Industrial Cybersecurity Insider

Your plant has monitoring tools. But is anyone watching what they find?

Dino Busalachi sits down with Justin Carlson, Chief Strategy Officer at Kasm, to talk about one of the biggest challenges in manufacturing cybersecurity: a shrinking pool of people who understand both the plant floor and security. They explore when managed services make sense, what decisions should always stay with your own team, and why buying more tools is not enough.

The conversation also covers consolidating remote access into a single controlled entry point, keeping vendors and integrators aligned, protecting legacy systems without disrupting production, and funding OT cybersecurity through capital projects so security becomes part of the work instead of an unplanned expense.

For CISOs, CIOs, plant managers, and engineering leaders, the takeaway is practical: know what is in your environment, keep that inventory current, and use your next plant project to become more secure.

Industrial Cybersecurity Insider brings practical conversations on securing manufacturing and critical infrastructure.

Chapters:

• (00:00:00) Industrial Cybersecurity Insider: Securing Industrial Operations
• (00:01:00) Kasm’s Origins and Ephemeral Computing Environments
• (00:04:00) Secure Remote Access and the OT Workforce Gap
• (00:07:00) Consolidating Plant Access and Protecting Legacy Systems
• (00:11:00) Funding OT Cybersecurity Through Capital Projects
• (00:17:00) Managed Services and the Business Case for Outside Expertise
• (00:20:00) Browser Based Access and Third Party Oversight
• (00:24:00) AI, Cyber Threats, and Manufacturing Downtime
• (00:31:00) Asset Inventory, Capital Planning, and Taking Action

Links And Resources:

• Want to Sponsor an episode or be a Guest? Reach out here.
• Industrial Cybersecurity Insider on LinkedIn
• Cybersecurity & Digital Safety on LinkedIn
• BW Design Group Cybersecurity
• Justin Carlson on LinkedIn
• Dino Busalachi on LinkedIn
• Craig Duckworth on LinkedIn

Thanks so much for joining us this week. Want to subscribe to Industrial Cybersecurity Insider? Have some feedback you’d like to share? Connect with us on Spotify, Apple Podcasts, and YouTube to leave us a review!

Your plant can be running exactly as expected and still have blind spots that put production, process, and people at risk.

Dino Busalachi and Kevin Kumpf break down the gaps most leaders never see: new equipment arriving with outdated firmware, vendors making changes nobody tracks, and process data that gets collected but rarely watched. Using refrigeration systems and manufacturing floors as examples, they show why monitoring has to connect security with uptime, maintenance, and the cost of a missed warning.

They also challenge the belief that encryption or network isolation is enough, explain where AI helps and where it still needs human judgment, and make the case for getting integrators, OEMs, IT, and operations into the same conversation.

Three questions every plant leader should be able to answer: Do you know what normal looks like in your plant? Who can change it? And who will notice when something starts to drift?

Follow Industrial Cybersecurity Insider for practical conversations on protecting production, people, and uptime.

Chapters:

• (00:00:00) Why OT Attacks Put Business Continuity at Risk
• (00:03:00) Industrial Network Design and the Visibility Gap
• (00:07:00) Vendor Access, AI Data Collection, and Third Party Risk
• (00:10:00) Outdated Firmware and Accountable Remote Maintenance
• (00:13:00) Why AI Patching Needs Human Oversight in OT
• (00:17:00) Process Data, Industrial Espionage, and Operational Value
• (00:23:00) Choosing Integrators Who Understand Your Plant
• (00:28:00) Building Monitoring Into New Equipment and Projects
• (00:34:00) Backup Gaps and the Case for Managed OT Services
• (00:38:00) Getting IT and OT to Share Responsibility

Links And Resources:

• Want to Sponsor an episode or be a Guest? Reach out here.
• Industrial Cybersecurity Insider on LinkedIn
• Cybersecurity & Digital Safety on LinkedIn
• BW Design Group Cybersecurity
• Dino Busalachi on LinkedIn
• Craig Duckworth on LinkedIn

Thanks so much for joining us this week. Want to subscribe to Industrial Cybersecurity Insider? Have some feedback you’d like to share? Connect with us on Spotify, Apple Podcasts, and YouTube to leave us a review!

Most manufacturers have an incident response plan. Few have tested it at 2 AM on a Sunday, with a skeleton crew and the people who know the equipment best nowhere to be found.

Fresh from the ICS Cybersecurity Conference in Nashville, Craig Duckworth and Dino Busalachi compare notes on what keeps industrial organizations from being ready for a real attack. The risk today goes beyond ransomware. It's attackers who blend into normal plant activity, process data that quietly exposes your intellectual property, security tools that never get used after the sale, and teams that still work in separate camps.

Craig and Dino talk through why IT, plant floor teams, system integrators, and equipment builders need to operate as one technology team, why new projects are the best place to build security in, and why passing an audit is not the same as being secure. They also look at how AI is speeding up both attacks and defenses, leaving manufacturers less time to react.

If you lead a plant, an engineering team, or a security program, this conversation will help you answer one question: if your plant was hit tonight, who makes the first call and who's on the other end receiving the call?

Listen now and share it with the people who own your plant floor.

