@BEERISAC: OT/ICS Security Podcast Playlist

Podcast: PrOTect It All (LS 27 · TOP 10% what is this?)
Episode: OT Pen Testing: Why Trust, Culture & Hands-On Experience Matter Most
Pub date: 2026-08-03

Get Podcast Transcript →
powered by Listen411 - fast audio-to-text and summarization

Effective OT penetration testing isn't just about finding vulnerabilities, it's about building trust.

In this episode of Protect It All, host Aaron Crow is joined by Oren Niskin and Reynaldo Gonzalez for an engaging discussion on the evolving role of penetration testing in operational technology (OT) environments.

Drawing from years of experience in industrial operations, IT, and OT cybersecurity, Oren and Reynaldo explain why successful OT security assessments require far more than technical expertise. They explore how trust, communication, and collaboration help bridge the gap between security teams and operations, making penetration testing a valuable business tool rather than something to fear.

The conversation also highlights the importance of diverse career paths, hands-on learning, and mentoring the next generation of cybersecurity professionals. From network segmentation and risk communication to creating realistic lab environments, this episode offers practical lessons for anyone responsible for securing critical infrastructure.

Key Learnings: 

Why trust is essential for successful OT penetration testing

How IT and operational experience strengthen OT security teams

The value of network segmentation in reducing cyber risk

Why "doing nothing" is no longer an acceptable cybersecurity strategy

How organizations can bridge the gap between safety, operations, and security

Practical ways to develop the next generation of OT cybersecurity professionals

Key Moments: 

07:00 Oren's technology and security approach

15:04 Discussing network security measures

19:16 Building Trust in Business Relationships

26:17 Understanding and planning security architecture

30:16 Network management and rule assessment

33:39 Managing and Assessing Tool Overload

38:39 Analyzing tool overlap and complementarity

48:41 Building a trusting team culture

49:48 Encouraging Open Communication

56:34 Getting into cybersecurity without IT experience

01:04:56 Entry-level ICS training courses

Whether you're an OT engineer, penetration tester, security leader, or just beginning your cybersecurity journey, this episode delivers practical insights into protecting industrial environments while building stronger relationships across teams.

Tune in to discover why the most successful OT penetration tests don't just identify vulnerabilities they build trust, strengthen teams, and improve security for the long term.

About the guests: 

Oren Niskin is Principal OT Security Engineer at GuidePoint Security. His 20-year arc runs from the US Navy as a Nuclear Electrician's Mate, to Electronics Technician on offshore drilling rigs, to office OT/IT management, to OT cybersecurity consulting at EY, and now into OT cyber engineering at GuidePoint. He also runs Packets Or It Didn't Happen, a YouTube livestream where he builds a factory-realistic PLC and HMI training kit on camera (the open-source PLC Trainer Kit), aimed at helping newcomers get hands-on with OT for under $500.

Link to connect Oren Niskin:

LinkedIn: https://www.linkedin.com/in/orenniskin/

YouTube: https://www.youtube.com/@PacketsOrItDidntHappen

PLC Trainer Kit (GitHub): https://github.com/oniskin/PLC-Trainer-Kit

LinkedIn Group: https://www.linkedin.com/groups/17708001/

Reynaldo Gonzalez is a recognized cybersecurity thought leader with 18+ years of experience helping organizations strengthen cyber resilience and secure critical infrastructure. His expertise spans cybersecurity strategy, IT/OT security, AI security, risk management, and digital transformation, complemented by a passion for education, innovation, and industry collaboration.

Link to connect Reynaldo Gonzalez: 

LinkedIn: https://www.linkedin.com/in/reynaldoglz/

Learn more about PrOTect IT All:

Email: info@protectitall.co 

Website: https://protectitallpod.com/ep117

X: https://twitter.com/protectitall 

YouTube: https://www.youtube.com/@PrOTectITAll 

FaceBook:  https://facebook.com/protectitallpodcast

To be a guest or suggest a guest/episode, please email us at info@protectitall.co

Please leave us a review on Apple/Spotify Podcasts:

Apple   - https://podcasts.apple.com/us/podcast/protect-it-all/id1727211124

Spotify - https://open.spotify.com/show/1Vvi0euj3rE8xObK0yvYi4

The podcast and artwork embedded on this page are from Aaron Crow | Operational Technology & Cybersecurity Host, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.

