@BEERISAC: OT/ICS Security Podcast Playlist

Podcast: Talk OT to Me
Episode: When does OT remote access become infrastructure?
Pub date: 2026-10-07

Get Podcast Transcript →
powered by Listen411 - fast audio-to-text and summarization

Remote access started as a way to save time and avoid unnecessary travel. But as industrial operations become more connected, distributed and dependent on remote expertise, its role is changing.
In this episode of Talk OT to Me, Jesper and Jeff explore when OT remote access stops being just another tool and becomes part of the infrastructure an operation depends on.
They discuss what happens when access goes down, how dependency and downtime change the equation, when redundancy starts to matter, and why the conversation should begin with operational needs — not just cybersecurity.
Because the real question isn’t simply whether remote access is secure. It’s: what happens to your operation when it’s no longer there?

The podcast and artwork embedded on this page are from Secomea, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.

Podcast: Cyber Focus: Cybersecurity, National Security, and Critical Infrastructure (LS 30 · TOP 5% what is this?)
Episode: Pushing Cyber Planning Beyond Prevention with Stephanie Crowe and Nick Andersen
Pub date: 2026-10-06

Get Podcast Transcript →
powered by Listen411 - fast audio-to-text and summarization

Keeping power, water, and other essential services running requires planning for what happens when cyber defenses fail. On this episode of Cyber Focus, Frank Cilluffo speaks with Stephanie Crowe, head of the Australian Cyber Security Centre, and Nick Andersen, acting director of the Cybersecurity and Infrastructure Security Agency (CISA), about how two close allies are preparing critical infrastructure to operate through compromise.
The conversation examines how governments and industry identify their most critical systems, turn shared intelligence into joint action, and prepare for attacks that cross sectors and borders. Crowe and Andersen also discuss how AI is changing cyber defense and what that means for infrastructure investment, workforce skills, and decisions in the boardroom.
Main Topics
Operating through cyberattacks
Protecting critical assets and dependencies
China's infrastructure prepositioning
CI Fortify and joint industry planning
U.S.-Australia and Five Eyes cooperation
AI defense and aging infrastructure
AI's energy demands
Workforce skills and boardroom decisions
Key Quotes
"You have to be able to fight through compromise now, which is a really different way of thinking about the cyber threat." — Stephanie Crowe
"We've come a long way from thinking about our number one cyber risk being data breaches and theft of information into a world where service disruption is now the thing that we have to really consider and plan in our cyber risk management." — Stephanie Crowe
"And just to be completely honest, Australia really bailed us out when we were in the middle of our shutdown… Australia led from the front." — Nick Andersen
"If the Congress decided that in the next budget that CISA needed to be quintupled in size, we're still not going to have enough resources to be able to meet every single area that we'd like to be able to stray into with our attention." — Nick Andersen
"We know that we're seeing exceedingly aggressive, well-orchestrated campaigns, in particular from entities like China, that are engaged in a significant way to preposition across our critical infrastructure to hold it at risk at a time and place of their choosing." — Nick Andersen
Links and Resources
Cybersecurity and Infrastructure Security Agency (CISA)
Australian Cyber Security Centre: Guidance and Resources
About the Guests:
Stephanie Crowe is Deputy Director-General of the Australian Signals Directorate and Head of the Australian Cyber Security Centre. She has held senior roles in signals intelligence and cybersecurity, leading efforts to strengthen Australia's cyber defenses, build threat intelligence capabilities, and support industry during major cyber incidents.
Nick Andersen is Acting Director of the Cybersecurity and Infrastructure Security Agency (CISA), where he leads efforts to reduce risks to America's cyber and physical infrastructure. A U.S. Marine Corps veteran, he has held senior cybersecurity roles at the Department of Energy, the White House, and in the private sector.


The podcast and artwork embedded on this page are from Frank Cilluffo / McCrary Institute, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.

Podcast: Casos de Ciberseguridad Industrial
Episode: 3/4 Acciones de la estrategia global de ciberseguridad industrial
Pub date: 2026-10-19

Get Podcast Transcript →
powered by Listen411 - fast audio-to-text and summarization

En este episodio se detallan las decisiones estratégicas que marcan la diferencia entre los proyectos de ciberseguridad industrial que obtienen resultados tangibles y los que fracasan. A través de este bloque, definiremos las capacidades imprescindibles que cualquier compañía industrial debe consolidar de cara a los próximos cinco años. Por último, abordaremos fórmulas prácticas de optimización […]

The podcast and artwork embedded on this page are from Centro de Ciberseguridad Industrial, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.

