106: Top Gun Meets the Cloud: Ken's Guide to Keeping Your Airplanes (and Data) Safe

(CS)²AI Podcast Show: Control System Cyber Security

Player FM - Internet Radio Done Right

اضافه شده در four سال پیش

Kandungan disediakan oleh Derek Harp. Semua kandungan podcast termasuk episod, grafik dan perihalan podcast dimuat naik dan disediakan terus oleh Derek Harp atau rakan kongsi platform podcast mereka. Jika anda percaya seseorang menggunakan karya berhak cipta anda tanpa kebenaran anda, anda boleh mengikuti proses yang digariskan di sini https://ms.player.fm/legal.

<div class="span index">1</div> <span><a class="" data-remote="true" data-type="html" href="/series/action-academy-replace-the-job-you-hate-with-a-life-you-love">Action Academy | Replace The Job You Hate With A Life You Love</a></span>

1
Action Academy | Replace The Job You Hate With A Life You Love

Batal langganan

1 day ago1d ago

Batal langganan

Harian

Ready to replace your 6-figure salary with real freedom? This is the podcast for high earners who feel stuck in jobs they’ve outgrown. If you’re asking, “How do I actually replace $10K–$20K/month so I can quit and never look back?” — welcome home. At Action Academy, we teach you how to buy small businesses and commercial real estate to create cash flow that actually replaces your job. Monday through Friday, you’ll learn from 7–9 figure entrepreneurs, real estate moguls, and acquisition pros who’ve done it — and show you how to do it too. Hosted by Brian Luebben (@brianluebben), who quit his 6-figure sales role in 2022 to build a global business while traveling the world. If you're a high-income earner ready to become a high-impact entrepreneur, this show is your playbook. Subscribe now and start your path to freedom — or keep pretending your job will get better someday....

about a year ago 42:08

MP3•Laman utama episod

We are delighted to have Ken Munro joining us from the UK today!

Ken is a Partner and Co-founder of Pen Test Partners. He is a seasoned technologist, the founder of multiple ventures, a pilot, a skier, and a dynamic and adventurous contributor to our community.

Ken brings a wealth of experience and expertise that promises to enrich our understanding of the evolving landscape in cybersecurity. In today's discussion, we dive into his remarkable career journey and explore his perspective on OT and ICS-related cybersecurity.

Join us for this informative session with Ken as he shares his valuable perspectives.

Show Highlights:

Ken discusses his cybersecurity industry journey
How Ken’s past Air Force experience relates to his current work in cybersecurity
The benefits of telling a story when communicating complex concepts
Ken shares a story to highlight the importance of safety and security within the aviation industry
Ken talks about the unique systems on board planes and their vulnerabilities
How the isolated protocols used in older aircraft systems are more robust and stable than the modern systems
How even simple display systems can cause airport outages
Ken shares his concerns about cybersecurity risks within cloud management platforms for industrial control systems
How including contractual language for liability in procurement contracts can protect organizations against cybersecurity risks
Ken shares his thoughts on the future of the cybersecurity industry

Links and resources:

(CS)²AI

Derek Harp on LinkedIn

Ken Munro on LinkedIn

Pen TestPartners

131 episod

106: Top Gun Meets the Cloud: Ken's Guide to Keeping Your Airplanes (and Data) Safe

(CS)²AI Podcast Show: Control System Cyber Security

published about a year ago

Kongsi

MP3•Laman utama episod

We are delighted to have Ken Munro joining us from the UK today!

Ken is a Partner and Co-founder of Pen Test Partners. He is a seasoned technologist, the founder of multiple ventures, a pilot, a skier, and a dynamic and adventurous contributor to our community.

Join us for this informative session with Ken as he shares his valuable perspectives.

Show Highlights:

Ken discusses his cybersecurity industry journey
How Ken’s past Air Force experience relates to his current work in cybersecurity
The benefits of telling a story when communicating complex concepts
Ken shares a story to highlight the importance of safety and security within the aviation industry
Ken talks about the unique systems on board planes and their vulnerabilities
How the isolated protocols used in older aircraft systems are more robust and stable than the modern systems
How even simple display systems can cause airport outages
Ken shares his concerns about cybersecurity risks within cloud management platforms for industrial control systems
How including contractual language for liability in procurement contracts can protect organizations against cybersecurity risks
Ken shares his thoughts on the future of the cybersecurity industry

Links and resources:

(CS)²AI

Derek Harp on LinkedIn

Ken Munro on LinkedIn

Pen TestPartners

131 episod

همه قسمت ها

1
129: Why OT Cybersecurity Isn't a One-Tool Problem: Insights to be discussed at Level Zero 14:48

5 weeks ago14:48

14:48

In this insightful episode of the (CS)²AI Podcast, host Derek Harp welcomes Jay Gignac, Vice President of Sales at FoxGuard Solutions, (CS)²AI Fellow and a passionate OT cybersecurity evangelist. The conversation centers around some of the most pressing challenges in the control systems industry—asset visibility, patch management, and community collaboration. Jay, who will be speaking at the upcoming Level Zero OT Cybersecurity Conference, offers expert-level advice for professionals navigating the complex world of operational technology security. Listeners will hear real-world examples of how OT differs from IT, particularly in areas like patching and compliance. Jay shares how asset discovery and lifecycle management remain fundamental hurdles, even after over a decade of cybersecurity initiatives. The discussion explores the nuances across industry verticals—energy, manufacturing, oil & gas—and underscores why tailored approaches are critical when securing diverse OT environments. This episode is a must-listen for OT professionals, cybersecurity leaders, and anyone attending Level Zero or looking to deepen their understanding of control systems security. Discover why collaboration, not just technology, is key to long-term success in the OT space. Whether you’re an engineer, a procurement officer, or a seasoned CISO, there’s valuable insight here for everyone working to protect the core of their company’s operations.…

1
128: From the Pentagon to Public Safety: Lucian Niemeyer’s Mission to Secure OT 28:24

10 weeks ago28:24

28:24

Lucian Niemeyer , Chief Executive Officer of Building Cyber Security and former Assistant Secretary of Defense, joins Derek Harp to discuss the growing cyber risks to operational technology (OT) systems and the urgent need for proactive frameworks to protect public safety. Recorded live at Hack the Capitol 7.0 , this episode delves into the vulnerabilities in smart buildings, connected infrastructure, and critical systems that could have life-threatening consequences if exploited. Lucian shares how his experience in national security shaped his focus on OT cybersecurity, emphasizing the physical impacts of cyberattacks on HVAC systems, elevators, and even water utilities. He introduces the concept of cyber commissioning , a process that ensures building systems are configured securely from the start. Lucian also explains how Building Cyber Security is creating industry-specific frameworks to help facility managers, building owners, and policymakers mitigate risks and reduce insurance liabilities. With increasing threats from ransomware, nation-states, and insider errors, this episode highlights why securing operational technology is critical to protecting both property and lives. Learn how Lucian’s nonprofit is driving collaboration across industries to address this rapidly evolving threat landscape.…

1
127: Unlocking the Power of Asset Inventory in OT Cybersecurity with Roya Gordon 24:22

11 weeks ago24:22

24:22

Roya Gordon , previously the Executive Industry Consultant - Operational Technology (OT) Cybersecurity at Hexagon Asset Lifecycle Intelligence and currently, is the Deputy CISO at ENGIE North America Inc., joins Derek Harp live from Hack the Capitol 7.0 to explore the evolving landscape of asset inventory in operational technology (OT). Roya breaks down the differences between asset visibility, inventory, and management, sharing her firsthand experiences from both passive and configuration-based methodologies. Roya highlights the critical role of asset inventory in building a strong OT cybersecurity foundation. From distinguishing between passive and active network monitoring to the importance of configuration management, she emphasizes how a multi-layered approach can offer comprehensive visibility and risk management. Roya also dives into why organizations often overlook configuration change management, and how integrating different solutions can optimize security efforts. Whether you’re a seasoned OT professional or just starting your cybersecurity journey, this episode offers valuable insights into improving asset management, reducing risks, and fostering collaboration between vendors and operators.…

1
126: Shifting Left: Why Secure Software Starts at the Design Stage 35:00

12 weeks ago35:00

35:00

In this episode of the (CS)²AI Podcast, host Derek Harp welcomes Mehdi Tarrit Mirakhorli , Associate Professor at the University of Hawaii and a Cybersecurity Expert , to discuss Secure by Design—a fundamental shift in how we develop and deploy software in industrial control systems (ICS) and operational technology (OT). With over 15 years of R&D experience for DARPA, the Air Force, and DHS, Mehdi shares why modern software is inherently vulnerable and how we can learn from aviation, medical, and safety-critical industries to build resilient systems from the ground up. The conversation dives deep into the risks of insecure by design software, the challenges of implementing true security practices, and the role of government policies in shifting liability from users to vendors. Mehdi explains the importance of threat modeling, attack surface analysis, and secure architecture frameworks to mitigate cyber threats before they arise. He also highlights how software development must evolve beyond rapid deployment cycles to integrate security as a core design principle. If you’re an ICS professional, cybersecurity engineer, or software developer, this episode provides actionable insights on reducing vulnerabilities at scale, implementing proactive security measures, and preparing for the future of cyber threats. Subscribe now and stay ahead in the ever-evolving world of industrial cybersecurity!…

