@BEERISAC: OT/ICS Security Podcast Playlist

Podcast: PrOTect It All (LS 28 · TOP 10% what is this?)
Episode: Sell the Value, Not the Fear: Funding OT Security and Getting Ready for Post-Quantum
Pub date: 2026-11-02

Get Podcast Transcript →
powered by Listen411 - fast audio-to-text and summarization

Work with Aaron: https://protectitallpod.com/work/

The book: https://protectitallpod.com/book/

This episode: https://protectitallpod.com/ep130/

The OT Security Starter Kit: https://protectitallpod.com/starter-kit/

You do not need to scare anyone to get OT security funded. Shaun Six, President of UTSI International, makes the case for selling the value instead of the fear.

Shaun spent about a decade on the operator side before his company fell into cybersecurity, and he and Aaron cover the ground in between: who is leaving the OT workforce and who is coming in, losing engineers to venture-funded apps, where to put the X and what OT expertise is actually worth, a one-page budget the board will read, and why a water district's cyber budget competes with a police cruiser. The last third is post-quantum readiness for long-lived control systems: pair the retiring expert with a junior, and build the inventories, including a cryptographic bill of materials, while you are out in the plant.

Key takeaway

You do not need to scare anyone to get OT security funded or understood. Put what you spent, what you got and what you are asking for on one page. Pair the people who are about to retire with the people who are just arriving and have them do the inventory together. And while you are out there, build the lists (including cryptographic) that tell you what is actually in the plant.

Chapters

0:00 Intro

0:19 Welcome and introduction

0:55 From oil and gas operator to CEO: how UTSI fell into cybersecurity

2:16 Deploying connected equipment, and learning the exposures later

3:54 Aaron: learning from the intern, and "stop when unsure"

7:34 Why OT people are humbler: the risk profile starts with people

9:33 The workforce gap: who is leaving and who is coming in

11:12 Quantum at the conference: a myth on one side, a research team on the other

12:46 Losing engineers to venture-funded apps

13:42 Getting people into OT: Mike Holcomb, ICS Village and community colleges

15:49 Entry level with five years of experience

17:00 Physical I/O on the show floor, and the pay problem

18:22 Maslow's hierarchy and the 16 critical infrastructure sectors

20:33 The value gap: the expert with the hammer, and the five-day assessment

24:38 Where to put the X, fixed price, and the three-day fix

26:57 Quantifying the value: a trusted advisor, not selling fear

28:42 The one-page budget for the board

29:42 Water districts and city council budgets

31:08 Selling availability and reliability, not "cyber"

33:09 Cyber safety is physical safety: educating the board

34:30 Water: a lower-cost assessment for utilities

36:07 How Shaun got into quantum: the box he could not test

37:29 A book for CISOs: quantum and cryptography for non-specialists

38:51 Why AI and quantum are accelerating each other

41:59 Timelines for post-quantum plans

43:47 "Moore's law is dead" and the book behind the term

44:06 Aaron: what should listeners ask their boards this budget season

45:01 Insurance, assessments and standard frameworks

45:48 Pair the retiring expert with a junior

47:32 Segmentation, deprecation and a migration you have tested

48:01 How to find Shaun and UTSI

50:34 Close

About the guest

Shaun Six is the President of UTSI International, a Houston-based leader in OT cybersecurity and ICS engineering. A recognized voice on OT innovation and quantum, Shaun is a frequent speaker and panelist at industry events and has spoken on quantum cryptography at several conferences. He has entered a joint venture with Quantum River to provide an entropy-as-a-service platform, including specialized blockchain technology services, and UTSI has partnered with SeQure Quantum to apply QRNG products in OT environments.

