com/work/

In this episode, host Aaron Crowe speaks to Dan Ricci, founder of the ICS Advisory Project, to delve into OT cybersecurity. Dan brings a wealth of experience from his time in the Navy, transitioning through various cybersecurity roles, and finally taking the leap to establish a platform that addresses the complex needs of critical infrastructure sectors. 

In this conversation, they explore the genesis of the ICS Advisory Project, a tool designed to streamline vulnerability management for small to medium-sized organizations. Aaron and Dan also discuss the challenges of transitioning from military service to civilian cybersecurity roles, emphasizing the importance of mentorship, risk-taking, and continual self-improvement. 

This episode offers valuable insights for anyone in the cybersecurity community and those looking to bridge the gap between IT and OT spheres. Join us as we explore strategies to enhance resilience and share lessons from the field.

Key Moments: 

09:17 Building Dashboards with Google Studio

14:41 Cybersecurity: Secondary Concern for Operators

20:48 Supporting Small Supply Chain Contributors

23:23  OT Cybersecurity Impact and Mentorship

27:48 Bridging Cybersecurity and Critical Sectors

34:16 Opportunities to Share Project Insights

38:24 Adapting Skills for Career Growth

45:58 Cyber Career Evolution and Growth

56:14 Leadership vs. Management Distinction

01:00:56 Relentless Daily Self-Improvement

About the guest : 

With over 28 years of Cybersecurity experience, Dan is the Senior Cybersecurity Consultant at

Ampyx Cyber, leading engagements with Rural Cooperatives and Utilities to improve their

Cybersecurity programs and protect critical infrastructure. In 2023, he founded Industrial Data Works to provide independent consulting and vulnerability intelligence API subscription services.

He is also the founder of the ICS Advisory Project, an open-source initiative to help small and medium-sized ICS asset owners across the 16 critical infrastructure sectors prioritize vulnerabilities and plan mitigation for their ICS/OT environments. He aims to provide free and accessible resources to secure critical infrastructure and protect the public.

Link to Industrial Data Works:

https://www.industrialdataworks.com/ics-advisory-project-api

Links to ICS Advisory Project:

https://www.icsadvisoryproject.com/

ICS Advisory Project Github Repository:

https://github.com/icsadvprj/ICS-Advisory-Project

Receive ICS Advisory Project Weekly Summary Slides and Other CERT & Vendor Advisory Summaries in your email every Monday:

https://docs.google.com/forms/d/e/1FAIpQLSfC490BHoCR4gHekZcMLBgbHMhUQZr7ZVYZG1OkaWdKGwH73g/viewform

Connect With Aaron Crow:

Learn more about PrOTect IT All:

Work with Aaron: https://protectitallpod.com/work/

To be a guest or suggest a guest or episode, email [email protected].

Please leave us a review on Apple or Spotify:

Work with Aaron: https://protectitallpod.com/work/

In this episode, host Aaron Crow welcomes Chris Robertson, CISO at Apogee Defense, to discuss the evolving landscape of cybersecurity, focusing on the distinction and strategy behind Virtual CISO (vCSO) roles. 

Chris shares insights from his dual roles at Apogee Defense and as a virtual chief security officer for various companies. The conversation dives into the intricacies and responsibilities of vCSOs, the importance of understanding IT and OT risks, and the necessity of integrating cybersecurity deeply into business practices. 

Chris and Aaron explore practical solutions for businesses, emphasizing adaptability and continuous improvement in security measures, drawing parallels between accounting a century ago and cybersecurity today. 

They also touch on future trends, the impact of AI on security, and the importance of setting aside egos to foster a culture of learning and collaboration. 

Join them as they navigate the challenges and opportunities at the intersection of IT and OT cybersecurity, offering actionable advice and anecdotes from their extensive experience in the field.

Key Moments: 

00:00 Outsourcing Risk Management Expertise

08:22 Hiring External Experts: Cost-Effective Strategy

12:04 Understanding OT Risks in Cyber Leadership

20:36 MBA Curriculum Needs Security Focus

23:31 Integrating Security in Legacy Systems

27:47 Tech Efficiency and Shadow IT Challenges

35:56 Optimizing Inefficient Appointment Systems

39:08 Bridging Tech and Business Worlds

45:43 Simplifying Risk Communication

51:52 Joe Rogan's Impact and Risks

57:09 AI Evolution: Professionals Riding the Wave

01:05:53 "Embrace Vulnerability, Seek Help"

About the guest : 

Chris Robertson is a seasoned cybersecurity expert, currently serving as the Chief Information Security Officer (CISO) at Apogee Defense. In addition to this role, Chris extends his expertise as a virtual CISO for various companies across multiple sectors. He specializes in implementing robust security solutions that Apogee Defense delivers to its clients, predominantly within the Small and Medium Business (SMB) space. 