Chapters:

• 00:00:00 Incident response plans must work outside office hours
• 00:01:00 Inside the OTICS Cyber Security Conference
• 00:02:00 Threat actors living in the normal
• 00:04:00 Why process data can expose intellectual property
• 00:07:00 The gap between tools, skills, and operating practice
• 00:08:00 Moving beyond the IT and OT divide
• 00:11:00 Why technology adoption matters after the sale
• 00:12:00 Building security into projects from the start
• 00:15:00 Defense in depth and protecting critical assets
• 00:17:00 Practicing incident response when it counts
• 00:19:00 Bringing integrators and asset owners to the table
• 00:20:00 Authority, accountability, and the CISO challenge
• 00:23:00 CMMC, continuous monitoring, and process data
• 00:24:00 Artificial intelligence changes the threat timeline
• 00:27:00 Asset discovery and security baselines
• 00:29:00 Checking a box versus improving the environment
• 00:32:00 Staying ahead through collaboration and readiness

Links And Resources:

• Want to Sponsor an episode or be a Guest? Reach out here.
• Industrial Cybersecurity Insider on LinkedIn
• Cybersecurity & Digital Safety on LinkedIn
• BW Design Group Cybersecurity
• Dino Busalachi on LinkedIn
• Craig Duckworth on LinkedIn

Thanks so much for joining us this week. Want to subscribe to Industrial Cybersecurity Insider? Have some feedback you’d like to share? Connect with us on Spotify, Apple Podcasts, and YouTube to leave us a review!

You passed the audit. The tools are installed. None of it means your plant is secure.

Most industrial cybersecurity plans are written far from the equipment they're meant to protect. The tools are purchased but never fully operationalized. Critical equipment stays unseen. And the plant teams who know it best are the last to see the data.

In this compilation episode, Craig Duckworth, Dino Busalachi, and Ian Bramson of Black & Veatch cover:

• Why security tools sit unused, and what that costs
• Why plant teams need access to security data
• What real IT and OT collaboration looks like
• Who responds first when something goes wrong
• Why compliance isn't security
• How to prioritize risk while protecting safety and uptime

Strong security programs are built with the people closest to the equipment. Is yours?

Chapters:

• (00:00:00) The hidden gap in OT asset visibility
• (00:04:00) Why plant teams need access to security data
• (00:08:00) The cost of an unoperationalized cybersecurity tool
• (00:10:00) What IT and OT convergence really means
• (00:14:00) Bringing system integrators into the conversation
• (00:18:00) Who responds first when an industrial incident happens
• (00:22:00) Compliance, residual risk, and real world security
• (00:26:00) Risk prioritization for utilities and industrial operators
• (00:30:00) Build security into new projects from the start

Links And Resources:

• Want to Sponsor an episode or be a Guest? Reach out here.
• Industrial Cybersecurity Insider on LinkedIn
• Cybersecurity & Digital Safety on LinkedIn
• BW Design Group Cybersecurity
• Dino Busalachi on LinkedIn
• Craig Duckworth on LinkedIn

Thanks so much for joining us this week. Want to subscribe to Industrial Cybersecurity Insider? Have some feedback you’d like to share? Connect with us on Spotify, Apple Podcasts, and YouTube to leave us a review!

Dino sits down with Matt Pike of Rockwell Automation for an honest conversation about why industrial cybersecurity still stalls out inside so many plants, and it has very little to do with technology. Matt walks through his path from onsite IT support at a large automotive manufacturer into OT security, and explains why modern security principles keep colliding with legacy systems that were built to run untouched for fifteen or twenty years. The two dig into the real reason the IT and OT gap has not closed, why CISOs often reach for a familiar tool instead of a strategy, and how Rockwell approaches visibility in a fully vendor agnostic way across Siemens, Honeywell, Emerson and everything else sitting on a plant floor. They also get practical about the pieces most teams skip: secure by design language inside RFQs and integrator contracts, response and recovery plans that almost nobody has written, and the funding question of who actually pays for security when a capital project lands. Matt shares what he is seeing from attackers using AI to speed up reconnaissance and rewrite ransomware around detection, and why the air gap most plants believe in disappears the moment data reaches a historian. His closing advice cuts through the noise: stop buying tools and start with an asset visibility strategy, because you cannot secure what you have never actually seen.

Chapters:

• (00:00:00) Matt Pike's path from IT support into OT security
• (00:03:00) Why the IT and OT gap still has not closed
• (00:06:00) When leadership thinks a tool will fix a people problem
• (00:09:30) Vendor agnostic visibility down to the asset layer
• (00:11:00) Secure by design on greenfield and brownfield projects
• (00:14:00) The incident response plan nobody wrote
• (00:17:30) AI on the plant floor and what it actually requires
• (00:20:00) How attackers are already using AI
• (00:22:30) The air gap myth and east/west blind spots
• (00:27:30) Funding security through the capital project

Links And Resources:

• Want to Sponsor an episode or be a Guest? Reach out here.
• Industrial Cybersecurity Insider on LinkedIn
• Cybersecurity & Digital Safety on LinkedIn
• BW Design Group Cybersecurity
• Dino Busalachi on LinkedIn
• Craig Duckworth on LinkedIn

Thanks so much for joining us this week. Want to subscribe to Industrial Cybersecurity Insider? Have some feedback you’d like to share? Connect with us on Spotify, Apple Podcasts, and YouTube to leave us a review!

