ICS Pulse Podcast

For the second episode of our Cybersecurity Awareness Month podcast series, we welcomed back Mike Nelson, of CyberCX, to discuss avoiding scams, the real-world implications of cybersecurity and the realistic hacking scenes in “Mr. Robot."

For our special Cybersecurity Awareness Month podcast series, we welcomed back Carlos Buenano, CTO for OT at Armis, to discuss multifactor authentication, the impact of AI and why it’s essential to make cyber hygiene a habit.

Cyberattacks are inevitable, but too many organizations aren’t prepared. According to a new report by Rubrik, 96% of leaders are concerned their organizations will be unable to maintain business continuity if they experience an attack. In this podcast, we talk to Steve Stone, head of Zero Labs at Rubrik, about how to build cyber resilience in the face of attacks on OT and critical infrastructure.

At trade shows and conferences, companies are constantly boasting about their cyber solutions’ amazing features. But how do you cut through the marketing speak and figure out whether it's actually valuable for your company? In this podcast, we talk to Jeff Kramer of Aprio about how to filter through the marketing noise, the challenges of compliance frameworks and security in the cloud. 

According to the World Economic Forum, we need 3.4 million cybersecurity practitioners to support today’s global economy, but more than half of business and cybersecurity leaders report that they do not have enough people and skills. Lee McWhorter, CTO of Covered 6, joins us this week to discuss cybersecurity training and how to close the skills gap

For some, cybersecurity can still seem like magic, especially on the OT/ICS side. But if you break it down into its core components, anyone can get on the path to effective cybersecurity. This week, Leah Dodson of NextLink Labs joined us to discuss the importance of communication and the value of nonmagical thinking. 

When it comes to OT cybersecurity, too many companies are asking the same question: Where do we start? This week, Mike Nelson of CyberCX joined us to discuss the value of security testing, why organizational buy-in is essential and what companies can do to get started on OT security. Speaker: Mike Nelson, Director of Strategy and Consulting, CyberCX

Armis recently released research identifying the riskiest devices to the key critical infrastructure industries of manufacturing, utilities and transportation. And they’re not exactly easy to avoid. Carlos Buenaño of Armis talked to us about the new research, the impact of the XIoT and how to defend your systems. Speakers: Carlos Buenaño, Principal Systems Architect, Armis

Artificial intelligence is changing the nature of cybersecurity for both the defenders and the attackers. This week, Ethan Schmertzler of Dispel joined us to discuss the future of AI in cybersecurity, the ethical considerations around AI and AI’s scary impact on social engineering attacks. Guest: Ethan Schmertzler, CEO and Co-founder, Dispel

Legacy OT can create major hurdles when it comes to cybersecurity. While machines built to perform the same task for decades can be great for business, they can also be difficult to secure, as many were built before cybersecurity was even a concern. To close out Cybersecurity Awareness Month, we talk to Richard Robinson of Cynalytica about how to secure legacy OT networks and why taking an IT-cent...

Two-thirds of manufacturers believe their environment is too difficult to defend, and 86% admit manufacturing functions are running on outdated and unsupported legacy systems. Shishir Singh of Blackberry joined us to discuss his company’s new manufacturing cybersecurity study. Guest: Shishir Singh, EVP Product and CTO, Blackberry Cyber Security

MES systems can be targeted by attackers to gain unauthorized access to sensitive data, intellectual property and production processes. Sung Kim, of iBase-t, joined us to discuss why MES are prime attack vectors and what can be done about it. Guest: Sung Kim, Chief Product and Technology Officer, iBase-t

You should never trust strangers. This same concept applies when protecting your operational technology (OT) devices. Dennis Hackney, adjunct professor at Texas A&M University and cybersecurity practitioner, joins us to discuss zero trust in OT and how it applies to other standards. Guest: Dennis Hackney, adjunct professor, Texas A&M University

Need to get to the bottom of a hack or cyber issue? This week’s guest can find the answers. Lesley Carhart of Dragos joined us to discuss their unorthodox path to industrial cybersecurity, some buggy incident response stories and why cybersecurity needs to be more inclusive. Guest: Lesley Carhart, Director of ICS Cybersecurity Incident Response, Dragos

The cybersecurity market is booming, with new companies coming online regularly and heavy interest from venture capitalists and others in acquiring those companies. This week, Clint Bundy of the Bundy Group joined us to discuss why he’s bullish on the industrial cybersecurity market. Guest: Clint Bundy, Managing Director, Bundy Group

Organizations spend countless dollars and man hours hardening their systems against cyberattacks; however, it’s also essential to train employees to identify threats. This week, Debbie Gordon of Cloud Range discusses why employees play a vital role in keeping companies cyber safe. Guest: Debbie Gordon, CEO, Cloud Range

The Biden-Harris administration recently released their National Cybersecurity Strategy. This week, Jesus Molina of Waterfall Security joined us to discuss the new policy’s impact on critical infrastructure and the increasing physical consequences of cyberattacks. Guest: Jesus Molina, Director of Industrial IoT, Waterfall Security

Managing vulnerabilities on industrial devices can be a tedious and time consuming process. This week, Eric Byres of aDolus Technology discusses the use of artificial intelligence (AI) with managing vulnerabilities, as well as software bill of materials (SBOMS) and asset visibility. Guest: Eric Byres, CTO, aDolus Technology

Critical infrastructure is under attack like never before. The only way to protect it is through a public-private partnership, where both sides are working together for the common good. This week, Victor Atkins of 1898 and Co. talks critical infrastructure, regulations and IT/OT. Guest: Victor Atkins, Director of Executive Advisory Services, 1898 and Co.

In 2022, industrial facilities and organizations saw a continuous increase in cyberattacks year-over-year — especially ransomware. This week, we talk to Ben Miller of Dragos about Dragos’s 2023 Year in Review. Guest: Ben Miller, Vice President of Services, Dragos

With new government intervention in the cybersecurity space, discussion around vulnerabilities, risk management and SBOMs has increased. This week, we talk to Thomas Pace of Netrise about the state of cybersecurity. Guest: Tom Pace, CEO and co-founder, Netrise

While spending money to prevent an attack is a lot cheaper than the cost of remediating a successful attack, it can still be hard to get C-suite buy-in for increased cybersecurity, and especially an increased cybersecurity budget. This week, we talk to Matt Leipnik of Nexus Controls about getting C-suite buy-in. Read the article  here . Guest: Matt Leipnik, Lead Industrial Cybersecurity Specialis...

Companies spend countless dollars and man hours trying to keep outside attackers from breaching their systems, but what about attacks that come from the inside? This week, Moty Kanias of NanoLock discusses insider attacks and how you can protect yourself from them. Read the article  here . Guest: Moty Kanias, VP of Cyber Strategy and Alliances, NanoLock

There’s an old saying in cybersecurity: You cannot protect what you cannot see. Unfortunately, many organizations struggle to truly understand their environment. This week, Yair Attar of Otorio discusses why you need better asset management and how to get there Guest: Yair Attar, Co-founder and CTO, Otorio

The Department of Defense is rolling out the CMMC to help standardize cybersecurity for defense contractors and vendors. Why? Because we’re losing IP at “an insane rate.” In this week’s episode, Ryan Heidorn of Steel Root discusses what you need to know about the CMMC. Read the article  here . Guest: Ryan Heidorn, Managing Director, Steel Root