With a keen focus on the defense industrial base, Chris's work also spans various other industries, enabling businesses to strengthen their cybersecurity frameworks. He is highly regarded in the industry for facilitating vital connections and contributing to advancing cybersecurity practices.

How to connect Chris: https://www.linkedin.com/in/christophersrobertson/

Connect With Aaron Crow:

Learn more about PrOTect IT All:

Work with Aaron: https://protectitallpod.com/work/

To be a guest or suggest a guest or episode, email [email protected].

Please leave us a review on Apple or Spotify:

Work with Aaron: https://protectitallpod.com/work/

In this episode, host Aaron Crow engages in a riveting conversation with Anusha Iyer, the CEO and founder of Corsha, a Washington, D.C.-based cybersecurity company. With over 25 years of experience in the cybersecurity space and a newfound interest in operational technology (OT), Anusha shares insights into her company's innovative approach to identity and access management for machines.

The discussion covers key topics such as the convergence of IT and OT, the essential need to understand machine-to-machine communication, and the revolutionary potential of machine identity and multi-factor authentication (MFA) in securing industrial environments. Aaron and Anusha explore practical strategies for bridging IT and OT gaps and highlight real-world examples of implementing zero-trust principles.

This episode is a treasure trove of knowledge for cybersecurity professionals, OT engineers, and tech enthusiasts alike. It emphasizes how modern security measures can transform and protect critical infrastructure. Tune in to gain valuable insights into the future of OT cybersecurity and the importance of embracing comprehensive security measures.

Key Moments: 

06:16 Machine Identity in OT Environments

08:40 Machine MFA for Secure Access

10:23 Understanding Secure Endpoint Communication

14:07 Cybersecurity vs. Safety Concerns

17:37 Achieving Zero Trust in Network Security

20:50 Overcoming Cloud Security Fears

26:10 Tech Implementation and Management Challenges

31:54 Complex Architecture: Costly and Complex

36:05 Understanding System Data Flow Benefits

40:36 Technology Deployment Before Cybersecurity Era

47:50 Simplifying Machine Implementation Benefits

51:19 Manual System Updates Challenges

51:58 Balancing IT and OT Efficiency

About the guest : 

Anusha Iyer is the Founder and CEO of Corsha - a leader in identity and access management for operational systems and critical infrastructure. With over 20 years in cybersecurity, Anusha is passionate about demystifying cyber and security, making it accessible, easy to adopt, and self-assuring.

Reach out to Anusha at [email protected] if you want to talk OT and Cyber and how to use machine identity in your industrial networks to unlock secure automation.

Find out more about Corsha and request a demo here: https://corsha.com/request-a-demo

Connect With Aaron Crow:

Learn more about PrOTect IT All:

Work with Aaron: https://protectitallpod.com/work/

To be a guest or suggest a guest or episode, email [email protected].

Please leave us a review on Apple or Spotify:

Work with Aaron: https://protectitallpod.com/work/

In this episode, host Aaron is joined by cybersecurity expert Adam Robbie, the head of OT threat research at Palo Alto Networks. The discussion begins with Aaron sharing his extensive experience deploying Palo Alto firewalls in operational technology (OT) environments, highlighting the key troubleshooting and application-aware capabilities these firewalls offer.

Adam delves into his role at Palo Alto Networks, focusing on the critical task of identifying and mitigating threats in the OT landscape. He discusses the unique challenges of securing OT environments, including the convergence of various technologies and the necessity for proactive defense strategies.

The conversation covers important topics such as the importance of team collaboration across IT and OT, the complexities of deploying firewalls in OT situations, and the ever-evolving threats facing the industry. 

Tune in for a comprehensive exploration of the intersection of cybersecurity and OT, and gain valuable insights from experts on the front lines of protecting critical infrastructure.

