@BEERISAC: OT/ICS Security Podcast Playlist

Podcast: Industrial Cybersecurity Insider
Episode: Plant Floor Cybersecurity Starts at the Top. Not the Server Room, with Robert Maxwell
Pub date: 2026-07-22

Get Podcast Transcript →
powered by Listen411 - fast audio-to-text and summarization

For industrial leaders responsible for keeping plants productive, connected, and secure, cybersecurity cannot sit only with IT.
Robert Maxwell joins Dino to address the leadership and operational gaps that leave OT environments exposed, especially when aging control systems, diverse automation platforms, and decentralized plant operations are part of the picture.
They discuss what it takes to move beyond fragmented ownership and point solutions: giving an accountable leader the authority to coordinate security across IT, OT, engineering, operations, and outside partners.
The conversation covers practical priorities for building a durable cyber program, including organization-wide awareness, stronger visibility into industrial assets, and a security strategy that can keep pace with AI adoption.
The takeaway is clear: cybersecurity is an operational investment that protects uptime, production, and long-term business resilience.
Chapters:
(00:00:00) Cybersecurity is a management responsibility
(00:01:00) Robert Maxwell’s journey into cybersecurity
(00:04:35) Why organizations need a clear cybersecurity owner
(00:08:40) Building a long-term security strategy across the business
(00:12:00) What happens when companies ignore cybersecurity
(00:14:10) Why vendor-led security programs fall short
(00:17:05) The IT and OT divide in manufacturing
(00:20:00) AI, data protection, and the growing security challenge
(00:23:25) Visibility gaps across manufacturing plants
(00:26:20) Why leaders should view cybersecurity as an investment

Links And Resources:
Want to Sponsor an episode or be a Guest? Reach out here.
Industrial Cybersecurity Insider on LinkedIn
Cybersecurity & Digital Safety on LinkedIn
BW Design Group Cybersecurity
Robert Maxwell on LinkedIn
Dino Busalachi on LinkedIn
Craig Duckworth on LinkedIn

Thanks so much for joining us this week. Want to subscribe to Industrial Cybersecurity Insider? Have some feedback you’d like to share? Connect with us on Spotify, Apple Podcasts, and YouTube to leave us a review!

The podcast and artwork embedded on this page are from Industrial Cybersecurity Insider, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.

Podcast: OT Security Made Simple
Episode: One Security am Flughafen: Wie der BER hybride Bedrohungen und Komplexität meistert | OT Security Made Simple
Pub date: 2026-07-21

Get Podcast Transcript →
powered by Listen411 - fast audio-to-text and summarization

Klaus Mochalski und Oliver Braun (SVP Corporate Security am Flughafen BER) diskutieren die immense Komplexität der Flughafensicherheit. Erfahren Sie, warum bei hybriden Bedrohungen klassisches Silodenken versagt und physische Sicherheit sowie Cybersicherheit als "One Security" zwingend vereint werden müssen. Zudem erklärt Braun, weshalb reine Compliance-Security nicht ausreicht und wie KRITIS-Betreiber durch abteilungsübergreifendes Training echte Resilienz aufbauen.
Mehr zum Thema OT Security Made simple findet Ihr auf rhebo.com oder schreibt uns mit Euren Ideen, Fragen oder Gastvorschlägen an [email protected].  

The podcast and artwork embedded on this page are from Klaus Mochalski, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.

Podcast: PrOTect It All (LS 27 · TOP 10% what is this?)
Episode: Conficker Still Exists? The Hidden OT Malware Threat Putting Critical Infrastructure at Risk
Pub date: 2026-07-20

Get Podcast Transcript →
powered by Listen411 - fast audio-to-text and summarization

Some of the biggest cybersecurity threats to critical infrastructure aren't new - they've simply never gone away.

In this episode of Protect It All, host Aaron Crow welcomes back Lesley Carhart for a fascinating conversation about why decades-old malware like Conficker continues to infect operational technology (OT) environments around the world.

Drawing on nearly two decades of industrial incident response experience, they share real-world stories from the front lines of critical infrastructure, explaining why legacy systems, operational constraints, and workforce shortages continue to make remediation incredibly challenging. The discussion goes far beyond "just patch it," exploring the difficult risk decisions organizations face when uptime, safety, and cybersecurity all compete for priority.

