Deviance Normalization & Risk Management with Marco Ayala

Podcast: Casos de Ciberseguridad IndustrialEpisode: 2/4 Análisis desplegando Acceso Remoto en Entorno OTPub date: 2024-11-04Get Podcast Transcript →powered by Listen411 - fast audio-to-text and summarizationEn este episodio se analizan cuáles son las principales opciones de acceso remoto, sus ventajas y desventajas. Requisitos en el acceso remoto.The podcast and artwork embedded on this page are from Centro de Ciberseguridad Industrial, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.

Podcast: The OT and IoT Security Podcast (LS 23 · TOP 10% what is this?)Episode: The Security Sandbox at the ICS Cybersecurity ConferencePub date: 2024-11-01Get Podcast Transcript →powered by Listen411 - fast audio-to-text and summarizationHosts Vivek Ponnada and Sandeep Lota share their insights on and exploring topics such as: ✅ Emerging threats to ICS over the next 12-18 months✅ Evolving strategies for integrating IT and OT cybersecurity✅ The future role of AI in ICS cybersecurity✅ Fostering collaboration between IT and OT teamsVisit Our WebsiteFollow Us on LinkedInThe podcast and artwork embedded on this page are from Nozomi Networks, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.

Podcast: Automation Chat (LS 26 · TOP 10% what is this?)Episode: Tips for Complying with the NIS2 Compliance FrameworkPub date: 2024-10-29Get Podcast Transcript →powered by Listen411 - fast audio-to-text and summarization** 3 Consecutive Awards for Best Podcast, 2022 - 2024 APEX Awards of Publication Excellence. In this episode, The Journal’s Digital Editor Maggie MacHale brings the written word to life by reading the article, “Tips for Complying with the NIS2 Compliance Framework.” It’s written by Meghna Subramani, Commercial Product Manager, Network & Cybersecurity, and Andreu Cuartiella, Lifecycle Services Commercial Manager EMEA at Rockwell Automation.  You’ll learn 7 steps to help you comply with this directive for increasing cybersecurity for industrial firms, utilities and other entities across the European Union.   Resources from this episode: Read the article online: “Tips for Complying with the NIS2 Compliance Framework.” Data Bridge Market Research on the European market for operational technology (OT). To subscribe to our 4 print magazines (Feb., May, July and Oct.), e-mail Anna Hicks at [email protected]. Subscribe to our 4 digital magazines at http://rok.auto/thejournal-subscribe.   Hit the “Share” symbol to share this episode with your colleagues who would benefit from this information. And please give us a 5-star rating and a review. Brought to you by The Journal From Rockwell Automation and Our PartnerNetwork magazine.The podcast and artwork embedded on this page are from The Journal From Rockwell Automation and Our PartnerNetwork, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.

Podcast: Industrial Cybersecurity InsiderEpisode: CISA’s Role in Supporting Asset Owners & Government Sectors with CybersecurityPub date: 2024-10-29Get Podcast Transcript →powered by Listen411 - fast audio-to-text and summarizationThis episode we dive into the critical strategies necessary for securing operational technology (OT) environments, with OT/ICS Strategy Lead at CISA, Danielle Jablanski. Danielle explores the evolving role of CISA in assisting asset owners and government sectors, emphasizing the importance of collaboration and understanding in cybersecurity. From building resilience against "shiny object syndrome" to prioritizing effective incident response and vendor relationships, this conversation provides valuable insights into crafting an actionable, sustainable OT security strategy. Danielle also shares how workforce development is crucial in creating a robust cybersecurity posture and discusses CISA’s approach to integrating AI and machine learning into OT security cautiously and strategically.Chapters:00:00:00 - Understanding Outsourcing and Effective Incident Management in OT00:01:21 - Welcoming Danielle Jablanski from CISA to the Show00:01:47 - CISA’s Expanding Role in Supporting Critical Infrastructure Security00:03:32 - Key Challenges Facing OT Cybersecurity Today00:06:27 - Navigating the Convergence of IT and OT Security00:11:36 - CISA’s Approach to Risk Management and Its Global Impact00:13:40 - Overview of CISA Services and Regional Cybersecurity Initiatives00:16:36 - Enhancing Incident Response Capacity and Cross-Agency Coordination00:17:30 - Fusion Centers: Interagency Collaboration for Better Threat Intelligence00:18:55 - Guiding Organizations in Reporting and Responding to Incidents00:21:03 - Developing Effective Incident Response Playbooks for OT Environments00:22:08 - Opportunities and Risks of AI in OT Cybersecurity00:24:32 - Emerging Threats: Targeted Attacks on Control Systems00:27:00 - Final Thoughts on Workforce Development and Building Cybersecurity ResilienceLinks And Resources:Danielle Jablanski on LinkedInDino Busalachi on LinkedInJim Cook on LinkedInCraig Duckworth on LinkedInThanks so much for joining us this week. Want to subscribe to Industrial Cybersecurity Insider? Have some feedback you’d like to share? Connect with us on Spotify, Apple Podcasts, and YouTube to leave us a review!The podcast and artwork embedded on this page are from Velta Technology, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.