Podcast: Bites and Bytes Podcast (LS 27 · TOP 10% what is this?)
Episode: Seafood Isn’t Scary: Myths, Fraud, and the Future with Emily De Sousa
Pub date: 2026-07-31

Get Podcast Transcript →
powered by Listen411 - fast audio-to-text and summarization

On this episode of the Bites and Bytes Podcast, your host, Kristin King, is back with the second installment of the Seafood Summer Series, sitting down with Emily De Sousa, a fisheries scientist who turned into a seafood educator and founder of Seaside with Emily. As you know, this podcast sits at the intersection of food systems and cybersecurity, examining what it takes to keep the systems that feed us running and secure. This episode looks at a different kind of vulnerability: trust. Emily has spent her career studying what happens when the seafood supply chain breaks down, from mislabeling and fraud to the myths that keep people confused at the fish counter, and turning that research into education people can use!
We get into seafood fraud, the myths around farmed versus wild seafood, and what it takes to buy, cook, and trust seafood again. It’s a bit of a look behind the curtain and some of your more burning seafood questions. 
If you missed the first installment of the Seafood Summer Series, please go back and listen to James Sibley, the “Fish Fluencer”, break down aquaculture.
Find Emily De Sousa:
Newsletter: https://www.seasidewithemily.com/newsletter-signup
Website: https://www.seasidewithemily.com/
LinkedIn: https://www.linkedin.com/in/emilycdesousa/
Instagram: https://www.instagram.com/seasidewithemily
TikTok: https://www.tiktok.com/@seasidewithemily
YouTube: https://www.youtube.com/@seasidewithemily

Thought Leader Product Safety Innovation Summit 2026
August 14, 2026 – Virtual – Free
Sign up here: https://sangha.controlpointholdings.com/c/tlpsi-summit-2026
---------------
Episode Key Highlights
00:00:21 — Why Seafood Confusion Costs Consumers and the Industry
00:12:20 — The Secret to Crispy Fish Skin
00:17:26 — The Biggest Seafood Misconceptions
00:22:19 — Why Wild-Caught Seafood Alone Cannot Meet Global Demand
00:29:31 — The Truth About Salmon Color
00:35:32 — How Seafood Fraud Happens
00:44:10 — Why Tinned Fish Is Having a Moment
00:54:42 — The Future of Seafood and Whole-Fish Use
00:58:24 — Understanding Food Systems Before Securing Them
---------------
📘 Kristin’s book, “Securing What Feeds Us:  Cybersecurity in Food and Agriculture,” is here.
Food & Agriculture Cyber Incident Atlas is located here: https://securingwhatfeedsus.com/atlas
---------------
🎤 Book Kristin Demoranville toSpeak
To invite Kristin to speak at your conference, corporate event, webinar, or workshop, visit the website and submit a request.
---------------
🎤 Bites and Bytes Podcast Info:
Website: Explore all our episodes, articles, and more on our official website.  
MerchShop: Show your support with some awesome Bites and Bytes gear!
Substack: Stay updated with the latest insights and stories from the world of cybersecurity in the food industry.
Socials: TikTok;Instagram;LinkedIn;BlueSky
---------------
🛡️ About AnzenSage & AnzenOT
AnzenSage is a cybersecurity advisory firm specializing in security resilience for the food, agriculture, zoo, and aquarium industries.  AnzenSage offers practical, strategic guidance to help organizations anticipate risks and build resilience.  Learn more about their offerings at anzensage.com.​
AnzenO helps organizations understand and prioritize operational risk faster, without slow or static assessments. Subscription access is available, including a student option. Learn more at anzenot.com.

The podcast and artwork embedded on this page are from AnzenSage, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.

Podcast: Expertise - Le podcast 100 % industrie
Episode: Cyber Resilience Act : quels impacts pour la cybersécurité industrielle ?
Pub date: 2026-07-27

Get Podcast Transcript →
powered by Listen411 - fast audio-to-text and summarization

🛡️ Thibault Morin, Solution Architect en Factory Automation chez Bosch Rexroth, décrypte les enjeux de la cybersécurité industrielle et du Cyber Resilience Act.