Safety starts with a goal. So should cybersecurity.

Craig Duckworth sits down with Shankar Somasundaram, CEO of Asimily and former head of Symantec's IoT business, to explain why plant floor cybersecurity is a safety issue, not an IT expense. They cover why industrial cybersecurity programs stall after the tool is purchased, how to start with a goal instead of a solution, and why fixing the biggest risks first beats trying to secure everything at once.

The conversation also covers network segmentation mistakes, AI as both a helper and a new threat to critical infrastructure, protecting legacy OT and IoT equipment without disrupting production, watching traffic inside the plant, what drives cybersecurity maturity, and what OT security market consolidation means for manufacturers.

Shankar's three takeaways for your next budget cycle:

• Cyber risk is safety risk
• Start with the goal
• Visibility and fixing the problem are one program, not two

Chapters:

• (00:00:00) Cybersecurity is patient safety, operational safety, plant safety
• (00:00:45) Meet Shankar and the four pillars behind Asimily
• (00:03:50) Why OT security projects stall after the tool is purchased
• (00:06:20) Start with a goal, not a solution
• (00:09:20) Exposure management and the segmentation myths that slow teams down
• (00:11:45) AI as enabler and attacker inside critical infrastructure
• (00:15:40) Collecting data on legacy OT and IoT without disrupting operations
• (00:18:20) North south, east west, and the flow data most teams skip
• (00:20:00) Does maturity come from size, budget, or management
• (00:24:20) Consolidation in the OT market and the advice Shankar leaves behind

Links And Resources:

• Want to Sponsor an episode or be a Guest? Reach out here.
• Industrial Cybersecurity Insider on LinkedIn
• Cybersecurity & Digital Safety on LinkedIn
• BW Design Group Cybersecurity
• Shankar Somasundaram on LinkedIn
• Asimily
• Dino Busalachi on LinkedIn
• Craig Duckworth on LinkedIn

Thanks so much for joining us this week. Want to subscribe to Industrial Cybersecurity Insider? Have some feedback you’d like to share? Connect with us on Spotify, Apple Podcasts, and YouTube to leave us a review!

This highlight episode pulls the sharpest moments from past conversations into one continuous argument about why industrial cyber risk keeps escalating and why so many programs stall before they start.

Craig Duckworth and Dino Busalachi open with a number that should stop any executive team cold: one manufacturer lost roughly $500 million in valuation inside 60 hours, and that loss had nothing to do with lost production.

From there the conversation gets practical. They explain why a plant floor security program cannot be run entirely from the data center, why asset inventory and communication flow mapping must come before any discussion of segmentation, and what distinguishes warranted traffic from unwarranted traffic within a control system environment.

Jim Cook joins to break down the difference between a flat network and what the team calls a super flat network, where drives, flow meters, robots, and business systems all share the same space. Together, they make the case that zero trust in operational technology must be built from the bottom of the stack upward, using what they describe as the bucket approach, rather than layered over the plant with enterprise tooling that nobody on site knows how to operate.

The episode closes on ownership: who is accountable, who the plant manager actually trusts, and why the people who design and build the machines belong in the room from day one. If you are responsible for production uptime and for protecting the assets that create it, this one is a fast tour of the decisions that matter most.

Chapters:

• (00:00:00) A $500 Million Valuation Loss In 60 Hours
• (00:01:00) Why Industrial Cyber Risk Is More Urgent Right Now
• (00:03:00) Why IT Cannot Secure The Plant Floor Alone
• (00:05:00) Asset Inventory And Communication Flows Come First
• (00:07:00) Building A Defensible Architecture In OT Environments
• (00:09:00) Flat Networks Versus Super Flat Networks
• (00:11:00) The Bucket Approach To Segmentation
• (00:14:00) Vetting A Cybersecurity Partner The Right Way
• (00:16:00) Tabletop Exercises With The Executive Team
• (00:19:00) Who Actually Owns Industrial Cybersecurity

Links And Resources:

• Want to Sponsor an episode or be a Guest? Reach out here.
• Industrial Cybersecurity Insider on LinkedIn
• Cybersecurity & Digital Safety on LinkedIn
• BW Design Group Cybersecurity
• Dino Busalachi on LinkedIn
• Craig Duckworth on LinkedIn

Thanks so much for joining us this week. Want to subscribe to Industrial Cybersecurity Insider? Have some feedback you’d like to share? Connect with us on Spotify, Apple Podcasts, and YouTube to leave us a review!

Most plants are running production on infrastructure nobody wants to touch. Somebody installed it years ago, that person is long gone, and the standing rule is to leave it alone so it keeps working.

In this episode, Dino sits down with Jeff Slapp, cofounder, CTO and head of produduct development at SteelDome, to talk about what it would take to change that.

Jeff has spent almost 30 years building and running data centers, starting with VMware back in 1998, and he admits that until recently he couldn't have properly defined OT, even though control systems, safety systems, and fire suppression were around him the entire time.

