Industrial Cybersecurity Insider

Your plant can be running exactly as expected and still have blind spots that put production, process, and people at risk. Dino Busalachi and Kevin Kumpf break down the gaps most leaders never see: new equipment arriving with outdated firmware, vendors making changes nobody tracks, and process data that gets collected but rarely watched. Using refrigeration systems and manufacturing floors as examples, they show why monitoring has to connect security with uptime, maintenance, and the cost of a missed warning. They also challenge the belief that encryption or network isolation is enough, explain where AI helps and where it still needs human judgment, and make the case for getting integrators, OEMs, IT, and operations into the same conversation. Three questions every plant leader should be able to answer: Do you know what normal looks like in your plant? Who can change it? And who will notice when something starts to drift? Follow Industrial Cybersecurity Insider for practical conversations on protecting production, people, and uptime. Chapters: (00:00:00) Why OT Attacks Put Business Continuity at Risk (00:03:00) Industrial Network Design and the Visibility Gap (00:07:00) Vendor Access, AI Data Collection, and Third Party Risk (00:10:00) Outdated Firmware and Accountable Remote Maintenance (00:13:00) Why AI Patching Needs Human Oversight in OT (00:17:00) Process Data, Industrial Espionage, and Operational Value (00:23:00) Choosing Integrators Who Understand Your Plant (00:28:00) Building Monitoring Into New Equipment and Projects (00:34:00) Backup Gaps and the Case for Managed OT Services (00:38:00) Getting IT and OT to Share Responsibility Links And Resources: Want to Sponsor an episode or be a Guest? Reach out here. Industrial Cybersecurity Insider on LinkedIn Cybersecurity & Digital Safety on LinkedIn BW Design Group Cybersecurity Dino Busalachi on LinkedIn Craig Duckworth on LinkedIn Thanks so much for joining us this week. Want to subscribe to Industrial Cybersecurity Insider? Have some feedback you’d like to share? Connect with us on Spotify, Apple Podcasts, and YouTube to leave us a review!

Most manufacturers have an incident response plan. Few have tested it at 2 AM on a Sunday, with a skeleton crew and the people who know the equipment best nowhere to be found. Fresh from the ICS Cybersecurity Conference in Nashville, Craig Duckworth and Dino Busalachi compare notes on what keeps industrial organizations from being ready for a real attack. The risk today goes beyond ransomware. It's attackers who blend into normal plant activity, process data that quietly exposes your intellectual property, security tools that never get used after the sale, and teams that still work in separate camps. Craig and Dino talk through why IT, plant floor teams, system integrators, and equipment builders need to operate as one technology team, why new projects are the best place to build security in, and why passing an audit is not the same as being secure. They also look at how AI is speeding up both attacks and defenses, leaving manufacturers less time to react. If you lead a plant, an engineering team, or a security program, this conversation will help you answer one question: if your plant was hit tonight, who makes the first call and who's on the other end receiving the call? Listen now and share it with the people who own your plant floor. Chapters: 00:00:00 Incident response plans must work outside office hours 00:01:00 Inside the OTICS Cyber Security Conference 00:02:00 Threat actors living in the normal 00:04:00 Why process data can expose intellectual property 00:07:00 The gap between tools, skills, and operating practice 00:08:00 Moving beyond the IT and OT divide 00:11:00 Why technology adoption matters after the sale 00:12:00 Building security into projects from the start 00:15:00 Defense in depth and protecting critical assets 00:17:00 Practicing incident response when it counts 00:19:00 Bringing integrators and asset owners to the table 00:20:00 Authority, accountability, and the CISO challenge 00:23:00 CMMC, continuous monitoring, and process data 00:24:00 Artificial intelligence changes the threat timeline 00:27:00 Asset discovery and security baselines 00:29:00 Checking a box versus improving the environment 00:32:00 Staying ahead through collaboration and readiness Links And Resources: Want to Sponsor an episode or be a Guest? Reach out here. Industrial Cybersecurity Insider on LinkedIn Cybersecurity & Digital Safety on LinkedIn BW Design Group Cybersecurity Dino Busalachi on LinkedIn Craig Duckworth on LinkedIn Thanks so much for joining us this week. Want to subscribe to Industrial Cybersecurity Insider? Have some feedback you’d like to share? Connect with us on Spotify, Apple Podcasts, and YouTube to leave us a review!