Key Moments: 

00:00 Evolving Threat Analysis Focus

08:38 IT vs OT Firewall Responses

12:17 PLC Configuration and Remote Access Challenges

18:43 "Career Progress Through Strategic Moves"

23:05 Evolving OT Firewall Technologies

31:08 Malware Analysis and Threat Detection

35:34 Strategic Cybersecurity Using Game Theory

40:39 Hidden Vulnerabilities in OT Environments

44:44 Geographical Data Challenges in Analysis

49:24 OT Cybersecurity Segmentation Challenges

54:41 OT Systems: Challenges in Updates

01:00:02 Augmented Reality for Remote Problem-Solving

About the guest : 

Adam is the Head of OT Threat Research at Palo Alto Networks since 2022, with over 15 years of OT and IT experience. He's a publisher with SANS, IEEE, and other conferences, focusing on securing critical infrastructure, finding vulnerabilities, and developing best practices. He holds a Bachelor's and Master's in Electrical Engineering and advanced certifications like GICSP and GRID. Adam also teaches cybersecurity bootcamps at top universities and advises on curriculum development. Previously, as a Senior Cyber Security Consultant at Deloitte, he specialized in ICS/IoT penetration testing, threat hunting, and vulnerability research.

Contact Adam at: https://www.linkedin.com/in/adamrobbie/

Connect With Aaron Crow:

Learn more about PrOTect IT All:

Work with Aaron: https://protectitallpod.com/work/

To be a guest or suggest a guest or episode, email [email protected].

Please leave us a review on Apple or Spotify:

Work with Aaron: https://protectitallpod.com/work/

In this episode, host Aaron Crow converses with Lesley Carhart, Technical Director at Dragos, who brings over 15 years of experience in incident response and forensics within critical infrastructure sectors.

The episode dives deep into the standard practices in industrial settings, such as operators shutting down power plants for safety and the lack of forensic investigation into equipment failures. Lesley emphasizes the importance of integrating cybersecurity into these environments, pointing out that many failures are due to maintenance or human error, though a notable portion does involve cyber threats.

Listeners will learn about the challenges and necessary collaborations between operational technology (OT) and information technology (IT) teams. The discussion addresses cultural and trust barriers that hinder effective cybersecurity measures and advises on how organizations can improve their defenses regardless of size and resources.

Lesley also highlights the evolving landscape of cyber threats, including the increasing sophistication of adversaries and the vulnerabilities caused by standardizations in industrial systems. Real-world examples underscore the complexity of securing these environments, emphasizing the need for proactive and informed cybersecurity practices, such as "cyber-informed engineering."

Tune in to better understand the critical intersections of cybersecurity and industrial operations, and learn practical strategies to safeguard essential services.

Key Moments: 

05:00 IT-OT miscommunication leads to cybersecurity risks.

09:23 IT processes are too slow; bypassing is required for solutions.

11:36 Leaving an outdated system may pose less risk.

15:09 Slow changes in OT due to unforeseen impacts.

19:17 Include cybersecurity in root cause analysis discussions.

20:31 Nation-states analyze and bypass industrial control systems.

25:40 Cybersecurity is essential to combat potential system threats.

29:27 Communication, champions, and leadership crucial for cybersecurity.

31:37 Cybersecurity struggle due to resources community helps.

35:03 OT vs. IT language differences affect incident classification.

38:08 Empowered safety culture prevents accidents and retribution.

40:22 Few people have diverse cybersecurity skills and experience.

45:05 Experience across all 17 critical infrastructure verticals.

48:29 Evading detection in the nuclear enrichment process.

51:25 Identify industrial devices, build security program.

About the guest : 

Lesley Carhart is a renowned cybersecurity expert specializing in industrial control systems (ICS) security. With a keen understanding of the convergence between traditional IT and operational technology (OT), Lesley has been at the forefront of safeguarding critical infrastructures. Her work emphasizes the vulnerabilities of human-machine interfaces (HMIs) and programming devices, which are increasingly resembling typical computers and thus becoming prime targets for malware and ransomware attacks. Lesley's insights highlight the significant risks posed by these hybrid systems, underscoring the importance of robust cybersecurity measures in protecting essential processes. Lesley is honored to be retired from the United States Air Force Reserves, and to have received recognition such as “DEF CON Hacker of the Year”, “SANS Difference Maker”, and “Power Player” from SC Magazine.