1
125: Decoding SBOMs: Kyle McMillian on Cybersecurity and Supply Chain Transparency 27:24

13 weeks ago27:24

27:24

Derek Harp welcomes Kyle McMillian , Product Security Officer at Siemens, to discuss the evolving landscape of software bill of materials (SBOMs) and their role in modern cybersecurity. Recorded live at Hack the Capitol 7.0 , this conversation unpacks the challenges and opportunities posed by SBOMs in an industry grappling with legacy systems and modern threats. Kyle dives into the origins of SBOMs, their role in addressing vulnerabilities like Log4J, and their potential to transform procurement, risk management, and incident response. He emphasizes the importance of balancing transparency with practicality, noting that SBOMs are a starting point for broader cybersecurity conversations. With his unique perspective from a leading equipment manufacturer, Kyle shares insights into how SBOMs can help bridge the gap between IT and OT systems. This episode is essential for anyone looking to understand the future of cybersecurity and the critical role of SBOMs in securing industrial control systems. Learn how these tools can foster trust, streamline risk management, and improve collaboration across the industry.…

1
124: Capture the Flag: Transforming Cybersecurity Training with Kenneth Warren 23:12

14 weeks ago23:12

23:12

Derek Harp sits down with Kenneth Warren , Staff OT and Offensive Security Engineer at GRIMM Cyber, to discuss how gamification and Capture the Flag (CTF) competitions are revolutionizing cybersecurity training. Recorded live at Hack the Capitol 7.0 , this conversation explores how CTFs and cyber ranges create safe, hands-on environments for learning offensive and defensive cybersecurity skills. Kenneth explains how CTFs offer opportunities to tackle real-world scenarios, from navigating complex networks to interacting with industrial control protocols. Whether you're an experienced professional or a newcomer to the field, CTFs provide a unique way to build and refine your skills. He also highlights how gamification reaches audiences that traditional training might miss, making learning engaging and accessible. This episode provides insights into the growing role of gamified learning in cybersecurity and how it’s inspiring the next generation of professionals. Discover how these competitions foster collaboration, creativity, and innovation in a rapidly evolving industry.…

1
123: From Classroom to Crisis: Immersive Training for ICS Security Professionals 23:00

15 weeks ago23:00

23:00

Derek Harp hosts Jeff Hahn , Project Manager at Idaho National Laboratory (INL), to discuss innovative approaches to training in the ICS and OT cybersecurity space. Recorded live at Hack the Capitol 7.0 , Jeff shares insights into how INL’s escape rooms provide hands-on, immersive learning experiences for professionals and students alike. The escape rooms integrate learning objectives from INL’s renowned 301 Red Team/Blue Team training, transforming them into engaging, gamified challenges. These exercises offer participants a chance to simulate real-world scenarios, improve teamwork, and develop critical cybersecurity skills. Jeff also highlights the importance of bridging gaps between IT and OT teams through collaborative training initiatives. Whether you're a seasoned professional or a newcomer to the field, this episode explores how gamification and experiential education can help prepare the next generation of cybersecurity experts. Discover how these escape rooms are traveling the world, raising awareness, and making learning accessible to everyone.…

1
122: Securing the Future: Rob Shaughnessy on Innovation, Supply Chain, and Cyber Threats 33:13

16 weeks ago33:13

33:13

Derek Harp welcomes Rob Shaughnessy , President & CEO, Director of Psymetis, Inc., to discuss critical issues in the world of ICS and OT security, recorded live at Hack the Capitol 7.0 . Rob dives into the vulnerabilities surrounding the development of innovative technologies, supply chain risks, and the evolving threat landscape posed by nation-state actors. The conversation highlights the growing need for transparency in supply chains, the legal gaps in cybersecurity requirements for technology companies, and the rise of services like ransomware-as-a-service, which lower the bar for cybercriminals. Rob also shares his perspective on education and workforce challenges in cybersecurity, emphasizing the importance of foundational skills and the risks of over-relying on influencer culture. Packed with actionable insights, this episode offers a nuanced look at the complexities of securing critical infrastructure, balancing innovation with security, and preparing for a more connected, yet vulnerable, future.…

