@BEERISAC: OT/ICS Security Podcast Playlist

Podcast: PrOTect It All (LS 28 · TOP 10% what is this?)
Episode: They Deserve to Be Defended: OT Defense, Transitioning Vets and Weaponized Sneaker Net
Pub date: 2026-10-26

Get Podcast Transcript →
powered by Listen411 - fast audio-to-text and summarization

Work with Aaron: https://protectitallpod.com/work/

The book: https://protectitallpod.com/book/

This episode: https://protectitallpod.com/ep129/

The OT Security Starter Kit: https://protectitallpod.com/starter-kit/

The small water utility down the road cannot afford a big consultancy, and it still has to be defended. Erin Burns is building a company around that problem.

Erin is an Army veteran with roughly two decades in cyber operations and the founder of EVR:RDY Defensive Operations Group. He and Aaron take on the question every transitioning veteran asks, how do I get into OT, and the problem behind it: automation is closing the entry-level door just as small utilities need defenders most. They get into hiring troubleshooters instead of job reqs, engineering a low-cost data diode, why a tool nobody runs is worse than no tool, the air gap myth, and how Erin's team weaponized sneaker net to get packet capture out of sites that will never allow remote access.

Key takeaway

The utilities that cannot afford a big consultancy still have to be defended. If you mandate a standard, fund it, and build the people pipeline the same way you build the product: with problem solvers, hands-on apprenticeship and tools small operators will actually use. A tool nobody uses is worse than no tool.

Chapters

0:00 Cold open

0:25 Intro

0:46 Meet Erin Burns

2:26 The question every transitioning vet asks

3:23 Hard hats and factory floors

5:43 Automation is closing the entry-level door

8:03 Ignore the job req

11:06 A pilot with local water sites

12:17 Automate to lower the noise floor

14:19 No juniors means no seniors

16:36 The operator wearing every hat

17:55 Engineering a low-cost data diode

19:28 Dave's network and the XP box

21:44 School lunches, police cruisers and cyber

26:19 A tool nobody runs

27:11 Why investors hate this model

28:53 The cellular modem nobody questioned

30:51 How many air gaps have you seen?

34:38 The historian under the tablecloth

36:31 What do you do with packet capture?

39:50 The air gap myth

46:04 Two different runbooks

49:50 Who defends the sites that can't pay?

53:57 Where to find Erin and EVR:RDY

55:20 Outro

About the guest

Erin Burns is an Army veteran with roughly two decades in cyber operations and defensive work, and the founder of EVR:RDY Defensive Operations Group, a company focused on affordable OT/ICS defense for critical infrastructure operators with limited budgets and resources. He came up through special forces support and early military cyber, became a cyber warrant officer, and by his account spent five years on an Army cyber team defending OT environments, on factory floors and in hard hats. He is now building EVR:RDY around that experience, with a focus on water utilities and other sites that cannot afford commercial tooling.

EVR:RDY: https://evrrdy.com

EVR:RDY pilot program: https://evrrdy.com/pilots

Erin on LinkedIn: https://www.linkedin.com/in/erinburns757/

One Second After by William R. Forstchen, the novel Erin and Aaron mention

Learn more about PrOTect IT All:

Work with Aaron: https://protectitallpod.com/work/

The book: https://protectitallpod.com/book/

This episode: https://protectitallpod.com/ep129/

The OT Security Starter Kit: https://protectitallpod.com/starter-kit/

Support the show: https://protectitallpod.com/go/support/podcast

YouTube: https://www.youtube.com/@PrOTectITAll

Email: info@protectitallpod.com

X: https://twitter.com/protectitall

Facebook: https://facebook.com/protectitallpodcast

To be a guest or suggest a guest or episode, email info@protectitallpod.com.

Please leave us a review on Apple or Spotify:

Apple: https://podcasts.apple.com/us/podcast/protect-it-all/id1727211124

Spotify: https://open.spotify.com/show/1Vvi0euj3rE8xObK0yvYi4

The podcast and artwork embedded on this page are from Aaron Crow | Operational Technology & Cybersecurity Host, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.

Podcast: Casos de Ciberseguridad Industrial
Episode: 4/4 Desenlace de la estrategia global de ciberseguridad industrial
Pub date: 2026-10-26

Get Podcast Transcript →
powered by Listen411 - fast audio-to-text and summarization

En este episodio final se proyecta el horizonte del sector con la mirada puesta en 2030, visualizando cómo se transformará el rol y la relevancia del responsable de ciberseguridad industrial dentro del organigrama corporativo.

The podcast and artwork embedded on this page are from Centro de Ciberseguridad Industrial, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.

