Cyber Brews - The Operational Technologies Podcast

Series 3 - Episode 4 In this episode of Cyber Brews, we dive into IEC 62443-2-1 Edition 2 and explore what the updated standard means for organisations building and managing cybersecurity programs within industrial and OT environments. We discuss the difference between a Cybersecurity Management System (CSMS) and a broader Security Program (SP), why the terminology matters, and how the latest edit...

Series 3 - Episode 3! Artificial Intelligence is rapidly becoming part of the industrial cyber landscape but is it strengthening critical infrastructure, or introducing entirely new risks? In this episode we explore the growing relationship between AI and OT security, discussing how organisations are beginning to rely on AI-driven technologies within critical infrastructure environments. We dive i...

Series 3 - Episode 2! The landscape of industrial cybersecurity guidance in the UK is evolving, and many organisations are now navigating the transition from HSE’s OG86 guidance to the more comprehensive IEC 62443 standard. In this episode of Cyber Brews, we explore what that shift really means for engineers, operators, and organisations responsible for industrial control systems and operational t...

Series 3 – Episode 1!2025 has been a year full of remarkable OT cybersecurity stories, and in this episode of Cyber Brews, we take you behind the scenes of the most impactful events in the industrial cyber world. From Jaguar Land Rover incidents to human-factor challenges in incident response planning, AI ransomware and defence-in-depth strategies, zero-day threats, and attackers embedding infoste...

Series 2 - Episode 8 CAF 4.0 – What’s Changed Since CAF 3.2? In this episode of Cyber Brews, we take a closer look at Cyber Assessment Framework (CAF) version 4 and explore how it differs from CAF 3.2. We talk through the key changes, what they mean in practice for organisations operating in ICS and OT environments, and how teams should start thinking about alignment, evidence, and assurance under...

’Twas the night before Patch-mas, when all through the plant, Not a system was stirring… or so we all thought. In this Cyber Brews Christmas Special, we put a cyber security spin on the classic ’Twas the Night Before Christmas tale. This festive episode tells a story from the world of I CS and OT security, where late-night alerts, unpatched systems, and seasonal good intentions collide. With humou...

Series 2 – Episode 7!When something goes wrong in the OT world, every second counts....but whatever happens, don’t panic . This months episode we take a look into incident response and recovery plans. We break down the essentials of Incident Response in Operational Technology environments — what it is, who needs to know about it, and why it matters — towel is optional. We discuss what makes a stro...

Something sinister is stirring in the systems… In this Cyber Brews Halloween Special, we dive into the true story behind one of the most chilling cyber incidents in industrial history the Triton malware attack. What began as a routine night in a control room turned into a digital nightmare, when rogue code infiltrated safety systems designed to prevent catastrophic industrial accidents. With a Hal...

Series 2 – Episode 6! This month’s brew takes a fresh look at the latest updates in IEC 62443-2-2:2025 — The standard that sets out requirements for industrial automation and control system security programs. If that sounds a bit dry, don’t worry — we’re serving it up in plain English, with a dash of Dave & Chris -style "banter". In this episode, we break down what’s new in the revis...

Series 2 – Episode 5! Cyber Brews: IEC-62443 Security Levels, Simplified? This month’s brew tackles the industrial cybersecurity standard that everyone talks about — but few really get : IEC 62443 . If you’ve ever felt lost in a sea of FRs, SRs, and SLs, you’re not alone. We’re here to break it down, coffee (or pint) in hand. In this episode, we unpack the core components of IEC 62443 — from Found...

Series 2 – Episode 4! Cyber Brews: Trust No One, Verify Everything (Zero Trust) This month’s brew dives into a game-changing security model that’s making waves in both IT and OT: Zero Trust . Forget the old perimeter mindset — in this episode, we explore why trust is no longer a security strategy , especially when it comes to protecting critical industrial systems. We kick off with a breakdown of...

Series 2 - Episode 3! Cyber Brews: CEOs meet CyberThis time, we’re flipping the script and taking cybersecurity straight to the top. That’s right — we’re talking senior management and the critical questions they need to be asking when it comes to protecting Operational Technology (OT). In this episode, we unpack the essential governance-level questions that help leaders understand their organizati...

Series 2 - Episode 2! Lets get Physical, Physical. I wanna get Physical... In this episode, we delve into the critical interplay between physical security and cyber security within Operational Technology (OT) environments. In this months episode we discuss the importance of well-defined physical security policies, robust perimeter controls, and effective access management to protect sensitive area...

Welcome everybody to Series 2 of Cyber Brews the series that tries to make OT Cyber–Security Interesting !! In this episode of Cyber Brews , we take a deep dive into the biggest cybersecurity stories we covered in 2024. From shocking insider threat statistics to the evolving tactics of ransomware groups like Ransomhub, we break down the key trends shaping the cyber landscape. We also revisit wild...

Welcome to the Final Episode of the Year—Episode Six! In this closing episode of 2024, we dive into the critical topic of management of change (MoC) in the context of OT cybersecurity. We kick things off with a look at the iconic failure of the Empire's Death Star and explore how its downfall can teach us valuable lessons for managing change in operational technology environments. In this Episode...

Welcome to Episode Five of Our Podcast! In this episode, we dive into the critical topic of Risk and Consequence in the context of OT cybersecurity. Here, we share our insights on cyber risks and the potential consequences organisations face. In This Episode, We Cover: Risk Assessment Basics : We discuss the foundations of cyber risk assessments, focusing on identifying deviations from normal oper...

Episode Four - NIS2 Unveiled: The Future of Cyber security Compliance. Welcome to Episode Four of our podcast! In this podcast episode, we delve into the NIS2 directive, which aims to enhance cyber security resilience in critical sectors across the European Union & and maybe even some of the UK! Investigate the facts behind the directive: Impact: Strengthening Cyber Defenses in Energy, Transpo...

We made it to Episode Three - Revenge of the OCG - Unveiling the Dark World of Organized Crime Groups in OT Cybersecurity. Welcome to Episode Three of our podcast! In this gripping episode, we dive deep into the shadowy realm of Organized Crime Groups (OCGs) within the Operational Technology (OT) sector. Discover the secrets behind: The intricate web of the OCG industry and its diverse services. T...

Our second episode (Woo), we dive into the topic of 'Creating a cyber security culture'. In this episode we look at how Cyber security is not just technical fixes. A cyber security culture is as important as it reflects the actions of the human which is normally the weakest link. This episode looks at: • What culture is • Organisational barriers • Developing a good cyber security culture

Cyber Brews looks to take the topic of cyber security in the OT domain and break it down into sizable chunks. This is our first episode (We are excited) dives into the Topic of cyber security ransomware in the OT industry. Join us as we explore the challenges, strategies, and solutions to safeguard critical infrastructure.