Sign up to save your podcasts
Or
Share The South Vector: How to Lock Down Vendor Maintenance Before It Locks You Out
Share to email
Share to Facebook
Share to X
Share to email
Share to Facebook
Share to X
Or
The South Vector: How to Lock Down Vendor Maintenance Before It Locks You Out
In this episode of The Bottom Line Up Front, insights from a webinar presented by Cam Cullen, CMO for BlastWave, are distilled. The discussion centers on constructing a defensible architecture with a focus on remote access for third-party OT vendors, addressing vulnerabilities such as the "South Attack Vector" and the increasing role of AI agents. Key points include the breakdown of traditional air gapping, the rise of CVEs in OT systems and security devices, and practical controls for improving security, such as replacing passwords with cryptographic keys and implementing micro-segmentation. Additional highlighted vulnerabilities are showcased through cases like the Oldsmar facility and the Target breach. The discussion extends to securing AI and cloud edges, aligning with federal and military zero trust principles, and concludes with a phased implementation strategy for a zero trust OT environment.
00:00 Introduction
00:38 The Broken Air Gap and Remote Maintenance
01:33 Security Vulnerabilities and Exploits
02:31 Case Studies: Real-World Incidents
02:54 Practical Security Controls
03:55 Comprehensive Network Protection
04:04 Microsegmentation and Device-Level Security
04:51 Hardening Remote Access and Onsite Controls
05:21 AI, Cloud Edges, and Zero Trust Principles
05:50 Federal and Military Alignment
07:36 Implementation Playbook for Zero Trust OT Strategy
08:46 Conclusion and Call to Action
This episode is brought to you by ATP Gov. Visit us online at www.atpgov.com or follow us on LinkedIn.
View all episodes
By ATP Gov, LLCIn this episode of The Bottom Line Up Front, insights from a webinar presented by Cam Cullen, CMO for BlastWave, are distilled. The discussion centers on constructing a defensible architecture with a focus on remote access for third-party OT vendors, addressing vulnerabilities such as the "South Attack Vector" and the increasing role of AI agents. Key points include the breakdown of traditional air gapping, the rise of CVEs in OT systems and security devices, and practical controls for improving security, such as replacing passwords with cryptographic keys and implementing micro-segmentation. Additional highlighted vulnerabilities are showcased through cases like the Oldsmar facility and the Target breach. The discussion extends to securing AI and cloud edges, aligning with federal and military zero trust principles, and concludes with a phased implementation strategy for a zero trust OT environment.
00:00 Introduction
00:38 The Broken Air Gap and Remote Maintenance
01:33 Security Vulnerabilities and Exploits
02:31 Case Studies: Real-World Incidents
02:54 Practical Security Controls
03:55 Comprehensive Network Protection
04:04 Microsegmentation and Device-Level Security
04:51 Hardening Remote Access and Onsite Controls
05:21 AI, Cloud Edges, and Zero Trust Principles
05:50 Federal and Military Alignment
07:36 Implementation Playbook for Zero Trust OT Strategy
08:46 Conclusion and Call to Action
This episode is brought to you by ATP Gov. Visit us online at www.atpgov.com or follow us on LinkedIn.