Industrial Cybersecurity Insider

A successful backup is reassuring, but can your team actually restore a critical system when production is on the line?
Dino sits down with Hannah Bergin and Jack Mansfield of Macrium Software to explore what recovery looks like in manufacturing environments, from fragile legacy Windows machines to isolated networks and plant systems with different owners.
They discuss why backup and recovery should be considered during system design, how IT and OT teams can share responsibility without losing sight of safety and production, and why documentation, training and recovery drills matter as much as the technology itself.
Whether the disruption comes from a cyber incident or a failed drive, the conversation offers practical questions to help plant leaders and security teams prepare before something goes wrong.
Chapters:
(00:00:00) The risk of untested backups
(00:03:00) Backup and recovery for industrial systems
(00:06:00) On premises backup for isolated OT networks
(00:09:00) Backup retention and recovery objectives
(00:12:00) Building a disaster recovery program
(00:15:00) Balancing plant control and enterprise oversight
(00:19:00) Recovery by design for OEMs and integrators
(00:23:00) Funding OT security through capital projects
(00:27:00) Testing recovery before a disruption

Links And Resources:
Want to Sponsor an episode or be a Guest? Reach out here.
Industrial Cybersecurity Insider on LinkedIn
Cybersecurity & Digital Safety on LinkedIn
BW Design Group Cybersecurity
Dino Busalachi on LinkedIn
Craig Duckworth on LinkedIn

Thanks so much for joining us this week. Want to subscribe to Industrial Cybersecurity Insider? Have some feedback you’d like to share? Connect with us on Spotify, Apple Podcasts, and YouTube to leave us a review!

Your plant has monitoring tools. But is anyone watching what they find?
Dino Busalachi sits down with Justin Carlson, Chief Strategy Officer at Kasm, to talk about one of the biggest challenges in manufacturing cybersecurity: a shrinking pool of people who understand both the plant floor and security. They explore when managed services make sense, what decisions should always stay with your own team, and why buying more tools is not enough.
The conversation also covers consolidating remote access into a single controlled entry point, keeping vendors and integrators aligned, protecting legacy systems without disrupting production, and funding OT cybersecurity through capital projects so security becomes part of the work instead of an unplanned expense.
For CISOs, CIOs, plant managers, and engineering leaders, the takeaway is practical: know what is in your environment, keep that inventory current, and use your next plant project to become more secure.
Industrial Cybersecurity Insider brings practical conversations on securing manufacturing and critical infrastructure.
Chapters:
(00:00:00) Industrial Cybersecurity Insider: Securing Industrial Operations
(00:01:00) Kasm’s Origins and Ephemeral Computing Environments
(00:04:00) Secure Remote Access and the OT Workforce Gap
(00:07:00) Consolidating Plant Access and Protecting Legacy Systems
(00:11:00) Funding OT Cybersecurity Through Capital Projects
(00:17:00) Managed Services and the Business Case for Outside Expertise
(00:20:00) Browser Based Access and Third Party Oversight
(00:24:00) AI, Cyber Threats, and Manufacturing Downtime
(00:31:00) Asset Inventory, Capital Planning, and Taking Action

Links And Resources:
Want to Sponsor an episode or be a Guest? Reach out here.
Industrial Cybersecurity Insider on LinkedIn
Cybersecurity & Digital Safety on LinkedIn
BW Design Group Cybersecurity
Justin Carlson on LinkedIn
Dino Busalachi on LinkedIn
Craig Duckworth on LinkedIn

Thanks so much for joining us this week. Want to subscribe to Industrial Cybersecurity Insider? Have some feedback you’d like to share? Connect with us on Spotify, Apple Podcasts, and YouTube to leave us a review!

Your plant can be running exactly as expected and still have blind spots that put production, process, and people at risk.
Dino Busalachi and Kevin Kumpf break down the gaps most leaders never see: new equipment arriving with outdated firmware, vendors making changes nobody tracks, and process data that gets collected but rarely watched. Using refrigeration systems and manufacturing floors as examples, they show why monitoring has to connect security with uptime, maintenance, and the cost of a missed warning.
They also challenge the belief that encryption or network isolation is enough, explain where AI helps and where it still needs human judgment, and make the case for getting integrators, OEMs, IT, and operations into the same conversation.
Three questions every plant leader should be able to answer: Do you know what normal looks like in your plant? Who can change it? And who will notice when something starts to drift?
Follow Industrial Cybersecurity Insider for practical conversations on protecting production, people, and uptime.
Chapters:
(00:00:00) Why OT Attacks Put Business Continuity at Risk
(00:03:00) Industrial Network Design and the Visibility Gap
(00:07:00) Vendor Access, AI Data Collection, and Third Party Risk
(00:10:00) Outdated Firmware and Accountable Remote Maintenance
(00:13:00) Why AI Patching Needs Human Oversight in OT
(00:17:00) Process Data, Industrial Espionage, and Operational Value
(00:23:00) Choosing Integrators Who Understand Your Plant
(00:28:00) Building Monitoring Into New Equipment and Projects
(00:34:00) Backup Gaps and the Case for Managed OT Services
(00:38:00) Getting IT and OT to Share Responsibility