Podcast: Cyber Work (LS 42 · TOP 1.5% what is this?)Episode: How secure is your food: Cybersecurity threats and careers | Guest Jonathan BraleyPub date: 2024-10-28Get Podcast Transcript →powered by Listen411 - fast audio-to-text and summarizationGet your FREE 2024 Cybersecurity Salary Guide: https://www.infosecinstitute.com/form/cybersecurity-salary-guide-podcast/?utm_source=audio&utm_medium=podcast&utm_campaign=podcastToday on Cyber Work, Jonathan Braley from the Food and Agriculture Information Sharing and Analysis Center (Food and Ag ISAC) delves into the critical security challenges in the food, farming and production sectors. Featuring insights on the evolution of cybersecurity, the role of ISACs, and real-world threats like ransomware and phishing, this episode offers a comprehensive look at how cybersecurity professionals within this industry are working to safeguard vital systems. Braley shares tips on obtaining competitive roles, the convergence of IT and OT security and the importance of continuous learning. Tune in to grasp the latest trends and get invaluable career advice to stay ahead in the ever-evolving field of cybersecurity.View Cyber Work Podcast transcripts and additional episodes: https://www.infosecinstitute.com/podcast/?utm_source=audio&utm_medium=podcast&utm_campaign=podcast00:00 - Introduction to cyber work and guest Jonathan Braley00:53 - The growing cybersecurity job market02:05 - From biology to cybersecurity04:48 - Early career and learning at Valley Apps09:26 - Role and responsibilities at Food and Ag ISAC17:07 - Understanding cyber threats in food and agriculture23:23 - The growing connectivity and vulnerabilities in agriculture23:49 - Cybersecurity challenges for small towns and farms25:28 - The Reality of cyberattacks on small farms26:59 - Global implications of cybersecurity in agriculture28:44 - Insights from a cybersecurity expert in agriculture33:13 - Career opportunities in food and agriculture cybersecurity37:37 - Staying informed and prepared in the cybersecurity field40:04 - Cybersecurity career adviceAbout InfosecInfosec’s mission is to put people at the center of cybersecurity. We help IT and security professionals advance their careers with skills development and certifications while empowering all employees with security awareness and phishing training to stay cyber-safe at work and home. More than 70% of the Fortune 500 have relied on Infosec Skills to develop their security talent, and more than 5 million learners worldwide are more cyber-resilient from Infosec IQ’s security awareness training. Learn more at infosecinstitute.com.The podcast and artwork embedded on this page are from Infosec, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.

Podcast: Nexus: A Claroty Podcast (LS 32 · TOP 5% what is this?)Episode: Grant Geyer on the Business Impact of Disruptions from CyberattacksPub date: 2024-10-28Get Podcast Transcript →powered by Listen411 - fast audio-to-text and summarizationClaroty Chief Strategy Officer Grant Geyer joins the Nexus Podcast to discuss the results of a survey of 1,100 cybersecurity leaders and practitioners on the business impact of disruptions from cyberattacks on cyber-physical systems. The financial losses are steep from these attacks impacting connected systems that are so central to our way of life, as are the recovery costs and operational impacts such as downtime, which is often intolerable in critical industries such as manufacturing and healthcare.Geyer brings his unique insights to the discussions, including attackers' motivations in targeting CPS, why ransomware continues to impact healthcare delivery organizations, and the risks of unsecured third-party and supply chain connections to the enterprise.  Get the full survey results here. The podcast and artwork embedded on this page are from Claroty, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.

Podcast: Casos de Ciberseguridad IndustrialEpisode: 1/4 Contexto desplegando Acceso Remoto en Entorno OTPub date: 2024-10-28Get Podcast Transcript →powered by Listen411 - fast audio-to-text and summarizationEn este episodio se presenta el contexto del caso: datos de los entrevistados, las particularidades del acceso remoto en su entorno y las diferencias con el entorno IT.The podcast and artwork embedded on this page are from Centro de Ciberseguridad Industrial, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.

