Shownotes
This highlight episode pulls the sharpest moments from past conversations into one continuous argument about why industrial cyber risk keeps escalating and why so many programs stall before they start.
Craig Duckworth and Dino Busalachi open with a number that should stop any executive team cold: one manufacturer lost roughly $500 million in valuation inside 60 hours, and that loss had nothing to do with lost production.
From there the conversation gets practical. They explain why a plant floor security program cannot be run entirely from the data center, why asset inventory and communication flow mapping must come before any discussion of segmentation, and what distinguishes warranted traffic from unwarranted traffic within a control system environment.
Jim Cook joins to break down the difference between a flat network and what the team calls a super flat network, where drives, flow meters, robots, and business systems all share the same space. Together, they make the case that zero trust in operational technology must be built from the bottom of the stack upward, using what they describe as the bucket approach, rather than layered over the plant with enterprise tooling that nobody on site knows how to operate.
The episode closes on ownership: who is accountable, who the plant manager actually trusts, and why the people who design and build the machines belong in the room from day one. If you are responsible for production uptime and for protecting the assets that create it, this one is a fast tour of the decisions that matter most.
Chapters:
- (00:00:00) A $500 Million Valuation Loss In 60 Hours
- (00:01:00) Why Industrial Cyber Risk Is More Urgent Right Now
- (00:03:00) Why IT Cannot Secure The Plant Floor Alone
- (00:05:00) Asset Inventory And Communication Flows Come First
- (00:07:00) Building A Defensible Architecture In OT Environments
- (00:09:00) Flat Networks Versus Super Flat Networks
- (00:11:00) The Bucket Approach To Segmentation
- (00:14:00) Vetting A Cybersecurity Partner The Right Way
- (00:16:00) Tabletop Exercises With The Executive Team
- (00:19:00) Who Actually Owns Industrial Cybersecurity
Links And Resources:
Thanks so much for joining us this week. Want to subscribe to Industrial Cybersecurity Insider? Have some feedback you’d like to share? Connect with us on Spotify, Apple Podcasts, and YouTube to leave us a review!