Episode 99
When IT Security Meets OT Reality: Why One Size Doesn't Fit All
What happens when IT cybersecurity practices collide with OT operational realities? In this episode, Jim and Dino expose the costly mistakes organizations make when applying IT security playbooks to manufacturing environments.
Chapters
- 00:00:00 — Introduction and Episode Overview
- 00:01:19 — IT vs OT Security Mindsets
- 00:02:03 — Zero Trust Challenges in OT Environments
- 00:05:12 — Remote Access and Change Management Conflicts
- 00:09:00 — Who Should Learn from Whom: IT or OT?
- 00:10:23 — Asset Inventory: What OT Engineers Don't Know
- 00:15:00 — Process Integrity and Operational Value
- 00:21:57 — Shadow IT: The Backdoors Nobody Talks About
- 00:26:00 — Designing Security Into New Equipment
- 00:28:00 — Digital Safety vs Physical Safety
Show notes
What happens when IT cybersecurity practices collide with OT operational realities? In this episode, Jim and Dino expose the costly mistakes organizations make when applying IT security playbooks to manufacturing environments.
Discover why zero trust architectures can halt production, how shadow IT thrives on every plant floor, and why remote access policies designed for corporate networks fail in industrial settings.
Learn the critical importance of OT-tailored asset inventories, the need for IT/OT collaboration, and why digital safety must be treated with the same urgency as physical safety.
If you're struggling to bridge the gap between IT security mandates and OT operational needs—or if you've ever watched a well-intentioned security policy bring production to a halt—this episode is your roadmap to getting it right.
Chapters:
- (00:00:00) - Introduction and Episode Overview
- (00:01:19) - IT vs OT Security Mindsets
- (00:02:03) - Zero Trust Challenges in OT Environments
- (00:05:12) - Remote Access and Change Management Conflicts
- (00:09:00) - Who Should Learn from Whom: IT or OT?
- (00:10:23) - Asset Inventory: What OT Engineers Don't Know
- (00:15:00) - Process Integrity and Operational Value
- (00:21:57) - Shadow IT: The Backdoors Nobody Talks About
- (00:26:00) - Designing Security Into New Equipment
- (00:28:00) - Digital Safety vs Physical Safety
Links And Resources:
- Want to Sponsor an episode or be a Guest? Reach out here.
- Industrial Cybersecurity Insider on LinkedIn
- Cybersecurity & Digital Safety on LinkedIn
- BW Design Group Cybersecurity
- Dino Busalachi on LinkedIn
- Craig Duckworth on LinkedIn
- Jim Cook on LinkedIn
Thanks so much for joining us this week. Want to subscribe to Industrial Cybersecurity Insider? Have some feedback you’d like to share? Connect with us on Spotify, Apple Podcasts, and YouTube to leave us a review!
Full transcript
[00:00:00] Speaker: Hey, if you've got a podcast
[00:00:01] Speaker: and you're
[00:00:01] Speaker: feeling burnt out, I want
[00:00:02] Speaker: you to watch this video 'cause my
[00:00:03] 2025_1023_1320: is Hector Sania. Esteban,
[00:00:04] Speaker: And for much of the last decade
[00:00:06] 2025_1023_1320: spent trying to figure
[00:00:07] Speaker: out how to
[00:00:08] 2025_1023_1320: a sustainable, successful, and profitable podcast, and what I see happen a lot
[00:00:12] Speaker: is that a lot of people get started because starting the podcast is actually the easy with
[00:00:17] 2025_1023_1320: all the tools
[00:00:18] Speaker: and all the AI that's out there getting going is
[00:00:20] Speaker: actually the
[00:00:21] 2025_1023_1320: part.
[00:00:21] 2025_1023_1320: The
[00:00:22] Speaker: challenging part is sustaining it. The challenging part
[00:00:24] Speaker: is making it
[00:00:24] Speaker: successful. And again, the challenging part is actually making money from And so these are the three mistakes that I see podcasters made. The first one is that they're not consistent enough. Podcasting takes time. There's no way around it and unfortunately it's not gonna happen overnight, What I tell podcasters is get to 25 episodes
[00:00:39] Speaker: as quickly as you can. and
[00:00:40] Speaker: there's two reasons for this, and the first
[00:00:42] 2025_1023_1320: is for you,
[00:00:43] Speaker: Getting to 25 episodes is gonna require you to get over your own bs. It's gonna require
[00:00:47] 2025_1023_1320: to be consistent
[00:00:48] Speaker: and it's gonna require
[00:00:49] 2025_1023_1320: to
[00:00:49] Speaker: actually make a habit
[00:00:50] 2025_1023_1320: of recording, which is one of the biggest challenges in getting going.
