Certified: The CompTIA SecOT+ Audio Course

This episode explains why indirect-impact events belong in OT security study, because OT outages often originate upstream in IT, suppliers, or shared services even when control networks remain technically untouched. You’ll learn how disruptions like ransomware, widespread IT compromise, supply chain tampering, or platform outages can halt operations through billing systems, scheduling, identity se...

This episode uses major OT incidents as learning instruments, focusing on what made them directly impactful to physical processes and what lessons translate into exam-ready security reasoning. You’ll analyze how these events demonstrate common patterns such as highly tailored targeting, deep understanding of industrial environments, and exploitation of trust relationships that were never designed...

 This episode teaches how to use structured threat intelligence frameworks to organize thinking and avoid reactive, headline-driven decisions in OT environments. You’ll learn what the Diamond Model is trying to capture by relating adversary, capability, infrastructure, and victim into a repeatable analytic picture, then connect that to how you build and validate hypotheses when evidence is incompl...

This episode explains the intelligence life cycle as a repeatable workflow that turns raw information into decisions, which helps you answer SecOT+ questions about process discipline and operationalization rather than just recognizing terms. You’ll learn the core phases of collection, analysis, dissemination, and feedback, and how each phase must be tailored for OT constraints like limited telemet...

This episode teaches threat intelligence foundations by explaining what different intelligence types deliver, how they are produced, and how to use them in OT without drowning in data that does not improve safety or resilience. You’ll learn the practical differences among strategic, operational, tactical, and technical intelligence, including who each type is for and what decisions it supports, fr...

This episode explains how to monitor and disposition risk after controls are implemented, because residual risk is never zero and the exam often tests whether you can keep decision-making disciplined over time. You’ll learn how to define residual risk in operational terms, including what remains possible despite controls, what conditions would increase exposure, and what indicators suggest that as...

This episode teaches how to operate a controls calendar so OT controls are tested, evidenced, and maintained on a predictable rhythm that supports both compliance and reliability without creating last-minute panic. You’ll learn why a calendar is more than dates on a page, because it defines who performs control checks, what evidence is collected, what systems are affected, and how activities align...

This episode explains inherited risk in OT as the portion of risk you carry because of upstream dependencies and shared services, which is a frequent blind spot when teams assume “we secured our network” but rely on systems they do not fully control. You’ll learn to distinguish what you directly own, such as local segmentation rules and site access governance, from what you inherit, such as enterp...

This episode teaches how to control and treat OT risk using controls catalogs, disciplined documentation, and clear acceptance criteria, which is core to making risk decisions auditable and sustainable. You’ll learn how to translate a risk statement into treatment options such as avoidance, mitigation, transfer, or acceptance, then select controls that match operational constraints and safety prio...

This episode explains how penetration testing and adversarial emulation work in OT environments where safety, uptime, and vendor constraints change what “testing” can responsibly mean, a nuance that exam questions often probe. You’ll learn the difference between a traditional pen test focused on vulnerability discovery and exploitation, and adversarial emulation focused on reproducing realistic at...

This episode teaches how to conduct architecture reviews for OT risk by focusing on data flows, trust boundaries, and weak links that create real-world compromise paths, which aligns closely with SecOT+ objectives around segmentation and defensible design. You’ll learn how to map functional flows such as control commands, telemetry, historian feeds, engineering changes, and remote support sessions...

This episode explains how to choose qualitative versus quantitative risk methods in OT without turning risk work into either hand-waving or false precision, a balance that the SecOT+ exam often tests through “best next step” decisions. You’ll learn when qualitative methods are the right tool, such as early program stages, limited data environments, and safety-driven decisions where conservative ju...

This episode teaches failure mode and criticality thinking in OT as a practical way to predict how small faults become large incidents, which is essential for SecOT+ questions that revolve around safe prioritization under uncertainty. You’ll learn how to break a system into components, identify plausible failure modes, and connect each failure to effects on safety, reliability, product quality, an...

This episode teaches how to evaluate third-party risk in OT, because integrators and remote support providers often have the access and authority that determines whether controls are enforceable or merely aspirational. You’ll learn how to identify third-party roles, what systems they touch, what credentials and pathways they use, and what shared responsibility actually means when something fails,...

This episode explains how to assess supply chain risk in OT with a focus on dependencies that can affect safety and uptime long before an organization realizes the risk is “cyber.” You’ll learn to evaluate hardware and firmware provenance, software update channels, licensing and activation dependencies, and the operational risk of vendor-only tools and proprietary protocols that can create single...

 This episode teaches scenario-based risk methods that focus on believable failure paths, because OT risk work is strongest when it mirrors how systems actually fail and how people actually respond under pressure. You’ll learn how to build a scenario from an initiating event, enabling conditions, and a path to impact, then identify where controls can break the chain without relying on perfect dete...

This episode explains how to identify the OT threat surface by combining technical exposure with operational context, because OT risk is shaped as much by access pathways and habits as it is by vulnerabilities. You’ll learn to separate vectors, such as remote access, removable media, vendor connections, wireless links, and IT-to-OT pivot paths, from exposure, such as weak authentication, flat netw...

This episode teaches how to scope OT risk assessments so the results are defensible, actionable, and aligned to how the plant actually works, which is a common weak spot in both real programs and exam scenarios. You’ll learn how to define scope using operational boundaries like units, cells, lines, sites, and shared services, then map those to network zones, conduits, remote access paths, and vend...

 This episode explains how to model likelihood and consequence in OT without pretending you have perfect data, because good risk decisions come from disciplined reasoning, not false precision. You’ll learn what “likelihood” means when incidents can be rare but impactful, and how to account for exposure, threat capability, existing controls, and operational conditions that make certain failures mor...

This episode teaches how OT risk assessment frameworks are applied in practice, so you can recognize what a scenario is asking for when it references structured risk work rather than ad hoc judgment. You’ll learn how NIST-style approaches emphasize repeatability, documented controls, and evidence-driven decision paths, while ISA/IEC approaches emphasize zones, conduits, and security levels aligned...

This episode explains how to create OT security documentation that people can actually use under pressure, because unreadable policies and vague procedures fail exactly when incidents and outages happen. You’ll learn the difference between policies that set intent, standards that define requirements, processes that describe repeatable workflows, and SOPs that guide step-by-step execution, then see...

This episode teaches how to determine OT asset criticality using operational reality rather than guesswork, because risk decisions depend on knowing what truly matters first. You’ll learn how to rank assets based on safety impact, production dependency, environmental consequence, recoverability, and the time sensitivity of control functions, so “critical” means something measurable. We connect cri...

This episode explains how to build OT security training that improves competence without turning daily operations into a compliance exercise that people avoid. You’ll learn how to distinguish awareness from skill, and how to tailor training to roles like operators, engineers, maintenance, and vendors so content matches what each group can actually influence. We connect training design to exam-rele...

This episode teaches how to measure OT security in a way that supports decisions, because poor metrics create false confidence, misdirect resources, and frustrate operations with reporting that does not reflect reality. You’ll learn the difference between metrics and measures, and why the most useful indicators tie directly to risk reduction, such as improved asset visibility, reduced unmanaged ac...

This episode explains how Memoranda of Understanding and Statements of Work support disciplined OT security execution by defining scope and deliverables clearly enough that operations are not surprised midstream. You’ll learn how an MOU typically frames collaboration and shared intent across organizations or internal groups, while an SOW specifies exactly what work will be performed, what artifact...