UTSI International: https://utsi.com/

UTSI on LinkedIn: https://www.linkedin.com/company/utsiinternational

Shaun on LinkedIn: https://www.linkedin.com/in/shaunsix/

A Practical Path to Post-Quantum Readiness in Operational Technology (Automation.com): https://www.automation.com/article/a-practical-path-post-quantum-readiness-operational-technology

What OMB Memorandum M-26-15 Requires for Your Agency's PQC Migration Plan: https://www.zscaler.com/blogs/product-insights/what-omb-memorandum-m-26-15-requires-your-agency-pqc-migration-plan

Post-Quantum Leadership: Knowledge and Practical Perspectives by Dr. Georgianna Shea and Adam C. Firestone, the book Shaun recommends for CISOs: https://www.amazon.com/dp/B0H3H72RHX

Quantum Supremacy: How the Quantum Computer Revolution Will Change Everything by Michio Kaku: https://www.amazon.com/dp/B0B8HCLTYY

Shaun's Grok deep dive, military facilities and 90-day self-sufficiency: https://grok.com/share/c2hhcmQtMw_71698ae4-f820-4205-862f-312b4dc36f38

Recent cold wallet hacks: https://www.google.com/search?q=cold+wallet+hack+recent

Recent cold wallet hacks, Ledger: https://www.google.com/search?q=cold+wallet+hack+recent+ledger

Learn more about PrOTect IT All:

Work with Aaron: https://protectitallpod.com/work/

The book: https://protectitallpod.com/book/

This episode: https://protectitallpod.com/ep130/

The OT Security Starter Kit: https://protectitallpod.com/starter-kit/

Support the show: https://protectitallpod.com/go/support/podcast

YouTube: https://www.youtube.com/@PrOTectITAll

Email: [email protected]

X: https://twitter.com/protectitall

Facebook: https://facebook.com/protectitallpodcast

To be a guest or suggest a guest or episode, email [email protected].

Please leave us a review on Apple or Spotify:

Apple: https://podcasts.apple.com/us/podcast/protect-it-all/id1727211124

Spotify: https://open.spotify.com/show/1Vvi0euj3rE8xObK0yvYi4

The podcast and artwork embedded on this page are from Aaron Crow | Operational Technology & Cybersecurity Host, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.

Podcast: Update verfügbar
Episode: #72 - Vernetztes Auto: Cybersicherheit auf vier Rädern – mit Richard Goebelt
Pub date: 2026-11-02

Get Podcast Transcript →
powered by Listen411 - fast audio-to-text and summarization

Bundeamt für Sicherheit in der Informationstechnik
Autos können heute selbstständig bremsen, einparken und mit Smartphones kommunizieren. Aber können sie auch gehackt werden? Je smarter unsere Fahrzeuge werden, desto wichtiger wird auch ihre Cybersicherheit. Moderne Autos sind Computer auf Rädern – und bieten damit eine Angriffsfläche. In dieser Folge von „Update verfügbar“ sprechen wir mit Richard Goebelt vom TÜV-Verband darüber, welche digitalen Risiken im Auto lauern, wie sicher unsere Daten dort sind und was wir selbst für mehr Schutz tun können.

Eine Folge über…
• Autos als rollende Computer
• neue Angriffsflächen durch Apps und Funkverbindungen
• Sicherheitsupdates über viele Fahrzeugjahre
• Datenschutz beim Koppeln des Handys
• Fahrassistenten und ihre Grenzen
• den digitalen Check bei der Hauptuntersuchung

Können eure Autos zur Zielscheibe für Hacker werden – und was könnt ihr dagegen tun? Jetzt reinhören.

Weiterführende Informationen:

Vernetztes Fahren – Chancen und Risiken: https://www.bsi.bund.de/DE/Themen/Verbraucherinnen-und-Verbraucher/Informationen-und-Empfehlungen/Internet-der-Dinge-Smart-leben/Vernetztes-Fahren/vernetztes-fahren_node.html

Branchenlagebild Cybersicherheit im Straßenverkehr: https://www.bsi.bund.de/SharedDocs/Downloads/DE/BSI/Publikationen/Branchenlagebild/Cybersicherheit_Strassenverkehr_2025.pdf?__blob=publicationFile&v=11

TÜV-Verband: https://www.tuev-verband.de/

Kontakt:
• Website https://www.bsi.bund.de/
• Instagram / bsi_bund

• Mastodon https://social.bund.de/@bsi
• E-Mail [email protected]

The podcast and artwork embedded on this page are from Bundesamt für Sicherheit in der Informationstechnik, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.