1
121: From Farm to Fork: Kristin Demoranville on Food Safety and Cybersecurity 24:35

17 weeks ago24:35

24:35

The intersection of cybersecurity and the food industry takes center stage as Kristin Demoranville, founder and CEO of Anson Sage and host of Bytes and Bites , joins Derek Harp at Hack the Capitol 7.0 . This compelling conversation reveals how digital systems impact every aspect of the food supply chain, from farming and production to transportation and storage. Kristin highlights key vulnerabilities, including risks in automated farming equipment, robotic processing lines, and self-driving refrigerated trucks. She advocates for embedding cybersecurity into food safety practices to protect both trust and the integrity of what we eat. As the industry embraces groundbreaking innovations like AI and lab-grown food, addressing these challenges is more crucial than ever. Listeners will gain valuable insights into the urgent need for collaboration, awareness, and action to secure the systems that sustain our daily lives. This dialogue sheds light on the essential role of cybersecurity in ensuring a safe and reliable food supply for everyone.…

1
120: ResetCon and the Future of Cybersecurity: Insights from Jay Warne 22:26

18 weeks ago22:26

22:26

In this episode of the (CS)²AI Podcast , host Derek Harp welcomes Jay Warne , co-founder of ResetCon, to discuss the intersection of cybersecurity research, critical infrastructure, and collaborative defense strategies. Recorded live at Hack the Capitol 7.0 , this conversation highlights the pressing need to close gaps between academia, offensive researchers, and critical industries. Jay delves into the mission of ResetCon, an inaugural conference designed to connect academic researchers, defense experts, and key players from the civilian and commercial sectors. Together, they aim to anticipate emerging threats, mitigate risks, and reduce recovery times for critical systems. The discussion also explores the challenges of integrating IT and OT security teams, the importance of "cyber-informed engineering," and the need for secure-by-design principles. Listeners will gain insights into the future of cybersecurity, including lessons learned from DARPA research, the importance of bridging silos, and how to build more resilient systems. Don’t miss this episode if you’re passionate about protecting critical infrastructure and fostering innovation.…

1
119: Revealing the OT Threat Landscape: Remote Access, Supply Chain, and Lateral Movement 19:37

19 weeks ago19:37

19:37

Our host Derek Harp sits down with Adam Robbie , Head of OT Threat Research at Palo Alto Networks, live from Hack the Capitol 7.0 . Adam shares critical insights into emerging cybersecurity challenges within Operational Technology (OT) environments, including findings from Palo Alto's extensive OT threat landscape research. Listeners will hear about the top attack vectors impacting critical infrastructure: remote access vulnerabilities , supply chain risks , and lateral movement across networks. Adam discusses the importance of network segmentation , cross-team collaboration between IT and OT, and innovative tools like the Cyberwall , a hands-on demonstration environment showcasing real-world OT threats. Whether you're an OT security professional or new to the field, this episode delivers practical takeaways to enhance your cybersecurity strategies. Don’t miss this engaging conversation focused on securing control systems and building stronger, collaborative defenses.…

1
118: Preparing for Cyber Threats: A Strategic Discussion with Mark Montgomery on Securing Our Future 13:26

20 weeks ago13:26

13:26

In this episode of the CS2AI Podcast , host Derek Harp dives deep into the evolving threats to national security and critical infrastructure with Mark Montgomery, Senior Fellow at the Foundation for Defense of Democracies. Recorded live at the Hack the Capitol 7.0 conference in Washington D.C., this episode sheds light on the increasing cyber vulnerabilities faced by the United States from nation-states like China and Russia, as well as criminal actors exploiting critical infrastructure. Mark shares his extensive experience and expertise, offering insights into how the U.S. government can better prepare and protect itself in the face of modern cyber threats. Mark discusses the significant mismatch between the capabilities of the Department of Defense and intelligence agencies, and the authorities of civilian federal agencies responsible for protecting sectors like power, water, and transportation. He also highlights the pressing issue of underperforming federal agencies tasked with safeguarding critical infrastructure, and the dire need for a comprehensive, bipartisan approach to cybersecurity legislation. With over 32 years in the U.S. Navy and years of policy work in the federal government, Mark offers a unique perspective on the future of cybersecurity and what needs to change to address these challenges effectively. One of the key takeaways from this episode is Mark’s call for a more cohesive strategy to defend against cyber threats and protect public safety and economic productivity. Despite the ongoing challenges, there’s a sense of hope as Mark emphasizes the bipartisan nature of cybersecurity solutions and the possibility of enacting meaningful changes. This conversation is essential for anyone involved in cybersecurity, national security, or government policy and provides crucial insights into the future of cyber defense in the United States.…