Podcast: PrOTect It All (LS 24 · TOP 10% what is this?)Episode: Bridging IT and OT in Cybersecurity for Power Plants with Jori VanAntwerpPub date: 2024-10-28Get Podcast Transcript →powered by Listen411 - fast audio-to-text and summarizationIn Episode 29, host Aaron Crow is joined by cybersecurity expert Jori VanAntwerp to delve into Power Grid Security and Redundancy. This episode explores the segmented design of the US power grid, addressing the challenges and necessary upgrades to mitigate cyber vulnerabilities. Jori highlights security monitoring gaps, the impact of hardware updates, and the cost implications of modernizing infrastructure. The discussion also emphasizes the importance of asset inventory and collaborative efforts between IT and OT professionals. Real-world incidents, such as unexplained power plant reboots, illustrate the critical role of operator awareness and system maintenance. The potential of AI in cybersecurity, alongside the need for a collaborative, learning-focused approach, is also discussed. Tune in to gain expert insights on balancing modernization, cost, and operational efficiency to ensure the stability and security of our power infrastructure. Join us for a packed episode to learn how to "Protect It All." Key Moments:    05:30 Restoring power grids involves complex, staged processes. 11:01 Centralizing data improves efficiency, introduces vulnerabilities. 17:47 Network segmentation essential for security, mitigates risks. 26:12 Cybersecurity tools revealed crucial system issues. 32:15 Understanding systems fully prevents unintended negative impacts. 36:31 Understand OT environment before implementing IT solutions. 41:24 Equip must survive extreme heat, unlike typical data centers. 54:28 Strict access control in nuclear power plant. 57:48 Assess likely risks for protecting plant operations. 01:00:59 Rushed training weakens foundational cybersecurity skills.   About the guest :  For nearly two decades, Jori has enabled industrial and IT organizations to be successful in reducing risk, increasing compliance, and their overall security efforts. Jori has the ability to quickly evaluate situations and determine innovative solutions and possible pitfalls due to his diverse background in security, technology, partnering and client-facing experience. Approaching situations with intuitive insight and methodology, leveraging his deep understanding of business and technology, ranging from silicon to the cloud. He had the pleasure of working with such great companies as Gravwell, Dragos, CrowdStrike, FireEye, McAfee, and is now Founder and Chief Executive Officer at EmberOT, a cybersecurity startup focused on making security a reality. How to connect Jori :  Website : https://emberot.com/ Linkedin : https://www.linkedin.com/in/jvanantwerp/   Connect With Aaron Crow: Website: www.corvosec.com  LinkedIn: https://www.linkedin.com/in/aaronccrow   Learn more about PrOTect IT All: Email: [email protected]  Website: https://protectitall.co/  X: https://twitter.com/protectitall  YouTube: https://www.youtube.com/@PrOTectITAll  FaceBook:  https://facebook.com/protectitallpodcast    To be a guest or suggest a guest/episode, please email us at [email protected] podcast and artwork embedded on this page are from Aaron Crow, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.

Podcast: Industrial Cybersecurity InsiderEpisode: AI, Global Trends, and More: A Glimpse into the Future of OT Cybersecurity with ClarotyPub date: 2024-10-22Get Podcast Transcript →powered by Listen411 - fast audio-to-text and summarizationIn this week's episode, Dino Busalachi is joined by Gary Kneeland from Claroty. With over nine years of experience at Claroty, Gary discusses the evolution of OT security, the convergence of IT and OT, and the growing importance of cybersecurity in protecting critical infrastructure. The conversation touches on how regulatory changes, ransomware threats, and AI advancements are shaping the industry. Whether you’re dealing with outdated systems or navigating complex industrial environments, this episode provides practical insights into the challenges and opportunities ahead.Chapters:00:00:00 - Pandemic's Impact on Critical Infrastructure00:01:08 - Introduction to Gary Neelan and Claroty00:01:41 - Gary's Role in OT Cybersecurity00:02:49 - Evolution of OT Cybersecurity: From Compliance to Strategy00:05:23 - IT and OT Convergence: Securing Cyber-Physical Systems00:09:46 - Addressing Complex Challenges in OT Cybersecurity00:11:56 - OT Cybersecurity Talent Shortage and Managed Services00:13:01 - Future of OT Cybersecurity: Adapting to New Threats00:14:36 - Modernizing Manufacturing Systems for Enhanced Security00:15:52 - Global Cybersecurity Trends in Critical Infrastructure00:18:01 - Regional OT Cybersecurity Challenges and Responses00:25:01 - The Role of AI in Defending OT Environments00:28:19 - Final Thoughts on OT Cybersecurity's FutureLinks And Resources:Gary Kneeland on LinkedInDino Busalachi on LinkedInJim Cook on LinkedInCraig Duckworth on LinkedInThanks so much for joining us this week. Want to subscribe to Industrial Cybersecurity Insider? Have some feedback you’d like to share? Connect with us on Spotify, Apple Podcasts, and YouTube to leave us a review!The podcast and artwork embedded on this page are from Velta Technology, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.

Podcast: Caffeinated Risk (LS 26 · TOP 10% what is this?)Episode: Deviance Normalization & Risk Management with Marco AyalaPub date: 2024-10-24Get Podcast Transcript →powered by Listen411 - fast audio-to-text and summarizationTechnological change is inevitable and often one of the aspects that attracts people toward careers in information and operational technology. Although risk management is a part of navigating advancement in any area, the fundamental flaw in any management system is our human tendencies. This episode explores how organizations can make slow, steady migration from first principles to risky undertakings without noticing. Marco Ayala, an operational technology cybersecurity expert and current Houston InfraGard president, joins this episode to further explore the reasons behind this normalization of deviance, a concept first introduced to OT cyber specialists at S4 in 2024. Mr. Ayala is also CCE proponent and facilitator leading to a discussion on possible options for course correction back off the normalization path.  Although solutions must always be tailored to work within organizational constraints, the early contributors to catastrophic outcomes associated with the Challenger space shuttle and Boeing 737 Max warrant exploration or we will inevitably repeat.  The podcast and artwork embedded on this page are from McCreight & Leece, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.