Podcast: Cyber Brews - The Operational Technologies Podcast
Episode: The Buncefield Questions: Rethinking OT Cybersecurity
Pub date: 2026-10-22

Get Podcast Transcript →
powered by Listen411 - fast audio-to-text and summarization

Series 3 - Episode 7
A step back in time to 11 December 2005. 06:01 in the morning. A series of explosions at the Buncefield oil storage depot near Hemel Hempstead shook the surrounding area. The blast could be heard up to 125 miles away and registered 2.4 on the Richter scale.
In this episode of Cyber Brews, we explore the three questions posed by the UK Competent Authority following the Buncefield incident and consider how they can help organisations rethink their approach to cybersecurity:
🔹 Do we understand what can go wrong?
🔹 Do we know what systems are in place to prevent this happening?
🔹 Do we have information to assure ourselves that they are working effectively?
These questions may sound straightforward, but they raise some important challenges for organisations responsible for critical infrastructure.
We discuss how they apply to OT cyber risk assessments, security controls, organisational accountability and the evidence needed to demonstrate that cybersecurity measures are actually working.
Because having firewalls, procedures and security policies in place is one thing. Understanding what could go wrong, knowing whether the right protections exist, and having evidence that they remain effective is another.
Whether you're an OT engineer, cybersecurity professional, site owner or process safety specialist, join us as we explore how lessons from Buncefield can help us ask better questions about industrial cybersecurity.
☕ Grab a brew and join the conversation. Are we asking the right questions about OT cyber risk?

The podcast and artwork embedded on this page are from Dave A. and Chris F., which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.

Podcast: ICS Cyber Talks Podcast
Episode: Idan Zohar Co-Founder & CEO @Sinc Security on updates solution in isolated environments
Pub date: 2026-10-22

Get Podcast Transcript →
powered by Listen411 - fast audio-to-text and summarization

מי שיקרא את הדוחות על ההתקפות היי.איי האוטונומיות לא יכול שלא לשים לב לעובדה שההצלחות נבעו משימוש בחולשות ידועות ולאו דווקא זירו דיי.

כבר עשור שדוחות הסייבר של החברות המובילות בעולם ובראשן הדו"ח הידוע של איי.ביי.אם, מצביעות על בעיה אחת אקוטית, עדכונים! פאצ'ים, איי.אוו.סיס, סיי.ווי.אייס, אינדיקטורים והרשימה עוד ארוכה, שמדברים על מערכות מידע ארגוניות אין ספק שהמודעות והרצון קיימים ועדיין זה לוקח בממוצע עולמי שמונה חודשים, אבל מה קורה במערכות תפעוליות שמנותקות מסביבת מערכות המידע והאינטרנט (מקווה בשבילכם שזה המצב אצלכם)?

לפעמים הפתרון מונח לפנינו, כול מה שצריך זה מישהו שזה יכאב לו מספיק כדי שירים את הכפפה ויהפוך את זה למוצר.

נחשון פינקו מארח את עידן זוהר מייסד-שותף ומנכ"ל סינק סקיורטי בשיחה על הצורך המיידי בפתרון לעדכונים בסביבות סגורות, איך נולדה ההבנה ולמה אסור לחכות רגע אחד במתן פתרון במיוחד היום שתוקפים מגבירים את השימוש בהיי.איי. גילוי נאות: התקנתי את המערכת בתחנות כוח ונחסכו כשלושה עד ארבעה ימי עבודה בחודש בביצוע עדכונים יומיים ופינוי הזמן של הצוות למשימות אחרות.

 

Anyone who reads reports on autonomous AI-driven cyberattacks cannot help but notice that successful attacks largely exploited known vulnerabilities rather than true zero-day exploits

For more than a decade, cybersecurity reports from the world's leading companies, most notably IBM's well-known annual report, have regularly highlighted one critical issue: updates. Patch management, IOCs, CVEs, and a long list of other indicators continue to dominate discussions. Enterprise IT environments have awareness and readiness to address the problem, yet the global average time to remediate vulnerabilities remains around eight months. But what happens in operational systems that are isolated from corporate IT networks and disconnected from the internet (which, hopefully, is the case in your organization)?

Sometimes the solution is right in front of us. All it takes is someone who feels the pain deeply enough to take up the challenge and turn it into a product

Nachshon Pincu hosts Idan Zohar, Co-Founder and CEO of Sinc Security, for a discussion about the vital need for a patch management solution in isolated environments, how the idea behind the product was born, and why organizations cannot afford to wait even a single moment before dealing with this challenge, especially today as attackers increasingly leverage AI

Disclosure: I deploy the system in power generation facilities, and it has reduced the daily updates to three to four workdays per month by improving the update process and freeing the team to concentrate on other critical tasks

The podcast and artwork embedded on this page are from Nachshon Pincu, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.

Podcast: Podomation
Episode: 013 - Panel from the Automation Summit & Expo: Cybersecurity in US Water Systems
Pub date: 2026-10-21

Get Podcast Transcript →
powered by Listen411 - fast audio-to-text and summarization

This episode of Podomation is an encore presentation of a panel presented during the ISA Automation Summit & Expo in September 2026.

This session examined practical, risk-focused methods for securing operational technology in the water sector. We explored how frameworks such as ISA/IEC 62443 and programs like the NRWA Cybersecurity Circuit Rider help utilities of all sizes prioritize meaningful risk reduction rather than merely checking compliance boxes.
Presenters:
Moderator: Marco Ayala
Steve Mustard
Chad Paxson
Graham Nasby
John DeGour

The podcast and artwork embedded on this page are from ISA - International Society of Automation, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.