Podcast: The Industrial Talk Podcast Network (LS 39 · TOP 2% what is this?)
Episode: Cesar Tascon with EY
Pub date: 2026-10-16

Get Podcast Transcript →
powered by Listen411 - fast audio-to-text and summarization

Industrial Talk/BCC is talking to Cesar Tascon, Cybersecurity Partner with EY about "OT / ICS - cyber physical and critical infrastructure security".

Overview

The discussion focused on adapting cybersecurity to connected operational technology while protecting safe, continuous operations.
OT Risk and Approach

OT security prioritizes availability and safety; outages can disrupt essential services or cause physical harm.
Security must fit each organization’s assets, structure, and risk tolerance. Prioritize critical scenarios, contain incidents, and scale controls to asset criticality.
Treat cybersecurity as an ongoing business process, with asset inventories, consistent practices, and rapid detection and response.

People and Emerging Risks

Introduce changes incrementally with operators, integrating security into existing workflows rather than imposing disruptive processes.
OT security ownership depends on the organization; IT and OT responsibilities should align with its operating model.
Regulations can overlap and differ in terminology. AI may strengthen attacks but also help analysts review alerts and respond faster.
How should each organization assign OT security responsibilities? The transcript identifies no universal model.

Outline

OT Cybersecurity Context

Connected devices and remote operations create significant business benefits, but expand cyber exposure.
OT security differs from IT: availability and safety are central concerns, alongside confidentiality.

Risk Assessment and Controls

Assess assets, organizational structure, operational constraints, threats, and potential impacts before choosing controls.
Prioritize critical facilities and prevent incidents from spreading across sites.
Maintain asset and software information, responsibilities, backups, and restoration processes; use standards such as NIST and IEC 62443 as applicable.

Operating Model and Change

Assign security responsibilities according to the organization’s structure; there is no one-size-fits-all IT/OT ownership model.
Involve operators and add security requirements to existing workflows to reduce resistance and preserve operations.

Regulation and Shared Threats

EU regulation promotes protection but may create complexity through overlapping requirements and inconsistent terminology.
Coordinate across vendors, peers, sectors, and governments to address supply-chain and shared infrastructure risks.

AI in Cybersecurity

AI can make attacks and social engineering more convincing and scalable.
Defensive uses include helping analysts process alerts and freeing time for incident response.

If interested in being on the Industrial Talk show, simply contact us and let's have a quick conversation.

Finally, get your exclusive free access to the Industrial Academy and a series on “Why You Need To Podcast” for Greater Success in 2026. All links designed for keeping you current in this rapidly changing Industrial Market. Learn! Grow! Enjoy!
CESAR TASCON'S CONTACT INFORMATION:

Personal LinkedIn: https://www.linkedin.com/in/c%C3%A9sar-tasc%C3%B3n-1198973/

Company LinkedIn: https://www.linkedin.com/company/ernstandyoung/

Company Website: https://www.ey.com/en_gl
PODCAST VIDEO:

https://youtu.be/JbG5VG1UbdI
THE STRATEGIC REASON "WHY YOU NEED TO PODCAST":

OTHER GREAT INDUSTRIAL RESOURCES:

Industrial Marketing Solutions:  https://industrialtalk.com/industrial-marketing/

Industrial Academy: https://industrialtalk.com/industrial-academy/

Industrial Dojo: https://industrialtalk.com/industrial_dojo/
Business Beatitude the Book

Do you desire a more joy-filled, deeply-enduring sense of accomplishment and success? Live your business the way you want to live with the BUSINESS BEATITUDES...The Bridge connecting sacrifice to success. YOU NEED THE BUSINESS BEATITUDES!

TAP INTO YOUR INDUSTRIAL SOUL, RESERVE YOUR COPY NOW! BE BOLD. BE BRAVE. DARE GREATLY AND CHANGE THE WORLD. GET THE BUSINESS BEATITUDES!