Aaron and Lesley also examine one of the industry's most pressing issues: the growing shortage of OT cybersecurity talent and the need to rebuild foundational technical skills for the next generation of defenders. 

Key Learnings: 

Why malware like Conficker still exists in modern OT environments

The unique challenges of removing malware from industrial control systems

Why patching isn't always possible in operational technology

How legacy infrastructure creates long-term cybersecurity risk

The growing OT cybersecurity skills gap - and how the industry can address it

Practical lessons from real-world industrial incident response

Key Moments: 

05:47 Challenges with Old Industrial Systems

06:58 Struggles with malware cleanup

11:02 Challenges in Cyber Security Careers

16:19 Dealing with malware spread

17:53 Managing infection risk long-term

23:04 Challenges with nuclear hardware upgrades

27:05 Training the Next Tech Generation

29:33 Importance of Computer Basics

34:04 Discovering hidden technical issues

37:01 Troubleshooting in industrial environments

39:10 Malware and botnets era

42:20 Developing low-touch security solutions

Whether you're responsible for manufacturing, utilities, energy, transportation, or any critical infrastructure environment, this episode provides practical insight into one of OT cybersecurity's longest-running challenges.

Tune in to discover why yesterday's malware is still creating today's biggest industrial cybersecurity problems - and what organizations can do about it.

About the guest : 

Lesley Carhart is a Principal Industrial Incident Responder at Dragos and a recognized expert in OT and industrial cybersecurity. With nearly two decades of experience in incident response, digital forensics, and threat hunting, they help organizations defend critical infrastructure from cyber threats targeting industrial control systems. Lesley is also a respected speaker, instructor, and advocate for cybersecurity education, regularly sharing their expertise with industry professionals and the next generation of defenders.

How to connect Lesley: 

LinkedIn: https://www.linkedin.com/in/lcarhart/

Youtube: https://www.youtube.com/user/hacks4pancakes

Bluesky : https://bsky.app/profile/hacks4pancakes.com

Instagram: https://www.instagram.com/hacks4pancakes/

Website: https://tisiphone.net/

Learn more about PrOTect IT All:

Email: [email protected] 

Website: https://protectitallpod.com/ep115

X: https://twitter.com/protectitall 

YouTube: https://www.youtube.com/@PrOTectITAll 

FaceBook:  https://facebook.com/protectitallpodcast

To be a guest or suggest a guest/episode, please email us at [email protected]

Please leave us a review on Apple/Spotify Podcasts:

Apple   - https://podcasts.apple.com/us/podcast/protect-it-all/id1727211124

Spotify - https://open.spotify.com/show/1Vvi0euj3rE8xObK0yvYi4

The podcast and artwork embedded on this page are from Aaron Crow | Operational Technology & Cybersecurity Host, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.

Podcast: Industrial Cybersecurity Insider
Episode: Trust But Verify: Why Every Air-Gap Claim Deserves Scrutiny
Pub date: 2026-07-14

Get Podcast Transcript →
powered by Listen411 - fast audio-to-text and summarization

This week we're bringing back one of our most requested episodes, because the problem it covers hasn't gone away.
Dino and Jim break down one of the most dangerous assumptions in industrial security: that OT environments are air-gapped and therefore safe.
Through real examples from actual plant floors, they show exactly how that assumption falls apart, from cellular modems inside machine centers to third-party technicians on guest Wi-Fi to VPN concentrators IT doesn't know exist, and explain why the gap between IT and OT teams is just as much an organizational problem as a technical one.
They also get into why point-in-time assessments aren't enough, where zero trust runs into its limits in industrial settings, and what continuous visibility on the plant floor actually looks like. If you're responsible for securing manufacturing or critical infrastructure, this one is as relevant today as when it was first recorded.
Chapters:
(00:00:00) - The Air Gap Myth: Introduction
(00:03:00) - How OT Devices End Up Connected Without IT Knowing
(00:07:00) - Why Plant Managers Bypass IT Security
(00:12:00) - The Compliance and Insurance Stakes
(00:15:00) - Why Zero Trust Struggles in OT Environments
(00:17:00) - Bringing in Outside Experts to Find the Truth
(00:20:00) - Supply Chain and Hidden Connectivity
(00:24:00) - What Visibility Tools Reveal on the Plant Floor
(00:26:00) - Wrap-Up: Trust But Verify, Then Monitor Continuously