They dig into why so many manufacturers still have hundreds of standalone HMIs, why a capital project is the real moment to think about security, and why IT/OT convergence rarely shows up in practice the way everyone talks about it. Jeff also walks through what it means to stand up a full production platform, complete with secure remote access, in about 90 seconds instead of nine months.

They close on the reality that this is a people problem more than a technology problem, and why AI on the plant floor will only be as good as the foundation it runs on.

Chapters:

• (00:00:00) If technology is not saving time, money, or mistakes, what is the point?
• (00:01:12) Jeff Slapp's 30-year journey from early VMware to co-founding SteelDome
• (00:04:35) What a universal infrastructure operating system means for the plant
• (00:06:24) An IT veteran admits OT was around him the whole time, and he never saw it
• (00:10:03) Legacy plants, standalone HMIs, and the "nobody touches it" problem
• (00:13:22) Kasm and secure application delivery: the missing third layer
• (00:18:04) Time to value: a full production platform in 90 seconds, not nine months
• (00:21:56) Democratizing infrastructure and where AI meets industrial security
• (00:25:14) Secure by design: build cybersecurity into the capital project
• (00:28:38) Asset inventory gaps, the IT/OT convergence myth, and closing thoughts

Links And Resources:

• SteelDome Website
• Jeffrey Slapp on LinkedIn
• Want to Sponsor an episode or be a Guest? Reach out here.
• Industrial Cybersecurity Insider on LinkedIn
• Cybersecurity & Digital Safety on LinkedIn
• BW Design Group Cybersecurity
• Dino Busalachi on LinkedIn
• Craig Duckworth on LinkedIn

Thanks so much for joining us this week. Want to subscribe to Industrial Cybersecurity Insider? Have some feedback you’d like to share? Connect with us on Spotify, Apple Podcasts, and YouTube to leave us a review!

Manufacturing cybersecurity can't succeed when IT acts as the enforcer and OT sees security as an obstacle to production.

CyberHoot founder Craig Taylor joins Dino Busalachi to explain why punishment-based awareness programs create resistance, how positive reinforcement can turn employees into an active layer of defense, and why cyber preparedness belongs beside safety, quality, uptime, and availability as a core plant metric.

They discuss the overlooked role of system integrators and machine builders, the danger of unmanaged laptops and remote access, the false comfort ofair-gappedd systems, and the growing risk that AI poses to aging industrial technology.

Craig also shares a simple framework called PAR, which means pause, assess, and report, and makes the case for short, practical training that rewards people for speaking up before a mistake becomes a shutdown.

Chapters:

• (00:00:00) Why IT should empower OT
• (00:05:18) Connecting cyber awareness to plant uptime
• (00:10:04) The missing role of system integrators
• (00:15:07) Building a culture that rewards reporting
• (00:20:01) Legacy equipment, limited resources, and better incentives
• (00:24:06) Vulnerable plants and the air gap myth
• (00:29:07) Treating cybersecurity like plant safety
• (00:34:00) The personal value of cyber literacy

Links And Resources:

• Want to Sponsor an episode or be a Guest? Reach out here.
• Industrial Cybersecurity Insider on LinkedIn
• Cybersecurity & Digital Safety on LinkedIn
• BW Design Group Cybersecurity
• Craig Taylor on LinkedIn
• For 20% Off CyberHoot1st Year, mention Industrial Cybersecurity Insider
• Dino Busalachi on LinkedIn
• Craig Duckworth on LinkedIn

Thanks so much for joining us this week. Want to subscribe to Industrial Cybersecurity Insider? Have some feedback you’d like to share? Connect with us on Spotify, Apple Podcasts, and YouTube to leave us a review!

Detection got fast, but remediation didn't. And that gap is exactly where attackers live.

Manufacturers have spent the last decade building visibility into their plants: sensors, dashboards, alerts flying into every SOC. But knowing about a threat and fixing it are two different problems, and most industrial teams are still solving the second one at human speed. A ticket gets opened. A maintenance window gets scheduled. Three departments get looped in. Meanwhile, the attacker isn't waiting for anyone's approval.

In this episode, Craig Duckworth talks with Tal Kollender, founder and CEO of Remedio, about what's actually keeping industrial environments exposed: misconfigurations left untouched for months, unnecessary services quietly giving attackers a path to move laterally, and aging systems nobody wants to be the one to touch. Tal makes the case that patching alone will never close this gap and explains why safe automated remediation is becoming essential as AI accelerates attacks faster than most security teams can keep up.

They also dig into the reality of OT: uptime and safety come first, IT security tools often can't reach the controls layer, and the wrong change can cause real damage on the plant floor. It's a candid look at what it takes to align security and operations, and why building that trust is the real first step toward proactive protection instead of reactive cleanup.

If you're responsible for securing a plant floor, a fleet of facilities, or the budget behind either one, this conversation gives you a clear, practical way to think about closing the gap between seeing a threat and actually stopping one.