How to connect Lesley: 

Instagram : https://www.instagram.com/hacks4pancakes/

Blog: https://tisiphone.ne

Mastodon : https://infosec.exchange/@hacks4pancakes

Linkedin : https://www.linkedin.com/in/lcarhart/

Connect With Aaron Crow:

Learn more about PrOTect IT All:

Work with Aaron: https://protectitallpod.com/work/

To be a guest or suggest a guest or episode, email [email protected].

Please leave us a review on Apple or Spotify:

Work with Aaron: https://protectitallpod.com/work/

In this episode, hosts Aaron Crow and Neal Conlon are joined by cybersecurity executive Ken Foster to discuss why smaller, focused events like the upcoming gathering at Staccaro Ranch outshine large conferences in the cybersecurity industry. They highlight the importance of genuine relationship-building, integrity in vendor interactions, and meaningful conversations that smaller events facilitate. Ken shares his experiences with data breaches, emphasizing the value of transparent, honest connections. Upcoming events and the benefits of intimate settings for networking and professional growth are also discussed, showcasing why, in cybersecurity, quality interactions trump quantity.

Don't miss the Lone Star Cyber Shootout happening in January. Click here to participate in this exclusive event - https://corvosec.com/lonestar-cyber-shootout/

Key Moments: 

01:32 The Cybersecurity industry operates differently from others.

04:24 Invested in low-integrity people; disregards trustworthiness.

07:20 Honesty and transparency in cloud transition discussions.

13:20 Attack surface management dominated RSA; competitive market.

14:18 Conversations expedite and enhance memorable connections.

18:06 Smaller conversations prevent distractions and improve focus.

23:48 Building real connections requires personal interaction time.

25:43 A Diverse group led to unique conversations insights.

28:36 Expert struggles due to lack of community relationships.

32:06 Build relationships, sell yourself, understand and adapt.

37:16 Building relationships helps find the right fit.

Learn more about PrOTect IT All:

Work with Aaron: https://protectitallpod.com/work/

To be a guest or suggest a guest or episode, email [email protected].

Please leave us a review on Apple or Spotify:

Work with Aaron: https://protectitallpod.com/work/

Happy New Year 2025. In this episode, host Aaron Crow  guides you through the evolving cybersecurity landscape impacting everything from power utilities and transportation to manufacturing and healthcare. Aaron explores the importance of integrating people, processes, and technology to build resilient systems.

He also outlines the major cybersecurity events and conferences you won't want to miss this year, including s4 in Tampa, RSA in San Francisco, and Black Hat and DEFCON in Vegas. And don't miss the Lone Star Cyber Shootout happening in January. Click here to participate in this exclusive event - https://corvosec.com/lonestar-cyber-shootout/

With a focus on community and networking, Aaron emphasizes how these connections can elevate your cybersecurity strategy. Stay tuned for actionable insights, expert interviews, and real-world case studies to kickstart your year. Let's make 2025 a year of impactful cybersecurity advancements together.

Key Moments: 

00:40 Resilience needs technology, people, and processes.

05:03 Annual Vegas cybersecurity events: Black Hat, DEFCON.

09:01 Networking is crucial for career and growth.

11:42 Secure messaging suggests normal texting may be compromised.

16:04 Balance technical skills with essential soft skills.

17:11 Excellent professionals struggle in untrained management roles.

Connect With Aaron Crow:

Learn more about PrOTect IT All:

Work with Aaron: https://protectitallpod.com/work/

To be a guest or suggest a guest or episode, email [email protected].

Please leave us a review on Apple or Spotify:

Work with Aaron: https://protectitallpod.com/work/

In this episode, host Aaron Crow delves into the increasingly sophisticated world of cyber scams that aim to steal money and identity. Discussing real-life examples, including a personal encounter with a jury duty scam over the holiday season, Aaron explores various types of frauds such as investment scams and tech support deceptions.

Listeners will gain actionable tips to safeguard themselves and their loved ones from these cyber threats. If staying ahead of cybercriminals and protecting personal information is a priority, this episode offers invaluable advice. Stay tuned for an essential discussion on cybersecurity.

Key Moments: 

01:17 Nearly scammed; realized it was a hoax.

04:09 Threatened by scammers; no harm, but scary.

08:26 Verify the origin of the information; scams can be deceptive.

