Hardware Podcasts

Can We Get Serious About Cybersecurity Now?

EE Times Current · 11 Jun 2021 · 44m

What this episode covers

Damon Small, a technical director at the cybersecurity firm NCC Group, discusses the Colonial Pipeline ransomware attack and the broader implications for critical infrastructure security. He explains how the breach of a billing IT system, rather than operational technology (OT), forced a shutdown due to federal regulations requiring a bill of lading, highlighting the dangerous convergence of IT and OT. Small argues that cybersecurity must be viewed as a business enabler rather than a cost center and calls for stricter government regulation to compel organizations to protect their information assets.

Most relevant to

large enterprises

Topics

Mentioned

Companies
NCC Group, Colonial Pipeline, JBS Foods, Target, Siemens Digital Industries Software, IBM, GlobalFoundries, TSMC
Also
Darkside, REvil

Related episodes from other shows

Other shows on the same ground, closest first.

  • Manufacturing Happy Hour · 38m

    Cybersecurity Mini-Series: Why Security Matters (Ep. 1 of 4)

    Steve Ludwig, Program Manager for Safety & Security at Rockwell Automation, explains why cybersecurity is a critical component of digital transformation for industrial manufacturers, emphasizing that security protects assets, workers, and the environment, not just data. He details the convergence of IT and OT, noting that while IT allows for easy patching, OT requires scheduled downtime and careful planning to avoid disrupting physical processes. Ludwig highlights that most breaches are opportunistic rather than targeted, with over 40% of attacks originating from insiders, and stresses the importance of integrating safety and security standards to mitigate risks like equipment damage or environmental harm.

    Security & privacyIndustrial & consumer product design
    8 chapters

  • Manufacturing Happy Hour · 32m

    Ensuring OT Integrity and Establishing a Culture of Security with Mark Carrigan, COO of PAS Global

    Mark Carrigan, COO of PAS Global, explains that ensuring OT integrity is the foundation for process safety, cybersecurity, and digitalization in heavy industries like petrochemicals and mining. He argues that companies must move beyond 'shiny object' security investments to focus on fundamentals, specifically maintaining a comprehensive inventory of all OT assets down to Level 0 sensors and controllers. Carrigan highlights the growing convergence of safety and security cultures, noting that risk-based analyses from safety are being applied to cyber threats to protect critical infrastructure.

    Security & privacySourcing & supply chain
    9 chapters

  • IoT For All Podcast · 28m

    The Current State of Connected Device Security in 2021 | Ordr's Greg Murphy

    Greg Murphy, CEO of Ordr, discusses the critical challenges of securing the billions of agentless IoT devices in enterprise environments. He explains that traditional IT security tools fail because many IoT devices run outdated operating systems and cannot support security agents, creating massive visibility gaps. Murphy highlights the Colonial Pipeline ransomware attack as a wake-up call for the industry and emphasizes that the Chief Information Security Officer (CISO) is ultimately responsible for securing both IT and OT assets. He advises organizations to prioritize network visibility and behavioral analysis to detect anomalies in devices like MRI machines or access control gates.

    Security & privacyConnected products & IoT
    8 chapters

  • Manufacturing Happy Hour · 49m

    204: OT Security Best Practices for Manufacturers with Fortinet's Rich Springer

    Rich Springer, Director of Marketing for OT Solutions at Fortinet, discusses the evolving landscape of operational technology (OT) security for manufacturers. He explains why the traditional 'air gap' strategy is no longer viable due to IT/OT convergence and human factors, and emphasizes the critical need for collaboration between IT and OT teams to address patching challenges and network segmentation. Springer advocates for tabletop exercises to define incident response roles and assess the real-world impact of cyberattacks on production lines, noting that ransomware actors are increasingly targeting manufacturing for higher payouts.

    Security & privacyLeadership, teams & culture
    7 chapters

  • IoT For All Podcast · 20m

    Taking IoT Security Seriously | Kyndryl's Paul Savill | Internet of Things Podcast

    Paul Savill, Global Practice Leader for Network and Edge Computing at Kyndryl, discusses the critical security challenges facing IoT adoption in large enterprises. He highlights the IT/OT divide and the significant risk posed by legacy hardware, noting that approximately 44% of managed infrastructure is at end-of-life. Savill emphasizes the need for strict policy enforcement, employee training, and staying updated on emerging threats to protect critical infrastructure from geopolitical and cyber risks.

    Security & privacyConnected products & IoT
    8 chapters

The summary, chapters and topics are generated from the episode’s audio by this directory, not written by EE Times Current. The episode itself belongs to its publisher.