The ManuSec Europe 2026 and S4x26 conferences provided valuable insights into the current state and future of OT security. Key themes included the rise of remote access, compliance standards, trust, AI, pen testing, and the need to validate humanity in the context of cybersecurity. These themes shed light on the challenges and opportunities in the OT security landscape.
In this episode, Jesper and guest Jeffrey discuss their takeaways from being present in those conferences.

The conversation delves into the historical relationship between OT and IT, the challenges of integration, and the crucial role of leadership and personnel in bridging the gap. It also highlights the responsibility of vendors in providing tools that facilitate collaboration and the need for a shift towards a more collaborative and friendly relationship between OT and IT.

Takeaways

• OT and IT have historically been frenemies, but are moving towards a more collaborative and friendly relationship.
• Leadership, personnel, and strategic team-building are crucial in bridging the gap between OT and IT.

Chapters

• 00:00 Introduction and Background
• 05:03 Challenges of IT-OT Integration
• 34:06 Tooling and Vendor Responsibility

The conversation covers the critical importance of OT security, the differences between OT and IT security, real-world impacts of OT security breaches, the significance and impact of OT security, challenges in OT and IT security collaboration, the maturity of OT security in Europe vs. the US, and the influence of insurance companies on OT security. It also discusses the impact of COVID-19 on OT security, standards and compliance in OT security, European OT security regulations and their impact on the US, and the descriptive vs. proscriptive nature of frameworks in OT security.

Chapters

• 00:00 Introduction
• 07:10 Real-world Impact of OT Security Breaches
• 13:35 OT and IT Security Concerns and Priorities
• 20:24 OT as the New Frontier in Cybersecurity
• 26:20 Standards and Compliance in OT Security
• 31:28 Descriptive vs. Proscriptive Frameworks in OT Security