Chapters:

• (00:00:00) Why machine speed detection needs machine speed remediation
• (00:01:00) Tal’s path from teenage hacker to cybersecurity founder
• (00:06:00) Misconfigurations and lateral movement in industrial environments
• (00:11:00) Why patching and configuration changes are difficult in OT
• (00:15:00) Moving from reactive detection to proactive hardening
• (00:17:00) Aligning people, process, and technology
• (00:22:00) AI adoption, unmanaged risk, and doing more with less
• (00:25:00) Bridging the IT and OT divide without disrupting operations
• (00:29:00) The first practical step toward proactive industrial security

Links And Resources:

• Want to Sponsor an episode or be a Guest? Reach out here.
• Industrial Cybersecurity Insider on LinkedIn
• Cybersecurity & Digital Safety on LinkedIn
• BW Design Group Cybersecurity
• Tal Kollender on LinkedIn
• Dino Busalachi on LinkedIn
• Craig Duckworth on LinkedIn

Thanks so much for joining us this week. Want to subscribe to Industrial Cybersecurity Insider? Have some feedback you’d like to share? Connect with us on Spotify, Apple Podcasts, and YouTube to leave us a review!

Cybersecurity in an industrial environment isn't just an IT concern. It's a question of whether the business can keep operating, and whether people stay safe when systems fail.

Craig Duckworth talks with Tim Hoffman, a former NSA director of threat intelligence whose career spans military intelligence, defense, healthcare, finance, critical infrastructure, and industrial operations.

They discuss why CMMC needs to be treated as a cultural shift rather than a compliance exercise, how CISOs earn trust with plant teams, and why leaders have to translate cyber risk into terms the board actually understands.

Tim explains why tools alone can't protect OT. Craig ties digital safety back to the drills and routines plants already run. And together they look at where AI helps, where it adds risk, and why two fundamentals still matter most: clear processes and the discipline to practice them.

Chapters:

• (00:00:00) Why Security Tools Cannot Solve Operational Risk
• (00:01:00) Lessons from an NSA and Mission Critical Security Career
• (00:05:00) Why CMMC Must Be More Than a Compliance Checklist
• (00:08:00) Closing the Authority Gap Between IT and OT
• (00:12:00) Translating Cyber Risk Into Cost and Human Consequences
• (00:17:00) Why OT Security Demands More Than IT Tools
• (00:19:00) AI, Faster Attacks, and the Need for Human Judgment
• (00:25:00) Start With Process and Build the Discipline to Follow It
• (00:27:00) Treating Cyber Response Like a Plant Safety Drill
• (00:31:00) People and Process Come Before Technology

Links And Resources:

• Want to Sponsor an episode or be a Guest? Reach out here.
• Industrial Cybersecurity Insider on LinkedIn
• Cybersecurity & Digital Safety on LinkedIn
• BW Design Group Cybersecurity
• Tim Hoffman on LinkedIn
• Dino Busalachi on LinkedIn
• Craig Duckworth on LinkedIn

Thanks so much for joining us this week. Want to subscribe to Industrial Cybersecurity Insider? Have some feedback you’d like to share? Connect with us on Spotify, Apple Podcasts, and YouTube to leave us a review!

The air gap you're counting on probably isn't there. Dino Busalacchi sits down with cybersecurity veteran and Tulane University Cybersecurity Professor Joshua Copeland, to talk about the realities of protecting industrial environments, where uptime, safety, and production come first.

They dig into why legacy systems can't be secured like IT, how routine security tasks can disrupt physical operations, the leadership gap between IT and OT, and why cybersecurity needs to be treated as digital safety. A practical listen for CISOs, CIOs, engineering leaders, and plant operators.

Chapters:

• (00:00:00) Why operational technology is critical to everyday life
• (00:03:00) Legacy systems and the hidden opportunity in OT security
• (00:07:00) Ransomware, AI, and attacks designed for physical outcomes
• (00:10:00) How standard IT security tools can stop production
• (00:13:00) What cybersecurity events get wrong about OT
• (00:16:00) The leadership gap and the myth of isolated systems
• (00:20:00) Why cybersecurity should be treated as digital safety
• (00:23:00) Compliance, asset inventory, and aging industrial equipment
• (00:27:00) Building the next generation of OT security professionals
• (00:31:00) Why every part of modern life depends on OT

Links And Resources:

• Want to Sponsor an episode or be a Guest? Reach out here.
• Industrial Cybersecurity Insider on LinkedIn
• Cybersecurity & Digital Safety on LinkedIn
• BW Design Group Cybersecurity
• Josh Copeland on LinkedIn
• Dino Busalachi on LinkedIn
• Craig Duckworth on LinkedIn

Thanks so much for joining us this week. Want to subscribe to Industrial Cybersecurity Insider? Have some feedback you’d like to share? Connect with us on Spotify, Apple Podcasts, and YouTube to leave us a review!

Craig Duckworth sits down with Jowanza Joseph, CEO of Parakeet Risk, to unpack why third-party risk has become one of the most urgent challenges facing manufacturers and critical infrastructure operators.

Jowanza spent 15 years in engineering roles at Adobe, Pluralsight, and MasterCard before founding Parakeet Risk to serve an industrial sector he saw as the most underserved when it comes to technology.

