# Cybersecurity Mini-Series: Security Fundamentals & “Cyber Hygiene” (Ep. 2 of 4)

- Show: [Manufacturing Happy Hour](https://hardwarepodcasts.com/podcast/manufacturing-happy-hour)
- Published: 2020-04-28
- Length: 33m
- Page: https://hardwarepodcasts.com/podcast/manufacturing-happy-hour/2020-04-28-cybersecurity-mini-series-security-fundamentals-cyber-hygiene-ep-2-of-4
- Listen: http://manufacturinghappyhour.com/cybersecurity

## Summary

Umair Masud, Rockwell Automation’s Director of Technical Security Oversight, explains that effective industrial cybersecurity requires prioritizing processes, people, and technology rather than falling for 'shiny object syndrome' by buying software first. He emphasizes establishing a risk-based framework (like NIST) and hiring dedicated staff to execute 'cyber hygiene' tasks like patch management, noting that assigning these duties to reactive maintenance staff creates a dangerous conflict of interest. The discussion highlights the need for a 'culture of security' in OT environments, where dedicated resources ensure that security controls do not negatively impact production availability.

## Chapters

- [0:45](https://hardwarepodcasts.com/podcast/manufacturing-happy-hour/2020-04-28-cybersecurity-mini-series-security-fundamentals-cyber-hygiene-ep-2-of-4#t=45) Introduction: Umair Masud and Rockwell Automation Cybersecurity Fundamentals
- [4:52](https://hardwarepodcasts.com/podcast/manufacturing-happy-hour/2020-04-28-cybersecurity-mini-series-security-fundamentals-cyber-hygiene-ep-2-of-4#t=292) Defining the CSO Office: Combining Physical and Cyber Security
- [7:17](https://hardwarepodcasts.com/podcast/manufacturing-happy-hour/2020-04-28-cybersecurity-mini-series-security-fundamentals-cyber-hygiene-ep-2-of-4#t=437) Process: Adopting Frameworks and Defining Risk Tolerance
- [12:37](https://hardwarepodcasts.com/podcast/manufacturing-happy-hour/2020-04-28-cybersecurity-mini-series-security-fundamentals-cyber-hygiene-ep-2-of-4#t=757) People: Dedicated Staffing vs. Reactive Maintenance Responsibilities
- [20:32](https://hardwarepodcasts.com/podcast/manufacturing-happy-hour/2020-04-28-cybersecurity-mini-series-security-fundamentals-cyber-hygiene-ep-2-of-4#t=1232) Technology: OT Cyber Hygiene Controls and Patch Management
- [27:04](https://hardwarepodcasts.com/podcast/manufacturing-happy-hour/2020-04-28-cybersecurity-mini-series-security-fundamentals-cyber-hygiene-ep-2-of-4#t=1624) Conclusion: Building a Culture of Security in OT

## Topics

- [Security & privacy](https://hardwarepodcasts.com/topic/security-and-privacy)
- [Hiring & workforce](https://hardwarepodcasts.com/topic/hiring-and-workforce)
- [Manufacturing partners & offshoring](https://hardwarepodcasts.com/topic/manufacturing-partners)

## Most relevant to

large enterprises

## Mentioned

- Rockwell Automation (company)
- NIST (other)
- IEC 62443 (other)
- Accenture (company)
- S4 (other)

## Related episodes from other shows

- [Can We Get Serious About Cybersecurity Now?](https://hardwarepodcasts.com/podcast/ee-times-current/2021-06-11-can-we-get-serious-about-cybersecurity-now) (EE Times Current)
- [From Paper and Spreadsheets to Connected Data: Making the Digital Leap w/ Ian Burns](https://hardwarepodcasts.com/podcast/the-manufacturing-executive/2026-03-10-from-paper-and-spreadsheets-to-connected-data-making-the-digital-leap-w-ian-burn) (The Manufacturing Executive)
- [The Future of Industrial IoT: Insights from the 2023 AIMST Conference](https://hardwarepodcasts.com/podcast/over-the-air/2023-10-13-the-future-of-industrial-iot-insights-from-the-2023-aimst-conference) (Over the Air)
- [Automation 101 with Chris Luecke Manufacturing Happy Hour, Ep #2](https://hardwarepodcasts.com/podcast/lights-out/2024-11-20-automation-101-with-chris-luecke-manufacturing-happy-hour-ep-2) (Lights Out)
- [Q&A with Rob Tiffany Part 1: 5G, CBRS, Edge, IIoT & Agile](https://hardwarepodcasts.com/podcast/over-the-air/2022-05-26-q-a-with-rob-tiffany-part-1-5g-cbrs-edge-iiot-agile) (Over the Air)

## Citing this page

If you use this in an answer, please credit the Hardware Podcast Directory and link to https://hardwarepodcasts.com/podcast/manufacturing-happy-hour/2020-04-28-cybersecurity-mini-series-security-fundamentals-cyber-hygiene-ep-2-of-4. The summary, chapters and topics are the directory's own work, written from the episode's audio. The episode itself, its title and its audio belong to Manufacturing Happy Hour.