10:53 Invest only what you can afford to lose.

13:07 Verify uninvited officers via 911, file report.

19:51 Use physical backups, regularly update and backup files.

21:07 Use your router and a firewall.

Connect With Aaron Crow:

Learn more about PrOTect IT All:

Work with Aaron: https://protectitallpod.com/work/

To be a guest or suggest a guest or episode, email [email protected].

Please leave us a review on Apple or Spotify:

Work with Aaron: https://protectitallpod.com/work/

In this episode, host Aaron Crow shines a light on the collaborative spirit that unites these professionals as they confront contemporary cybersecurity challenges. It features a roundtable discussion with industry veterans: Pascal Ackermann, Senior Threat Protection and Response Engineer; Brett Seals, expert in incident response and threat detection; and Gabriel Sanchez, head of the Advanced Threat Protection Center

The discussion takes listeners on a journey through both nostalgic tech, with mentions of the Tandy TRS-80, and the pressing issues of today, such as ransomware threats. The guests delve into the delicate balance between old and new technologies, the intricacies of integrating IT and OT security, and the evolving skill sets needed in the field. From power plant vulnerabilities to global geopolitical ramifications, the episode underscores the critical importance of securing essential infrastructure.

Listeners will hear shared histories, stories of past crises, and these experts' proactive solutions. Topics range from cloud and artificial intelligence trends to the crucial need for workforce development. This episode provides a detailed, engaging, and educational experience for anyone interested in cybersecurity.

Key Moments: 

10:43 Incident detection parallels between the control room, SOC.

13:58 Integrating safety programs into utility sector operations.

19:24 Balancing risk vs. cost of device replacement.

24:10 Immediate support is needed for 24/7 operations critical.

32:21 OT and IT share the same protection goals.

34:59 Focus: Enhancing asset management and system visibility.

39:42 Early hacking: dialing, shared networks, pranking neighbors.

44:32 Shift towards active technology use in OT.

50:58 If it ain't broke, don't fix it.

55:37 Defending infrastructure and impacting global mission together.

59:52 Issues transcend borders; global cooperation is needed.

Guest Profiles: 

Brett Seals is an expert in instant response and threat detection engineering, currently working at the firm 1898. Before joining 1898, Brett garnered a decade of invaluable experience in the United States Navy, where he supported both expeditionary and cybersecurity operations. During his Navy tenure, he served at the Navy Cyber Defensive Operation Command, the Navy’s equivalent of a Security Operations Center (SOC), managing a fleet of sensors. Brett also spent considerable time around the Fort Meade area. As the COVID-19 pandemic began, he transitioned from his military role to his current position, continuing his commitment to cybersecurity in the private sector.

Gabriel Sanchez embarked on his professional journey in the early 2000s, transitioning from college into what we now recognize as a burgeoning career in cybersecurity. Initially, Gabriel found himself working as a contractor for the Department of Defense, focused on missile simulations and charged with the responsibility of protecting their network—an early, hands-on introduction to cybersecurity before it even had a formal name. Following this formative experience, Gabriel spent the next decade in the electric utility sector, stepping into a groundbreaking role to establish an entirely new cybersecurity program from scratch. His trailblazing efforts in this novel position underscored his capability and foresight in an evolving digital landscape.

Pascal Ackermann is a seasoned professional with over two decades of experience in controls engineering and operational technology (OT), having entered the field in 1999. Throughout his career, he has focused on building resilient and secure OT networks. For the past year, Ackermann has specialized in helping customers make sense of security events within their environments. He assists clients in discovering and interpreting security incidents, providing insights into their relevance and impact. Additionally, Ackermann and his team are equipped to respond to security breaches, offering on-site services to recover, remediate, and ensure systems are back up and running efficiently. His deep expertise makes him a trusted resource in cybersecurity for OT environments.

Connect Brett at https://www.linkedin.com/in/iambrettseals/

Connect Gabriel at  https://www.linkedin.com/in/gabrielsanchez-1898andco/

Connect Pascal at https://www.linkedin.com/in/pascal-ackerman-036a867b/

Company Website at  https://1898andco.burnsmcd.com/

Connect With Aaron Crow:

Learn more about PrOTect IT All:

Work with Aaron: https://protectitallpod.com/work/

To be a guest or suggest a guest or episode, email [email protected].

Please leave us a review on Apple or Spotify: