@BEERISAC: OT/ICS Security Podcast Playlist

Podcast: Industrial Cybersecurity Insider
Episode: Why Your Disaster Recovery Strategy Is At Risk (And How to Fix It)
Pub date: 2026-11-04

Get Podcast Transcript →
powered by Listen411 - fast audio-to-text and summarization

A successful backup is reassuring, but can your team actually restore a critical system when production is on the line?
Dino sits down with Hannah Bergin and Jack Mansfield of Macrium Software to explore what recovery looks like in manufacturing environments, from fragile legacy Windows machines to isolated networks and plant systems with different owners.
They discuss why backup and recovery should be considered during system design, how IT and OT teams can share responsibility without losing sight of safety and production, and why documentation, training and recovery drills matter as much as the technology itself.
Whether the disruption comes from a cyber incident or a failed drive, the conversation offers practical questions to help plant leaders and security teams prepare before something goes wrong.
Chapters:
(00:00:00) The risk of untested backups
(00:03:00) Backup and recovery for industrial systems
(00:06:00) On premises backup for isolated OT networks
(00:09:00) Backup retention and recovery objectives
(00:12:00) Building a disaster recovery program
(00:15:00) Balancing plant control and enterprise oversight
(00:19:00) Recovery by design for OEMs and integrators
(00:23:00) Funding OT security through capital projects
(00:27:00) Testing recovery before a disruption

Links And Resources:
Want to Sponsor an episode or be a Guest? Reach out here.
Industrial Cybersecurity Insider on LinkedIn
Cybersecurity & Digital Safety on LinkedIn
BW Design Group Cybersecurity
Hannah Bergin on LinkedIn
Jack Mansfield on LinkedIn
Dino Busalachi on LinkedIn
Craig Duckworth on LinkedIn

Thanks so much for joining us this week. Want to subscribe to Industrial Cybersecurity Insider? Have some feedback you’d like to share? Connect with us on Spotify, Apple Podcasts, and YouTube to leave us a review!

The podcast and artwork embedded on this page are from Industrial Cybersecurity Insider, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.

Podcast: Error Code (LS 28 · TOP 10% what is this?)
Episode: EP 94: When AI Hands Anyone the Keys to the Grid
Pub date: 2026-11-03

Get Podcast Transcript →
powered by Listen411 - fast audio-to-text and summarization

Last summer 30+ Minnesota water utilities got hacked. No zero-days. No malware. Just default passwords on internet-exposed PLCs exposed. Eric Stride, Chief Security Officer at Huntress, discusses how AI now lets anyone attack US critical infrastructure.

The podcast and artwork embedded on this page are from Robert Vamosi, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.

Podcast: (CS)²AI Podcast Show: Control System Cyber Security
Episode: The FDA's Biggest Stick: Medical Device Cybersecurity with Billy Rios
Pub date: 2026-11-03

Get Podcast Transcript →
powered by Listen411 - fast audio-to-text and summarization

Billy Rios, vulnerability researcher and (CS)²AI Fellow, joins Derek Harp for the audience Q&A after presenting his team's research on a connected wheelchair that was later recalled. Billy explains why the FDA's power to keep a device off the US market is the biggest stick in any industry, what a recall means when the problem is software, and why a manufacturer can't simply switch off a core feature to fix a flaw. They get into legacy "big iron" devices (Billy has bought a CT scanner and a C-arm), why the FDA's guidance works even though it isn't prescriptive, and how manufacturers' behavior has changed in about ten years. Billy also gives advice to researchers: bug bounties, making a living as an independent, how the CFAA and DMCA good-faith exception affect legal risk, and a plain-English explanation of side-channel attacks.
Watch the wheelchair clip: https://youtu.be/6-iBC5ugiSo
More from (CS)²AI on YouTube: https://www.youtube.com/@cs2ai
Guest: Billy Rios, (CS)²AI Fellow, Cybersecurity Researcher, Author, and Co-Founder of QED Solutions
Host: Derek Harp, Founder and Chairman, (CS)²AI
Recorded live during a (CS)²AI Online webinar on October 21, 2026.
Chapters:
00:42 Welcome from Trisha Harp and the wheelchair research
02:01 Who decides whether a manufacturer reports to the FDA?
04:44 Are manufacturers getting better? Why the FDA matters
08:43 The FDA's biggest stick: keeping a device off the market
09:16 What a recall means when the problem is software
11:15 Guidance that isn't prescriptive
14:16 Controlled vs. uncontrolled vulnerabilities, and the wheelchair dilemma
17:30 How the FDA process changed manufacturers
20:11 Legacy "big iron": CT scanners, C-arms and VBScript
24:08 Standards, secure by design and the "soup" analogy
26:10 Connected devices multiplying inside and outside the hospital
28:24 Advice for researchers: the 300 backdoor passwords and the PATCH Act
30:58 Bug bounties and making a living as a researcher
34:55 Legal risk: the CFAA and the DMCA good-faith exception
37:11 Side-channel attacks explained
38:56 Why only the FDA can do this 41:13 Parting words
Legal topics in this episode are Billy's views, not legal advice.
Produced by (CS)²AI (Control System Cyber Security Association International).

The podcast and artwork embedded on this page are from Derek Harp, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.