Reserve My Copy and My 25% Discount

The podcast and artwork embedded on this page are from The Industrial Talk Podcast with Scott MacKenzie, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.

Podcast: The Industrial Talk Podcast Network (LS 39 · TOP 2% what is this?)
Episode: Martijn Grooten with Censys
Pub date: 2026-10-15

Get Podcast Transcript →
powered by Listen411 - fast audio-to-text and summarization

Industrial Talk/BCC is talking to Martijn Grooten, Principal Security Researcher at Censys about "State of the Internet Report".

Overview

The discussion examined findings from Censys’ State of the Internet Report and their implications for organizational cybersecurity.
Report Findings

The report uses Censys’ internet-wide data to describe exposed services, vulnerabilities, threats, and infrastructure; it provides evidence rather than prescriptive guidance.
Many vulnerabilities are patched by vendors, but organizations often delay applying updates. HTTP services are frequently found on nonstandard ports.

Exposure Risks

About 80% of internet-visible hosts running industrial control system services also run a non-ICS service, such as HTTP, SSH, or FTP, expanding potential attack surfaces.
Public-facing AI infrastructure grew 63% during the nine-month period covered. Among observed n8n hosts, 76% had at least one vulnerability with a severity score above 9; patches existed, but updates were not applied promptly.
Threat actors select hosting providers based partly on permissiveness and resistance to takedowns. Shadow IT and shadow AI can arise when employees use unofficial tools to get work done.

Outline

Report Purpose

Censys shares data from its internet-wide observations to inform cybersecurity professionals and organizations.
The report describes exposure and trends rather than providing detailed remediation instructions.

Vulnerabilities and Protocols

Vulnerabilities are routinely discovered and patched, but organizations may be slow to install updates.
Services such as HTTP can run on nonstandard ports, so monitoring only default ports may miss exposed services.

Industrial Systems

About 80% of observed hosts running an industrial control system service also ran a non-ICS service, including HTTP, SSH, or FTP.
These additional services can broaden the attack surface of industrial environments.

Threat Infrastructure

Threat actors choose hosting providers based on cost, functionality, and permissiveness, rather than choosing infrastructure by country alone.
The report observes phishing pages and command-and-control servers, not malware activity on individual computers.

AI and Shadow IT

Public internet-facing AI infrastructure grew 63% during the report’s covered period.
Many observed n8n hosts had severe known vulnerabilities; the interview emphasized delayed patching.
Unofficial tools and AI use can create security risks when organizational systems do not meet employees’ work needs.

If interested in being on the Industrial Talk show, simply contact us and let's have a quick conversation.

Finally, get your exclusive free access to the Industrial Academy and a series on “Why You Need To Podcast” for Greater Success in 2026. All links designed for keeping you current in this rapidly changing Industrial Market. Learn! Grow! Enjoy!
MARTIJN GROOTEN'S CONTACT INFORMATION:

Personal LinkedIn: https://www.linkedin.com/in/martijngrooten/

Company LinkedIn: https://www.linkedin.com/company/censysio/

Company Website: https://censys.com/

State of the Internet Blog: https://censys.com/blog/state-of-the-internet-report-2026/

State of the Internet Report: https://censys.com/2026-state-of-the-internet-report/
PODCAST VIDEO:

https://youtu.be/t_k-lsrLBGU
THE STRATEGIC REASON "WHY YOU NEED TO PODCAST":

OTHER GREAT INDUSTRIAL RESOURCES:

Industrial Marketing Solutions:  https://industrialtalk.com/industrial-marketing/

Industrial Academy: https://industrialtalk.com/industrial-academy/

Industrial Dojo: https://industrialtalk.com/industrial_dojo/
Business Beatitude the Book

Do you desire a more joy-filled, deeply-enduring sense of accomplishment and success? Live your business the way you want to live with the BUSINESS BEATITUDES...The Bridge connecting sacrifice to success. YOU NEED THE BUSINESS BEATITUDES!

TAP INTO YOUR INDUSTRIAL SOUL, RESERVE YOUR COPY NOW! BE BOLD. BE BRAVE. DARE GREATLY AND CHANGE THE WORLD. GET THE BUSINESS BEATITUDES!

Reserve My Copy and My 25% Discount

The podcast and artwork embedded on this page are from The Industrial Talk Podcast with Scott MacKenzie, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.