1
117: Rapid7’s Approach to ICS and OT Security: Lessons from the Field 24:45

21 weeks ago24:45

24:45

2 years ago41:40

41:40

(

(CS)²AI Podcast Show: Control System Cyber Security

3 years ago38:33

38:33

Today, Jeff Hussey joins Derek Harp for another podcast in the Security Leader interview series. Jeff is the Co-Founder, President, and CEO of Tempered. He is a serial entrepreneur who has accomplished a lot throughout his career. He founded and co-founded several companies, including the well-known F5 Networks. He is a professional board member of various businesses- both for-profit and not-for-profit. He has worked hard to make the internet more resilient, hardened, and secure, bring clean water to underprivileged countries, and enrich his community through the arts. He has also been funding and broadening technology innovation and cultivating better living standards for coffee growers in Latin America. Jeff is also a speaker, mountain climber, wine-maker, father, and lover of all things tech! Starting from a very young age, Jeff has always been passionate about technology and communications! In this episode of the (CS)²AI Podcast, he talks about his background, his love of tech, the various businesses he started, and founding Tempered. He shares nuggets of advice around getting down to the fundamentals of what you are studying, dealing with customers, and networking, and offers some valuable tips for moving forward in the cyber security industry. You won’t want to miss this episode if you are starting a career in cyber security or if you are in a similar field and considering a career change! Stay tuned for more! Show highlights: Jeff explains why he creates his own jobs. (3:53) Jeff talks about his passion for tech and communications. (4:33) How the first company Jeff started became the first internet service provider in Honolulu. (9:28) The increasing internet traffic inspired Jeff to start his next business in 1996. (10:29) Jeff discusses his initial foray into security and explains how the security paradigm changed after that. (12:25) How his dad used to advise and help him early in his career. (16:30) What he did to deepen his knowledge and become more effective in his career role. (18:01) Jeff offers some excellent advice for dealing efficiently and effectively with customers. (22:05) Jeff talks about his company, Tempered. (25:53) Jeff explains what the host identity protocol does and how his company, Tempered, approaches it to create a hyper-secure network. (30:42) Jeff shares his views on corporate culture. (34:16) Jeff explains what excites him about the Airwall Solution that Tempered brought to market. (42:50) Links: (CS)²AI Jeff Hussey on LinkedIn Tempered Books mentioned in the show: Steven’s TCP/IP Illustrated Volumes 1 and 2…

Selamat datang ke Player FM

Player FM mengimbas laman-laman web bagi podcast berkualiti tinggi untuk anda nikmati sekarang. Ia merupakan aplikasi podcast terbaik dan berfungsi untuk Android, iPhone, dan web. Daftar untuk melaraskan langganan merentasi peranti.

Dengarkan lebih 500+ topik

Mighty Patch™ Original patch from Hero Cosmetics - Hydrocolloid Acne Pimple Patch for Covering Zits and Blemishes in Face and Skin, Vegan-friendly and Not Tested on Animals (36 Count)

Skelet?

Bounty Paper Towels Quick Size, White, 16 Family Rolls = 40 Regular Rolls (Packaging May Vary)

Podcast Berbaloi untuk Didengar

(CS)²AI Podcast Show: Control System Cyber Security « » 106: Top Gun Meets the Cloud: Ken's Guide to Keeping Your Airplanes (and Data) Safe

106: Top Gun Meets the Cloud: Ken's Guide to Keeping Your Airplanes (and Data) Safe

Podcast Berbaloi untuk Didengar

Selamat datang ke Player FM

The Let Them Theory: A Life-Changing Tool That Millions of People Can't Stop Talking About

The Let Them Theory: A Life-Changing Tool That Millions of People Can't Stop Talking About

Ernie Ball Regular Slinky Nickel Wound Electric Guitar Strings, 10-46 Gauge (P02221)

Sunrise on the Reaping (A Hunger Games Novel) (The Hunger Games)

The Let Them Theory: A Life-Changing Tool That Millions of People Can't Stop Talking About

Panduan Rujukan Pantas

(CS)²AI Podcast Show: Control System Cyber Security « »
106: Top Gun Meets the Cloud: Ken's Guide to Keeping Your Airplanes (and Data) Safe