Panel: Industrial Systems In The Crosshairs: What It Really Takes To Defend OT
summary
Panelists lay out concrete failures and mitigations for OT in 2025: internet‑exposed HMIs and a dam incident, USBs and service techs carrying malware, and fleets of legacy controllers running Windows XP embedded or Windows 7 on vessels and factory lines that last 20+ years. Defenses that actually work are application whitelisting, network segmentation per IEC 62443, asset inventories and tabletop drills; virtualization is proposed for legacy software, and supply‑chain risk persists via China‑hosted clouds and vendor remote‑access.
AI-written summary · about
chapters (12)
- 0:00Introduction to OT threats
- 4:38Hidden weaknesses in industrial systems
- 11:29Evolving attack vectors and ransomware
- 17:33Why the air gap myth failed
- 19:43Geopolitical tensions and OT risks
- 28:22Visibility gaps and incident response
- 33:22Balancing containment with business needs
- 36:13Q&A: Updating outdated systems
- 39:48Q&A: Key investments for OT security
- 42:01Q&A: Advice for new CISOs
- 45:33Q&A: Future-proofing OT investments
- 51:33Closing remarks and thanks
related talks
53mCXO Panel: OT & IoT Risk Management Strategy For CISOs
48mYou Too Can Secure OT
39mTo Patch or Not to Patch OT— A Risk Management Decision
57mDon’t Forget the Little Guy: Vulnerability Management in Operational Technology
50mHarmonizing IT and OT Security in the Era of Convergence
30mPractical Attack Vectors and Their Ideal Defensive Strategies for ICS & SCADA
51mPreparing for and Defending OT Systems from Ransomware
43mIoT Security Challenges and Solutions