Episode 94

Building OT Cybersecurity That Works in the Real World

· 37:46 · Host: Craig and Dino

Industrial environments are complex. Aging systems, distributed plants, and a crowded vendor landscape make “buy another tool” a tempting but often costly reflex.

Play this episode

Show notes

Industrial environments are complex. Aging systems, distributed plants, and a crowded vendor landscape make “buy another tool” a tempting but often costly reflex.

In this episode, Dino Busalachi talks with Danielle “DJ” Jablanski, about moving from paper programs to measurable progress in OT security. They address why competence and capacity must come before capabilities, how to right-size your technology stack through tool rationalization, and why interdependence mapping is foundational for real resilience.

  • 00:00:00 – Why OT maturity often stalls
  • 00:06:00 – Where to focus first: assets, segmentation, and access
  • 00:08:20 – Governance gaps: frameworks on paper vs. controls in practice
  • 00:10:10 – Interdependence mapping beyond "crown jewels"
  • 00:12:30 – Operators as first responders and safe-state realities
  • 00:16:15 – Vendor and OEM ecosystems: who owns the response plan?
  • 00:20:10 – Threat intel's limits: effects‑based security over means‑based noise
  • 00:22:00 – Incident readiness in plants: plans, practice, and ownership
  • 00:26:00 – Supply chain fragility and concentration risk in manufacturing
  • 00:29:30 – Tool rationalization: measuring ROI, coverage, and usability

Links And Resources:


Thanks so much for joining us this week. Want to subscribe to Industrial Cybersecurity Insider? Have some feedback you’d like to share? Connect with us on Spotify, Apple Podcasts, and YouTube to leave us a review!

About Industrial Cyber Security Insider

Industrial Cybersecurity Insider brings clarity to one of the most urgent gaps in manufacturing and critical infrastructure: the divide between IT and OT. Hosts Craig and Dino talk with plant leaders, engineers, and security practitioners about protecting industrial operations in the real world — practical conversations for the people responsible for keeping production running and secure.

See all 146 episodes of Industrial Cyber Security Insider →

Book a 30-minute strategy call