Podcast: Casos de Ciberseguridad Industrial
Episode: 1/4 Contexto del riesgo de la IA en la digitalización industrial
Pub date: 2026-11-02

Get Podcast Transcript →
powered by Listen411 - fast audio-to-text and summarization

En este episodio se aborda el cambio en el perfil de riesgo cuando las organizaciones industriales incorporan IA sobre procesos ya digitalizados, pasando de automatizar tareas a introducir sistemas que recomiendan, priorizan o apoyan decisiones.

The podcast and artwork embedded on this page are from Centro de Ciberseguridad Industrial, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.

Podcast: OT After Hours
Episode: Black October
Pub date: 2026-10-30

Get Podcast Transcript →
powered by Listen411 - fast audio-to-text and summarization

It has been quite the month for cybersecurity vulnerabilities, but is there more to it than the doom and gloom?
In this episode of OT After Hours, Ken Kully (Delivery Readiness at Rockwell Automation) is joined by Tyler Bergman (Manager, SecureOT Managed Services at Rockwell Automation) to discuss "Black October" and other scary cybersecurity stories.
Key Takeaways
Automation Fair And SecureOT Platform: Rockwell's Automation Fair in happening in Boston from November 16–19, 2026; it's a broad showcase of Rockwell Automation technologies, partners, robotics, educational efforts, and the SecureOT Platform.
Physical Security In Industrial Facilities: Can you envision walking into a gas plant unnoticed and finding a decommissioned control room containing powered-on workstations? Physical security is still an important OT control!
PHP Vulnerability And Availability Risk: Of course, we had to discuss the recent PHP vulnerability. Thus far, observed exploitation doesn't seem to quite match the fear and hype around "Black October," but it's good to be vigilant.
Embedded Software And SBOM Management: PHP vulnerabilities may affect applications indirectly through embedded web servers or bundled components, making software-bill-of-materials visibility, vendor coordination, and dependency management necessary for accurate exposure assessment.
AI-Accelerated Cybersecurity Arms Race: If "Black October" showed anything, it is that AI is an accelerator for both attackers and defenders, leading to faster vulnerability discovery and exploit development. OT cybersecurity teams will need to become more proactive about legacy assets and maintenance.
Subscribe
Follow and subscribe for more episodes on Apple Podcasts, Spotify, YouTube, or wherever you get your podcasts.
Get in Touch
🔗 LinkedIn | YouTube | X | Contact Us

The podcast and artwork embedded on this page are from Rockwell Automation, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.

Podcast: Nexus: A Claroty Podcast (LS 32 · TOP 5% what is this?)
Episode: Jake Braun on DEF CON Franklin, Water Cybersecurity
Pub date: 2026-10-28

Get Podcast Transcript →
powered by Listen411 - fast audio-to-text and summarization

Jake Braun, cofounder of DEF CON Franklin and former White House acting Principal Deputy National Cyber Director, joins the Nexus Podcast to discuss cybersecurity for water and wastewater utilities. 
DEF CON Franklin is a volunteer-driven program that connects security researchers and hackers associated with the DEF CON conference with U.S.-based water wastewater utilities and K-12 schools. This summer at DEF CON, DEF CON Franklin and the National Rural Water Association announced the Water Watch Center, which provides support to water utilities in the event of a breach. 
Jake explains how both initiatives are progressing, the cybersecurity challenges smaller water utilities face, and what the government can do to help from a policy and regulatory standpoint. 
Subscribe and listen to the Nexus Podcast here. 

The podcast and artwork embedded on this page are from Claroty, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.