Podcast: Let's talk OT – Die Zukunft der Industrie
Episode: Cybersecurity in der OT richtig starten
Pub date: 2026-11-03

Get Podcast Transcript →
powered by Listen411 - fast audio-to-text and summarization

Cybersecurity in der OT klingt für dich nach unbezahlbaren Software-Tools, endlosen Audits und riesigen Bergen von Papier? Keine Sorge, es geht auch anders!
In dieser Folge von „Let's Talk OT – die Zukunft der Industrie“ räumen Max und Michael mit dem Mythos auf, dass OT-Security ein unbezwingbares Schreckgespenst sein muss. Sie zeigen dir, wie der pragmatische, risikobasierte Einstieg in die Absicherung deiner Produktion gelingt ganz ohne fortwährenden Abhängigkeiten und/oder übertriebener Bürokratie.
Erfahre, warum das Lösen von ganz alltäglichen „Sünden“ (wie standardisierten Passwörtern) oft viel wertvoller für deine Betriebsresilienz ist als das x-te theoretische Gutachten. Denn, die OT muss das Rad gar nicht immer neu erfinden! Die beiden Branchenexperten schlagen eine spannende Brücke zu Maschinensicherheit (Safety), die in unseren Werken ohnehin schon gelebt wird. 
In dieser Folge erfährst du:
Wie du die Logik klassischer Risikobeurteilungen der Maschinensicherheit für deine OT-Security nutzen kannst.
Warum wir in der Industrie exzellent im Analysieren, aber oft schwach im echten Patchen sind (und wie wir diesen Knoten platzen lassen).
Wie du deine Konstrukteure und Planer befähigst, Security ganz natürlich und ohne Zusatzaufwand im normalen Entwicklungsprozess mitzudenken.
Eine ehrliche Einschätzung, was der Cyber Resilience Act für den Maschinenbau wirklich bedeutet und wie der Markt darauf reagieren wird.
Hör jetzt rein und nimm die Abkürzung zu einer sicheren, stabilen Produktion!
(Vergiss nicht, den Podcast zu abonnieren und uns einen Daumen nach oben dazulassen!)
Kapitel:
00:00 Einstieg und Einleitung
00:31 Wie startet man eigentlich strategisch sinnvoll in die OT-Cybersecurity?
02:12 Safety vs. Security: Was können wir bei der Risikobeurteilung aus der Maschinensicherheit lernen?
05:14 Abhängigkeit verhindern: Wie befähigst du dein eigenes Team für interne Risikoanalysen?
12:09 Gap-Analyse vs. risikobasierter Ansatz: Warum schützt dich reine Dokumentation vor keinem Hacker?
14:21 Das Umsetzungs-Dilemma: Warum sind wir genial im Auditieren, aber katastrophal beim eigentlichen Patchen?
18:44 Passwörter und Zertifikate: Wo liegen die ungenutzten Low-Hanging-Fruits im Schaltschrank?
23:09 Wohin mit dem knappen Budget: Investierst du besser in Passwort-Management oder Netzwerksegmentierung?
31:04 Cyber Resilience Act (CRA): Wie gut sind Maschinenbauer wirklich auf die neue Meldepflicht vorbereitet?
Jetzt reinhören und das volle Potenzial deiner OT-Daten entfesseln!
- Michael Grollmus auf LinkedIn
https://www.linkedin.com/in/michael-grollmus/
- Max Weidele auf LinkedIn
https://www.linkedin.com/in/max-weidele-ot-security/

Intro: Music by raspberrymusic
https://pixabay.com/music/funk-feel-good-upbeat-percussion-logo-388050/

The podcast and artwork embedded on this page are from Michael Grollmus, Max Weidele, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.

Podcast: Utility Emergency Response with Isaac Alatorre and Jim Wollbrinck
Episode: Water Utility Cybersecurity, AI & Emergency Readiness with Kevin Morley and Cris Perez
Pub date: 2026-10-01

Get Podcast Transcript →
powered by Listen411 - fast audio-to-text and summarization

What happens when a water utility loses access to its control systems—and who still knows how to operate manually?
Dr. Kevin Morley of AWWA and Cris Perez of Santa Clarita Valley Water Agency return to the Utility Emergency Response Podcast after appearing in our most-downloaded episode last year.
Joining hosts Isaac Alatorre and Jim Wollbrinck for Cybersecurity Awareness Month, they discuss cybersecurity fundamentals, emergency exercises, retiring operators, and the practical questions utilities should ask before adopting AI.
The conversation explores: • Cyber threats and the operational consequences of compromised control systems • Manual operations and preserving institutional knowledge • Connecting risk assessments with emergency response actions • AI governance, realistic expectations, and data ownership • Cybersecurity requirements in procurement and contracts • Emerging concerns involving data centers, equipment availability, and drones • Training opportunities and collaboration across the water sector
Kevin brings a national water-sector perspective, while Cris shares the realities of leading technology services at a water agency.
A practical discussion for utility operators, supervisors, IT teams, emergency managers, and decision-makers. Watch video version on YouTube: https://youtu.be/_XKpd9ibDKc

The podcast and artwork embedded on this page are from Portable Pipeline System, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.