Together they address why simply knowing who your vendors are is harder than it sounds, how insurers are moving past checkbox questionnaires and demanding real evidence of controls, and what happens when contracts require you to identify a new asset in your OT environment within five minutes.

They also get honest about the organizational problem few want to own: security leaders who carry responsibility for the plant floor without the authority to change anything on it. Jowanza closes with a practical, low-cost starting point for any organization and a look at where vendor attestation is headed over the next five years.

Chapters:

• (00:00:00) Why industrial companies must become cybersecurity companies
• (00:02:08) Cataloging and prioritizing your most dangerous vendors
• (00:04:37) The hidden layers of subcontractors in your supply chain
• (00:06:42) Cyber insurance moves past the checkbox era
• (00:10:47) Contracts that demand new asset identification in five minutes
• (00:12:58) AI is multiplying vulnerabilities faster than solutions
• (00:16:31) Three hallmarks of a strong third party risk program
• (00:21:14) Incident response, game days, and who falls on the sword
• (00:23:42) Responsibility without authority across the IT and OT divide
• (00:28:31) Where to start today and the future of vendor attestation

Links And Resources:

• Want to Sponsor an episode or be a Guest? Reach out here.
• Industrial Cybersecurity Insider on LinkedIn
• Cybersecurity & Digital Safety on LinkedIn
• BW Design Group Cybersecurity
• Dino Busalachi on LinkedIn
• Craig Duckworth on LinkedIn

Thanks so much for joining us this week. Want to subscribe to Industrial Cybersecurity Insider? Have some feedback you’d like to share? Connect with us on Spotify, Apple Podcasts, and YouTube to leave us a review!

Two global dairy producers made headlines this week after breaches that started with third party vendors.

Dino and Craig break down how it happened and why it keeps happening. They walk through the reality of remote access on the plant floor, from cellular modems to TeamViewer installs nobody remembers approving, and explain why a single sensor in a plant might show you 25 percent of your assets at best.

The conversation gets to the root of the problem: people, not technology.

OT teams still lock IT out of critical systems, CISOs carry responsibility without authority, and incident response plans rarely account for the integrators working across multiple plants at any given moment.

If you lead security for a manufacturing organization, this episode arms you with the tough questions to bring back to leadership before your company is the one filing with the SEC.

Chapters:

• (00:00:00) - The CISO gets hung out to dry, not the third-party vendor
• (00:01:02) - Two global dairy producers breached through third-party vendors
• (00:02:12) - The messy reality of remote access on the plant floor
• (00:03:47) - Why IT has no visibility into what's connected in manufacturing
• (00:05:29) - North-south versus east-west traffic monitoring
• (00:06:41) - The culture problem of OT locking IT out
• (00:08:14) - Responsibility versus authority for CISOs
• (00:10:47) - The budget excuse and the real cost of downtime
• (00:14:32) - Incident response plans that leave system integrators out
• (00:18:56) - SEC filings, brand damage, and the tough questions to ask

Links And Resources:

• Want to Sponsor an episode or be a Guest? Reach out here.
• Industrial Cybersecurity Insider on LinkedIn
• Cybersecurity & Digital Safety on LinkedIn
• BW Design Group Cybersecurity
• Dino Busalachi on LinkedIn
• Craig Duckworth on LinkedIn

Thanks so much for joining us this week. Want to subscribe to Industrial Cybersecurity Insider? Have some feedback you’d like to share? Connect with us on Spotify, Apple Podcasts, and YouTube to leave us a review!

For industrial leaders responsible for keeping plants productive, connected, and secure, cybersecurity cannot sit only with IT.

Robert Maxwell joins Dino to address the leadership and operational gaps that leave OT environments exposed, especially when aging control systems, diverse automation platforms, and decentralized plant operations are part of the picture.

They discuss what it takes to move beyond fragmented ownership and point solutions: giving an accountable leader the authority to coordinate security across IT, OT, engineering, operations, and outside partners.

The conversation covers practical priorities for building a durable cyber program, including organization-wide awareness, stronger visibility into industrial assets, and a security strategy that can keep pace with AI adoption.

The takeaway is clear: cybersecurity is an operational investment that protects uptime, production, and long-term business resilience.

Chapters:

• (00:00:00) Cybersecurity is a management responsibility
• (00:01:00) Robert Maxwell’s journey into cybersecurity
• (00:04:35) Why organizations need a clear cybersecurity owner
• (00:08:40) Building a long-term security strategy across the business
• (00:12:00) What happens when companies ignore cybersecurity
• (00:14:10) Why vendor-led security programs fall short
• (00:17:05) The IT and OT divide in manufacturing
• (00:20:00) AI, data protection, and the growing security challenge
• (00:23:25) Visibility gaps across manufacturing plants
• (00:26:20) Why leaders should view cybersecurity as an investment

Links And Resources:

• Want to Sponsor an episode or be a Guest? Reach out here.
• Industrial Cybersecurity Insider on LinkedIn
• Cybersecurity & Digital Safety on LinkedIn
• BW Design Group Cybersecurity
• Robert Maxwell on LinkedIn
• Dino Busalachi on LinkedIn
• Craig Duckworth on LinkedIn

Thanks so much for joining us this week. Want to subscribe to Industrial Cybersecurity Insider? Have some feedback you’d like to share? Connect with us on Spotify, Apple Podcasts, and YouTube to leave us a review!