Fort de plus de 20 ans d’expérience dans l’industrie, il nous explique pourquoi la cybersécurité ne peut plus être considérée comme un simple sujet informatique. Face à une cyberattaque, une usine doit non seulement protéger ses machines, ses automates et ses réseaux, mais aussi être capable de poursuivre ou de rétablir rapidement son activité.

Quelle différence entre cybersécurité et cyber-résilience ? Quels sont les risques pour les industriels ? Et comment anticiper les nouvelles exigences réglementaires ? Un échange clair et accessible pour mieux comprendre les transformations à venir.

Découvrez tous nos podcasts, livres blancs, webinars... sur expertise.boschrexroth.fr
Contenu proposé par Bosch Rexroth France.

Hébergé par Ausha. Visitez ausha.co/politique-de-confidentialite pour plus d'informations.

The podcast and artwork embedded on this page are from Expertise Podcast by Bosch Rexroth, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.

Podcast: Nexus: A Claroty Podcast (LS 32 · TOP 5% what is this?)
Episode: Jessica Ji on Frontier AI Models and Cybersecurity
Pub date: 2026-07-28

Get Podcast Transcript →
powered by Listen411 - fast audio-to-text and summarization

Jessica Ji, a Senior Research Analyst at Georgetown’s Center for Security and Emerging Technology and its CyberAI Project, joins the Nexus Podcast to discuss how frontier AI models such as Claude Mythos are changing cybersecurity for practitioners and policymakers alike. 
Jessica works closely with policymakers in the U.S. government. She discusses how they view AI models' offensive and defensive capabilities, the need for a long-term strategy on AI and cybersecurity, and the disparate incentives between private AI companies such as Anthropic and OpenAI and the government as these models are developed and deployed. 
Subscribe and listen to the Nexus Podcast here. 
  

The podcast and artwork embedded on this page are from Claroty, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.

Podcast: Industrial Cybersecurity Insider
Episode: Supply Chain Risk: What Manufacturers Need to Know
Pub date: 2026-07-28

Get Podcast Transcript →
powered by Listen411 - fast audio-to-text and summarization

Two global dairy producers made headlines this week after breaches that started with third party vendors.
Dino and Craig break down how it happened and why it keeps happening. They walk through the reality of remote access on the plant floor, from cellular modems to TeamViewer installs nobody remembers approving, and explain why a single sensor in a plant might show you 25 percent of your assets at best.
The conversation gets to the root of the problem: people, not technology.
OT teams still lock IT out of critical systems, CISOs carry responsibility without authority, and incident response plans rarely account for the integrators working across multiple plants at any given moment.
If you lead security for a manufacturing organization, this episode arms you with the tough questions to bring back to leadership before your company is the one filing with the SEC.
Chapters:
(00:00:00) - The CISO gets hung out to dry, not the third-party vendor
(00:01:02) - Two global dairy producers breached through third-party vendors
(00:02:12) - The messy reality of remote access on the plant floor
(00:03:47) - Why IT has no visibility into what's connected in manufacturing
(00:05:29) - North-south versus east-west traffic monitoring
(00:06:41) - The culture problem of OT locking IT out
(00:08:14) - Responsibility versus authority for CISOs
(00:10:47) - The budget excuse and the real cost of downtime
(00:14:32) - Incident response plans that leave system integrators out
(00:18:56) - SEC filings, brand damage, and the tough questions to ask

Links And Resources:
Want to Sponsor an episode or be a Guest? Reach out here.
Industrial Cybersecurity Insider on LinkedIn
Cybersecurity & Digital Safety on LinkedIn
BW Design Group Cybersecurity
Dino Busalachi on LinkedIn
Craig Duckworth on LinkedIn

Thanks so much for joining us this week. Want to subscribe to Industrial Cybersecurity Insider? Have some feedback you’d like to share? Connect with us on Spotify, Apple Podcasts, and YouTube to leave us a review!

The podcast and artwork embedded on this page are from Industrial Cybersecurity Insider, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.