Links And Resources:
Want to Sponsor an episode or be a Guest? Reach out here.
Industrial Cybersecurity Insider on LinkedIn
Cybersecurity & Digital Safety on LinkedIn
BW Design Group Cybersecurity
Dino Busalachi on LinkedIn
Craig Duckworth on LinkedIn

Thanks so much for joining us this week. Want to subscribe to Industrial Cybersecurity Insider? Have some feedback you’d like to share? Connect with us on Spotify, Apple Podcasts, and YouTube to leave us a review!

The podcast and artwork embedded on this page are from Industrial Cybersecurity Insider, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.

Podcast: PrOTect It All (LS 27 · TOP 10% what is this?)
Episode: OT Cybersecurity: Why Trust Beats Technology | Jacob McCune | Ep 114
Pub date: 2026-07-13

Get Podcast Transcript →
powered by Listen411 - fast audio-to-text and summarization

The biggest challenge in OT cybersecurity isn't technology - it's earning trust.

In this episode of Protect It All, host Aaron Crow sits down with Jacob McCune, a cybersecurity architect with more than 20 years of hands-on experience across both IT and OT environments.

Jacob shares his unconventional journey from the help desk to securing critical infrastructure, highlighting the lessons that only real-world experience can teach. Together, Aaron and Jacob explore why communication, collaboration, and trust are often the deciding factors between successful cybersecurity programs and failed initiatives.

The conversation also dives into the future of OT security, examining how AI, cloud technologies, and evolving architectures are changing industrial environments and why organizations need to rethink traditional approaches while keeping operational realities front and center.

Key Learning: 

Why trust is the foundation of successful OT cybersecurity programs

How practical experience shapes better cybersecurity decisions

The importance of communication between IT, OT, and leadership teams

Why compliance alone doesn't guarantee security

How AI and cloud technologies are reshaping OT environments

What the future may look like beyond traditional industrial architectures

Key Moments: 

05:18 Building a Power Plant Team

09:06 Balancing cybersecurity with business needs

11:01 Avoiding project delays during downtime

16:04 Importance of Broad Experience

17:59 A mentor's lesson on teamwork

23:41 Challenges with job postings and requirements

26:27 Managing risk and resource challenges

29:59 Helping Your Compliance Team

33:12 Dad's long career and expertise

36:44 Discussing cybersecurity risk management

39:44 Cloud resources and AI discussions

41:08 Exploring future solutions and technologies

Whether you're building an OT security program, managing critical infrastructure, or looking to grow your cybersecurity career, this episode delivers practical lessons from years of real-world experience.

Tune in to discover why people, trust, and communication remain the most valuable assets in modern cybersecurity only on Protect It All.

About the guest: 

Jacob McCune is a cybersecurity architect with more than 20 years of experience across IT and OT environments, helping organizations secure critical infrastructure through practical, real-world security strategies. From starting his career on the help desk to designing enterprise security architectures, Jacob has built a reputation for bridging the gap between IT and OT through collaboration, communication, and trust. He is passionate about helping organizations move beyond compliance to build resilient cybersecurity programs that protect both people and operations.

Links to connect Jacob : 

LinkedIn: https://www.linkedin.com/in/jake-mccune-33a08984/ 

CornCon Cybersecurity Conference : https://corncon.net/

Learn more about PrOTect IT All:

Email: [email protected] 

Website: https://protectitallpod.com/ep114

X: https://twitter.com/protectitall 

YouTube: https://www.youtube.com/@PrOTectITAll 

FaceBook:  https://facebook.com/protectitallpodcast

To be a guest or suggest a guest/episode, please email us at [email protected]

Please leave us a review on Apple/Spotify Podcasts:

Apple   - https://podcasts.apple.com/us/podcast/protect-it-all/id1727211124

Spotify - https://open.spotify.com/show/1Vvi0euj3rE8xObK0yvYi4

The podcast and artwork embedded on this page are from Aaron Crow | Operational Technology & Cybersecurity Host, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.