You passed the audit. The tools are installed. None of it means your plant is secure. Most industrial cybersecurity plans are written far from the equipment they're meant to protect. The tools are purchased but never fully operationalized. Critical equipment stays unseen. And the plant teams who know it best are the last to see the data. In this compilation episode, Craig Duckworth, Dino Busalachi, and Ian Bramson of Black & Veatch cover: Why security tools sit unused, and what that costs Why plant teams need access to security data What real IT and OT collaboration looks like Who responds first when something goes wrong Why compliance isn't security How to prioritize risk while protecting safety and uptime Strong security programs are built with the people closest to the equipment. Is yours? Chapters: (00:00:00) The hidden gap in OT asset visibility (00:04:00) Why plant teams need access to security data (00:08:00) The cost of an unoperationalized cybersecurity tool (00:10:00) What IT and OT convergence really means (00:14:00) Bringing system integrators into the conversation (00:18:00) Who responds first when an industrial incident happens (00:22:00) Compliance, residual risk, and real world security (00:26:00) Risk prioritization for utilities and industrial operators (00:30:00) Build security into new projects from the start Links And Resources: Want to Sponsor an episode or be a Guest? Reach out here. Industrial Cybersecurity Insider on LinkedIn Cybersecurity & Digital Safety on LinkedIn BW Design Group Cybersecurity Dino Busalachi on LinkedIn Craig Duckworth on LinkedIn Thanks so much for joining us this week. Want to subscribe to Industrial Cybersecurity Insider? Have some feedback you’d like to share? Connect with us on Spotify, Apple Podcasts, and YouTube to leave us a review!

Dino sits down with Matt Pike of Rockwell Automation for an honest conversation about why industrial cybersecurity still stalls out inside so many plants, and it has very little to do with technology. Matt walks through his path from onsite IT support at a large automotive manufacturer into OT security, and explains why modern security principles keep colliding with legacy systems that were built to run untouched for fifteen or twenty years. The two dig into the real reason the IT and OT gap has not closed, why CISOs often reach for a familiar tool instead of a strategy, and how Rockwell approaches visibility in a fully vendor agnostic way across Siemens, Honeywell, Emerson and everything else sitting on a plant floor. They also get practical about the pieces most teams skip: secure by design language inside RFQs and integrator contracts, response and recovery plans that almost nobody has written, and the funding question of who actually pays for security when a capital project lands. Matt shares what he is seeing from attackers using AI to speed up reconnaissance and rewrite ransomware around detection, and why the air gap most plants believe in disappears the moment data reaches a historian. His closing advice cuts through the noise: stop buying tools and start with an asset visibility strategy, because you cannot secure what you have never actually seen. Chapters: (00:00:00) Matt Pike's path from IT support into OT security (00:03:00) Why the IT and OT gap still has not closed (00:06:00) When leadership thinks a tool will fix a people problem (00:09:30) Vendor agnostic visibility down to the asset layer (00:11:00) Secure by design on greenfield and brownfield projects (00:14:00) The incident response plan nobody wrote (00:17:30) AI on the plant floor and what it actually requires (00:20:00) How attackers are already using AI (00:22:30) The air gap myth and east/west blind spots (00:27:30) Funding security through the capital project Links And Resources: Want to Sponsor an episode or be a Guest? Reach out here. Industrial Cybersecurity Insider on LinkedIn Cybersecurity & Digital Safety on LinkedIn BW Design Group Cybersecurity Dino Busalachi on LinkedIn Craig Duckworth on LinkedIn Thanks so much for joining us this week. Want to subscribe to Industrial Cybersecurity Insider? Have some feedback you’d like to share? Connect with us on Spotify, Apple Podcasts, and YouTube to leave us a review!

Safety starts with a goal. So should cybersecurity. Craig Duckworth sits down with Shankar Somasundaram, CEO of Asimily and former head of Symantec's IoT business, to explain why plant floor cybersecurity is a safety issue, not an IT expense. They cover why industrial cybersecurity programs stall after the tool is purchased, how to start with a goal instead of a solution, and why fixing the biggest risks first beats trying to secure everything at once. The conversation also covers network segmentation mistakes, AI as both a helper and a new threat to critical infrastructure, protecting legacy OT and IoT equipment without disrupting production, watching traffic inside the plant, what drives cybersecurity maturity, and what OT security market consolidation means for manufacturers. Shankar's three takeaways for your next budget cycle: Cyber risk is safety risk Start with the goal Visibility and fixing the problem are one program, not two Chapters: (00:00:00) Cybersecurity is patient safety, operational safety, plant safety (00:00:45) Meet Shankar and the four pillars behind Asimily (00:03:50) Why OT security projects stall after the tool is purchased (00:06:20) Start with a goal, not a solution (00:09:20) Exposure management and the segmentation myths that slow teams down (00:11:45) AI as enabler and attacker inside critical infrastructure (00:15:40) Collecting data on legacy OT and IoT without disrupting operations (00:18:20) North south, east west, and the flow data most teams skip (00:20:00) Does maturity come from size, budget, or management (00:24:20) Consolidation in the OT market and the advice Shankar leaves behind Links And Resources: Want to Sponsor an episode or be a Guest? Reach out here. Industrial Cybersecurity Insider on LinkedIn Cybersecurity & Digital Safety on LinkedIn BW Design Group Cybersecurity Shankar Somasundaram on LinkedIn Asimily Dino Busalachi on LinkedIn Craig Duckworth on LinkedIn Thanks so much for joining us this week. Want to subscribe to Industrial Cybersecurity Insider? Have some feedback you’d like to share? Connect with us on Spotify, Apple Podcasts, and YouTube to leave us a review!