This week we're bringing back one of our most requested episodes, because the problem it covers hasn't gone away.

Dino and Jim break down one of the most dangerous assumptions in industrial security: that OT environments are air-gapped and therefore safe.

Through real examples from actual plant floors, they show exactly how that assumption falls apart, from cellular modems inside machine centers to third-party technicians on guest Wi-Fi to VPN concentrators IT doesn't know exist, and explain why the gap between IT and OT teams is just as much an organizational problem as a technical one.

They also get into why point-in-time assessments aren't enough, where zero trust runs into its limits in industrial settings, and what continuous visibility on the plant floor actually looks like. If you're responsible for securing manufacturing or critical infrastructure, this one is as relevant today as when it was first recorded.

Chapters:

• (00:00:00) - The Air Gap Myth: Introduction
• (00:03:00) - How OT Devices End Up Connected Without IT Knowing
• (00:07:00) - Why Plant Managers Bypass IT Security
• (00:12:00) - The Compliance and Insurance Stakes
• (00:15:00) - Why Zero Trust Struggles in OT Environments
• (00:17:00) - Bringing in Outside Experts to Find the Truth
• (00:20:00) - Supply Chain and Hidden Connectivity
• (00:24:00) - What Visibility Tools Reveal on the Plant Floor
• (00:26:00) - Wrap-Up: Trust But Verify, Then Monitor Continuously

Links And Resources:

• Want to Sponsor an episode or be a Guest? Reach out here.
• Industrial Cybersecurity Insider on LinkedIn
• Cybersecurity & Digital Safety on LinkedIn
• BW Design Group Cybersecurity
• Dino Busalachi on LinkedIn
• Craig Duckworth on LinkedIn

Thanks so much for joining us this week. Want to subscribe to Industrial Cybersecurity Insider? Have some feedback you’d like to share? Connect with us on Spotify, Apple Podcasts, and YouTube to leave us a review!

Craig and Jim revisit one of their most practical conversations: how to build a compelling business case for OT cybersecurity budget.

They break down the IT/OT ownership gap that leaves manufacturers exposed, explain how to frame liability, physical risk, and financial impact in language executives actually care about, and walk through the options every organization faces.

From doing nothing to running a proof-of-concept pilot site that generates real, quantifiable data. They also tackle the role of cybersecurity insurance, why every company needs OT on its risk register, and how the concept of technology debt can finally help leadership understand the cost of decades of deferred OT security investment.

Whether you're approaching this from the IT side, the OT side, or somewhere in between, this episode gives you the framework to start the budget conversation before a breach forces it.

Chapters:

• (00:00:00) - Introduction: The High Stakes of OT Cybersecurity
• (00:01:00) - Why Budgeting for OT Security Is So Difficult
• (00:04:00) - How to Get Executives to Actually Listen
• (00:06:00) - Liability: Speaking the Language of Leadership
• (00:11:00) - Building Your OT Cybersecurity Business Case
• (00:13:00) - Ownership and Visibility: The First Questions to Ask
• (00:17:00) - Proof of Concept: Using Real Data to Drive Decisions
• (00:20:00) - Cybersecurity Insurance and the Third Leg of the Stool
• (00:26:00) - Risk Management, Roadmaps, and Playing the Long Game
• (00:31:00) - Technology Debt and Final Takeaways

Links And Resources:

• Want to Sponsor an episode or be a Guest? Reach out here.
• Industrial Cybersecurity Insider on LinkedIn
• Cybersecurity & Digital Safety on LinkedIn
• BW Design Group Cybersecurity
• Dino Busalachi on LinkedIn
• Craig Duckworth on LinkedIn
• Jim Cook on LinkedIn

Thanks so much for joining us this week. Want to subscribe to Industrial Cybersecurity Insider? Have some feedback you’d like to share? Connect with us on Spotify, Apple Podcasts, and YouTube to leave us a review!

Who actually owns OT cybersecurity? And when something breaks, who's accountable?

In this episode, Craig and Dino tackle a question most manufacturing organizations still haven't answered.

They address why CISOs are often handed responsibility for OT security without the authority to act on it, and how plants can score "green" on a compliance dashboard while remaining blind to 80% of their actual assets.

They also dig into the role OEMs and system integrators should be playing in building security into project proposals from day one, and why most still aren't.

From virtual patching for legacy systems that can't be touched, to the fast-growing OT security market, this is a grounded conversation for plant leaders, engineers, and security teams trying to close the gap between IT and OT.