Links And Resources:
Want to Sponsor an episode or be a Guest? Reach out here.
Industrial Cybersecurity Insider on LinkedIn
Cybersecurity & Digital Safety on LinkedIn
BW Design Group Cybersecurity
Dino Busalachi on LinkedIn
Craig Duckworth on LinkedIn

Thanks so much for joining us this week. Want to subscribe to Industrial Cybersecurity Insider? Have some feedback you’d like to share? Connect with us on Spotify, Apple Podcasts, and YouTube to leave us a review!

Most manufacturers have an incident response plan. Few have tested it at 2 AM on a Sunday, with a skeleton crew and the people who know the equipment best nowhere to be found.
Fresh from the ICS Cybersecurity Conference in Nashville, Craig Duckworth and Dino Busalachi compare notes on what keeps industrial organizations from being ready for a real attack. The risk today goes beyond ransomware. It's attackers who blend into normal plant activity, process data that quietly exposes your intellectual property, security tools that never get used after the sale, and teams that still work in separate camps.
Craig and Dino talk through why IT, plant floor teams, system integrators, and equipment builders need to operate as one technology team, why new projects are the best place to build security in, and why passing an audit is not the same as being secure. They also look at how AI is speeding up both attacks and defenses, leaving manufacturers less time to react.
If you lead a plant, an engineering team, or a security program, this conversation will help you answer one question: if your plant was hit tonight, who makes the first call and who's on the other end receiving the call?
Listen now and share it with the people who own your plant floor.
Chapters:
00:00:00 Incident response plans must work outside office hours
00:01:00 Inside the OTICS Cyber Security Conference
00:02:00 Threat actors living in the normal
00:04:00 Why process data can expose intellectual property
00:07:00 The gap between tools, skills, and operating practice
00:08:00 Moving beyond the IT and OT divide
00:11:00 Why technology adoption matters after the sale
00:12:00 Building security into projects from the start
00:15:00 Defense in depth and protecting critical assets
00:17:00 Practicing incident response when it counts
00:19:00 Bringing integrators and asset owners to the table
00:20:00 Authority, accountability, and the CISO challenge
00:23:00 CMMC, continuous monitoring, and process data
00:24:00 Artificial intelligence changes the threat timeline
00:27:00 Asset discovery and security baselines
00:29:00 Checking a box versus improving the environment
00:32:00 Staying ahead through collaboration and readiness

Links And Resources:
Want to Sponsor an episode or be a Guest? Reach out here.
Industrial Cybersecurity Insider on LinkedIn
Cybersecurity & Digital Safety on LinkedIn
BW Design Group Cybersecurity
Dino Busalachi on LinkedIn
Craig Duckworth on LinkedIn

Thanks so much for joining us this week. Want to subscribe to Industrial Cybersecurity Insider? Have some feedback you’d like to share? Connect with us on Spotify, Apple Podcasts, and YouTube to leave us a review!

You passed the audit. The tools are installed. None of it means your plant is secure.
Most industrial cybersecurity plans are written far from the equipment they're meant to protect. The tools are purchased but never fully operationalized. Critical equipment stays unseen. And the plant teams who know it best are the last to see the data.
In this compilation episode, Craig Duckworth, Dino Busalachi, and Ian Bramson of Black & Veatch cover:
Why security tools sit unused, and what that costs
Why plant teams need access to security data
What real IT and OT collaboration looks like
Who responds first when something goes wrong
Why compliance isn't security
How to prioritize risk while protecting safety and uptime

Strong security programs are built with the people closest to the equipment. Is yours?
Chapters:
(00:00:00) The hidden gap in OT asset visibility
(00:04:00) Why plant teams need access to security data
(00:08:00) The cost of an unoperationalized cybersecurity tool
(00:10:00) What IT and OT convergence really means
(00:14:00) Bringing system integrators into the conversation
(00:18:00) Who responds first when an industrial incident happens
(00:22:00) Compliance, residual risk, and real world security
(00:26:00) Risk prioritization for utilities and industrial operators
(00:30:00) Build security into new projects from the start

Links And Resources:
Want to Sponsor an episode or be a Guest? Reach out here.
Industrial Cybersecurity Insider on LinkedIn
Cybersecurity & Digital Safety on LinkedIn
BW Design Group Cybersecurity
Dino Busalachi on LinkedIn
Craig Duckworth on LinkedIn

Thanks so much for joining us this week. Want to subscribe to Industrial Cybersecurity Insider? Have some feedback you’d like to share? Connect with us on Spotify, Apple Podcasts, and YouTube to leave us a review!