Cybersecurity Mini-Series: Why Security Matters (Ep. 1 of 4)

Manufacturing Happy Hour · 17 Apr 2020 · 38m

What this episode covers

Steve Ludwig, Program Manager for Safety & Security at Rockwell Automation, explains why cybersecurity is a critical component of digital transformation for industrial manufacturers, emphasizing that security protects assets, workers, and the environment, not just data. He details the convergence of IT and OT, noting that while IT allows for easy patching, OT requires scheduled downtime and careful planning to avoid disrupting physical processes. Ludwig highlights that most breaches are opportunistic rather than targeted, with over 40% of attacks originating from insiders, and stresses the importance of integrating safety and security standards to mitigate risks like equipment damage or environmental harm.

Other shows on the same ground, closest first.

  • EE Times Current · 44m

    Can We Get Serious About Cybersecurity Now?

    Damon Small, a technical director at the cybersecurity firm NCC Group, discusses the Colonial Pipeline ransomware attack and the broader implications for critical infrastructure security. He explains how the breach of a billing IT system, rather than operational technology (OT), forced a shutdown due to federal regulations requiring a bill of lading, highlighting the dangerous convergence of IT and OT. Small argues that cybersecurity must be viewed as a business enabler rather than a cost center and calls for stricter government regulation to compel organizations to protect their information assets.

  • IoT For All Podcast · 47m

    What is Cyber-Physical Security? | Michael Murray, SVP & GM of Cyber-Physical Systems at BlackRidge Technology | #IoTMakers E033

    Michael Murray, SVP and GM of Cyber-Physical Systems at BlackRidge Technology, explains the distinction between standard cybersecurity and cyber-physical security, emphasizing that physical safety is now integral to digital security. He details BlackRidge's proactive approach using their TAC ID hardware and software to create authenticated identities for IoT devices, contrasting this with reactive industry standards. Murray discusses the economic asymmetry of IoT attacks, the collision of IT and OT networks, and the shared responsibility model involving manufacturers, consumers, and insurers.

  • From Paper and Spreadsheets to Connected Data: Making the Digital Leap w/ Ian Burns

    Ian Burns, President of Applied Control Engineering (ACE), discusses the transition of midsize manufacturers from paper and spreadsheets to connected, data-driven environments. He explains how digital twins are used for operator training and control system validation to reduce downtime, and highlights the critical need for Operational Technology (OT) cybersecurity as systems become interconnected. Burns also notes that despite economic uncertainty, manufacturers can find value in incremental data investments rather than just large capital projects.

  • The Manufacturing Executive · 29m

    Cyber Security in Manufacturing w/ Jason Ray

    Jason Ray, Co-Founder and CEO of Paperless Parts, discusses the critical importance of cybersecurity in the manufacturing sector, particularly for companies serving the defense industrial base. He explains the evolution from ITAR self-certification to the rigorous CMMC compliance framework, detailing how digital transformation has blurred data boundaries and increased risk. Ray outlines a five-step checklist for shops to prepare for CMMC audits and highlights how secure data handling has become a competitive selling tool for OEMs.

  • IoT For All Podcast · 50m

    What Are the Security Implications of IoT? | Andrew Howard, CTO at Kudelski Security | #AskIoT E020

    Andrew Howard, CTO of Kudelski Security, explains that IoT security requires protecting device integrity, data confidentiality, and access management, emphasizing that physical attacks on devices like OBD2 dongles can compromise vehicle safety. He highlights that manufacturers often neglect physical security, assuming network-only threats, while enterprises face risks from legacy systems that were never designed for connectivity. Howard advises non-technical companies to hire consultants and use vetted open-source solutions rather than building custom security infrastructure from scratch. The discussion covers the spectrum of risks from individual privacy breaches to physical harm in industrial and medical settings, noting that industrial control systems like SCADA are particularly vulnerable.

The summary, chapters and topics are generated from the episode’s audio by this directory, not written by Manufacturing Happy Hour. The episode itself belongs to its publisher.