[00:00:54] 2025_1023_1320: The second reason is
[00:00:54] Speaker: actually for your audience.
[00:00:56] 2025_1023_1320: Too many people, they
[00:00:56] Speaker: look up after five,
[00:00:57] Speaker: 10, 15 episodes, and they think that it's not working. And
[00:01:00] 2025_1023_1320: it is, is just
[00:01:01] Speaker: that people haven't noticed yet. People have their own lives.
[00:01:03] 2025_1023_1320: are doing their own thing, and it takes time for people to notice,
[00:01:06] Speaker: but 25 episodes, if we think about episode week is a little over
[00:01:09] 2025_1023_1320: six months of content. And so if someone is seeing you over a six month period of time showing up week in and week out,
[00:01:15] Speaker: it's going to
[00:01:16] 2025_1023_1320: be
[00:01:16] Speaker: memorable.
[00:01:16] Speaker: the second mistake that I see podcasters make
[00:01:18] 2025_1023_1320: that they don't promote their podcast.
[00:01:20] Speaker: Because unfortunately, podcasts are not like other types
[00:01:22] Speaker: of content.
[00:01:23] Speaker: It's not like TikTok where you have an algorithm that's gonna
[00:01:25] 2025_1023_1320: find it and show it to people who don't follow you.
[00:01:27] Speaker: It's not like YouTube
[00:01:28] 2025_1023_1320: people are searching on their looking for specific
[00:01:31] Speaker: types of content, and it's not like Facebook or Instagram where you have
[00:01:35] 2025_1023_1320: group of
[00:01:36] Speaker: followers that are already following you.
[00:01:37] Speaker: Unfortunately, on podcasts,
[00:01:39] Speaker: You have to be the one to go out and tell people about it.
[00:01:41] Speaker: You can do this via social media. You can do this
[00:01:43] Speaker: via email,
[00:01:44] Speaker: or you can
[00:01:45] 2025_1023_1320: do it
[00:01:45] Speaker: in person in real life, in a variety
[00:01:47] 2025_1023_1320: of different ways.
[00:01:48] Speaker: The point is you have to tell people about it or
[00:01:51] 2025_1023_1320: no one's gonna find it.
[00:01:52] Speaker: The third mistake
[00:01:53] Speaker: is actually maybe contradictory to the first one, and that's that people put out too much content
[00:01:58] 2025_1023_1320: too frequently because the first
[00:02:00] Speaker: one requires
[00:02:01] 2025_1023_1320: and the second one requires you to
[00:02:02] Speaker: promote it. That's a lot
[00:02:03] 2025_1023_1320: time. And so some
[00:02:05] Speaker: podcasters get into the hamster wheel of content where they put one episode out
[00:02:09] 2025_1023_1320: then they're so busy and so caught up trying to get the
[00:02:11] Speaker: next episode out
[00:02:12] 2025_1023_1320: they don't actually take any time to promote it.
[00:02:14] 2025_1023_1320: So if that's the case, give yourself more time, space out your
[00:02:17] Speaker: episodes. Find ways
[00:02:19] 2025_1023_1320: to. Continue to publish, but maybe not
[00:02:22] Speaker: create entirely new episodes.
[00:02:24] Speaker: this can look like rerun episodes. This can look like mashup episodes, or this can look like
[00:02:28] 2025_1023_1320: shorter, smaller, or even
[00:02:29] Speaker: solo type episodes That
[00:02:30] Speaker: don't take as much time to produce an edit.
[00:02:32] Speaker: The important
[00:02:33] Speaker: thing is that you want to give yourself time to promote it,
[00:02:36] Speaker: and you also want to give yourself enough time so that you don't burn out.
[00:02:38] Speaker: So again, the three mistakes that podcasts make is that they're not consistent enough. Get to 25 episodes as
[00:02:43] 2025_1023_1320: as you can. Stay consistent.
[00:02:44] Speaker: The second mistake that they make is that they're not promoting it. You gotta tell people about it, post about
[00:02:48] 2025_1023_1320: on social media,
[00:02:48] Speaker: send your email list, send a text.
[00:02:50] Speaker: And the third thing is
[00:02:51] 2025_1023_1320: they may not be giving themselves enough time between the episodes
[00:02:55] Speaker: to adequately prepare for the next one and also promote it.
About Industrial Cyber Security Insider
Industrial Cybersecurity Insider brings clarity to one of the most urgent gaps in manufacturing and critical infrastructure: the divide between IT and OT. Hosts Craig and Dino talk with plant leaders, engineers, and security practitioners about protecting industrial operations in the real world — practical conversations for the people responsible for keeping production running and secure.