Rapid Recovery - When Security Fails [The Industrial Security Podcast]
We've been hacked. Everything is down. Or more mundane - there was a power surge and 5% of our cyber gear is fried. How do we get back into...
Radio and PodcastLive Radio & Podcasts
Technology
The Industrial Security Podcast
Your lights are on, your car runs, because industrial systems work 24/7 to keep our lives ticking. But what happens when those systems—the very pillars of modern society—are threatened?Hoste...
Episodes
20 of 148 episodesWe can't - and shouldn't - fix everything [The Industrial Security Podcast]
We know there are problems in our security systems, but we can't and shouldn't fix everything. What do we fix? Who decides? How do we explai...
Medical Device Cybersecurity Is Tricky [The Industrial Security Podcast]
Yes the device has to be safe to use on patients, and yes it has to produce its results reliably, but patient / data confidentiality is also...
Hardware Hacking - Essential OT Attack Knowledge [the industrial security podcast]
If you can touch it, you can hack it, usually. And having hacked it, you can often more easily find exploitable vulnerabilities. Marcel Rick...
Managing Risk with Digital Twins - What Do We Do Next? [the industrial security podcast]
Asset inventory, networks and router / firewall configurations, device criticality - a lot of information. How can we USE this information t...
I don't sign s**t [The Industrial Security Podcast]
We don't have budget to fix the problem, so we accept the risk? Tim McCreight of TaleCraft Security in his (coming soon) book "I don't sign...
NIS2 and the Cyber Resilience Act (CRA) [The Industrial Security Podcast]
NIS2 legislation is late in many EU countries, and the new CRA applies to most suppliers of industrial / OT computerized and software produc...
Network Duct Tape [The Industrial Security Podcast]
Hundreds of subsystems with the same IP addresses? Thousands of legacy devices with no modern encryption or other security? Constant, acquis...
Credibility, not Likelihood [The Industrial Security Podcast]
Safety defines cybersecurity - Kenneth Titlestad of Omny joins us to explore safety, risk, likelihood, credibility, and deterministic / unha...
Lessons Learned From Incident Response [The Industrial Security Podcast]
How did they get in? How did we find them when they got in? What can we do in future to clean up the mess faster? Chris Sistrunk reflects on...
Experience & Challenges Using Asset Inventory Tools [The Industrial Security Podcast]
Asset inventory tools have become almost ubiquitous as main offerings or add-ons to OT security solutions. In this episode, Brian Derrico of...
Needles in Haystacks - Recruiting OT Incident Responders [The Industrial Security Podcast]
Industrial incidents can be cyber attacks, or equipment failures, or physical equipment leaking product because of metal fatigue or incorrec...
Would You Rather Use a Control System That's Proven Correct? [The Industrial Security Podcast]
For safety-critical operations or for critical national infrastructures, would you rather base your system on a code that people have tested...
How to Embed 30 Years of Security Funding into Capital Budgets [The Industrial Security Podcast]
Most of us struggle to get funding for industrial cybersecurity. Ian Fleming of Deloitte explains how - because cybersecurity is essential t...
Insights into Nation State Threats [The Industrial Security Podcast]
Nation state threats are often portrayed as the "irresistible forces" of cyber threats, with little qualification. Joseph Price of Deloitte...
OT Security Data Science - A better vulnerability database [The Industrial Security Podcast]
Security automation needs a machine-readable vulnerability database. Carmit Yadin of Device Total joins us to look at limitations of the wid...
Driving Change - Cloud Systems and Japanese CCE [The Industrial Security Podcast]
Tomomi Aoyama translated the book Countering Cyber Sabotage - Consequence-Driven, Cyber-Informed Engineering - to Japanese. Tomomi recalls t...
Hitting Tens of Thousands of Vehicles At Once [The Industrial Security Podcast]
Compromise a cloud service and tens thousands of vehicles can be affected at once. Matt MacKinnon of Upstream Security walks us through the...
AI takes on polymorphic malware [The Industrial Security Podcast]
The bad guys keep getting better at what they do, and so must we defenders. Gary Southwell of Aria Cyber joins us to look at using AI to get...
New Resource: Adapting IT Advice for OT [The Industrial Security Podcast]
The CIS Top 18 is widely used in IT, and Jack Bliss of 1898 & Co. has adapted that list for OT/industrial, adding a lot of industrial contex...