Chapters:

• (00:00:00) - Who Really Owns OT Cybersecurity?
• (00:02:00) - Asset Owners Bear the Ultimate Responsibility
• (00:04:00) - Responsibility Without Authority: The CISO's Dilemma
• (00:06:00) - Why OEMs and SIs Aren't Including Cybersecurity in Their Proposals
• (00:08:00) - The False Sense of Security Driving Dangerous Blind Spots
• (00:10:00) - How Organizations Claim "Green" While Missing 80% of Their Assets
• (00:13:00) - Half Measures vs. a Real OT Cybersecurity Strategy
• (00:16:00) - The Growing OT Security Market and Why Some Still Aren't Paying Attention
• (00:18:00) - Incident Response Drills and AI Accelerating the Threat Landscape
• (00:20:00) - Breaking Down the IT/OT Trust Barrier for Good

Links And Resources:

• Want to Sponsor an episode or be a Guest? Reach out here.
• Industrial Cybersecurity Insider on LinkedIn
• Cybersecurity & Digital Safety on LinkedIn
• BW Design Group Cybersecurity
• Dino Busalachi on LinkedIn
• Craig Duckworth on LinkedIn

Thanks so much for joining us this week. Want to subscribe to Industrial Cybersecurity Insider? Have some feedback you’d like to share? Connect with us on Spotify, Apple Podcasts, and YouTube to leave us a review!

Many manufacturers don't realize that an investment in OT Cybersecurity also enhances Control System Integrity.

In this rewind episode, Craig and Dino dig into why so many OT intrusion detection platforms get installed but never become truly operational.

They address what gets lost when IT owns the tool while OT owns the equipment, and why the word “cybersecurity” itself can stall progress the moment it lands on the plant floor.

They land on a question every CISO, plant leader, and engineering director should be asking right now: who at your sites actually knows how to use the tools you have already paid for, and how do you bring the OT ecosystem into the room before the next outage forces you to?

Chapters:

• (00:00:00) Cold Open: The Diagnostic Tool Sitting Unused in Your Plant
• (00:01:00) Shadow OT Versus Shadow IT and Why the Distinction Matters
• (00:02:30) Why IT Gets Left Out of Industrial Lifecycle Decisions
• (00:04:00) Reframing Cybersecurity as Control System Integrity
• (00:05:00) The 8:10 AM Production Shutdown Mystery
• (00:07:00) Three Rogue Servers Hiding in Plain Sight
• (00:08:00) A Brewery, a Misconfigured Module, and a Network No One Could Diagnose
• (00:10:00) Buying an MRI Machine and Refusing to Turn It On
• (00:12:00) Bringing the OT Ecosystem to the Table
• (00:15:00) Why IT Needs New Friends in Manufacturing

Links And Resources:

• Want to Sponsor an episode or be a Guest? Reach out here.
• Industrial Cybersecurity Insider on LinkedIn
• Cybersecurity & Digital Safety on LinkedIn
• BW Design Group Cybersecurity
• Dino Busalachi on LinkedIn
• Craig Duckworth on LinkedIn

Thanks so much for joining us this week. Want to subscribe to Industrial Cybersecurity Insider? Have some feedback you’d like to share? Connect with us on Spotify, Apple Podcasts, and YouTube to leave us a review!

Craig and Dino dig into the widening gap between IT and OT and why the plant floor keeps getting left behind.

They break down what Dragos ' acquisition of Phosphorus signals for the future of IoT security in manufacturing, from cameras and label printers to X-ray inspection systems that ship with default passwords and almost never get patched.

The conversation gets sharp on artificial intelligence: the same models helping plants work smarter are now lowering the barrier for attackers, putting Stuxnet-style capabilities into the hands of people who lack the resources and sophistication that nation states once needed.

Craig and Dino expose the everyday habits that leave operations vulnerable, including system integrators plugging personal laptops straight into production networks, locked USB ports that solve only half the problem, and remote access so wide open that a single entry point can expose an entire plant.

They argue that nobody truly owns OT cyber hygiene, that frameworks like IEC 62443 and the NIST 800 82 series get named in RFPs but rarely enforced, and that leaders keep tripping over dollars to pick up nickels by choosing the cheapest bid over real protection.

It's a candid, experience-driven look at why industrial security moves so slowly and what plant leaders, engineers, and security teams can actually do about it.

Chapters:

• (00:00:00) - AI Enters the OT Battlefield
• (00:01:30) - Why IoT Is Creeping Onto the Plant Floor
• (00:03:30) - Printers, Cameras, and the Default Passwords Nobody Owns
• (00:06:00) - Dragos, Phosphorus, and the Managed Services Question
• (00:08:00) - How AI Lowers the Bar for Attacking Control Systems
• (00:09:40) - Stuxnet Then vs. AI-Powered Attacks Now
• (00:12:00) - The Laptop in the Plant: Contractors, USBs, and Open Networks
• (00:16:00) - Frameworks on Paper vs. Reality (IEC 62443 & NIST 800-82)
• (00:19:00) - Tripping Over Dollars to Pick Up Nickels
• (00:24:00) - Short-Tenure CISOs and Why You Shouldn't Go It Alone

Links And Resources:

• Want to Sponsor an episode or be a Guest? Reach out here.
• Industrial Cybersecurity Insider on LinkedIn
• Cybersecurity & Digital Safety on LinkedIn
• BW Design Group Cybersecurity
• Dino Busalachi on LinkedIn
• Craig Duckworth on LinkedIn

Thanks so much for joining us this week. Want to subscribe to Industrial Cybersecurity Insider? Have some feedback you’d like to share? Connect with us on Spotify, Apple Podcasts, and YouTube to leave us a review!