Careers in operational technology: What does a security risk assessor do? | Guest Donovan Tindill

Today on Cyber Work, we continue our deep dive into industrial control systems and operational technology security by talking with Donovan Tindill of DeNexus. Now, I’m just going to come out and say it: Tindill's episode is like a cybersecurity career seminar in a box, and a must-not-miss if you’re interested in not just ICS and OT security, but specifically the realm of Risk Assessment. Tindill brought slides and literally lays out his entire career for us to see, including the highs and even some of the lows, and what he learned from them. He explains the fuzzy distinctions between ICS security and the act of determining risk for said systems, gives us a 60 year history of the increasing attack surface and number or risk types associated with operational technology, and gives us tons of great career advice and ways to get started. 0:00 - Careers in operational technology2:01 - Donovan Tindill's interest in tech5:30 - Tindill's career roles in cybersecurity 10:42 - The jump to a supervision role13:19 - Average day for a director of OT cybersecurity 18:39 - Volunteerism with Public Safety Canada 22:57 - Tindill's talk on active directory a decade later23:43 - Current operational technology challenges29:26 - New SEC regulations 33:54 - Thoughts on the SEC regulations35:37 - How to work in OT, ICS or risk assessment40:34 - Skill gaps for OT, ICS and risk management 42:44 - Tindill's favorite work45:36 - Best cybersecurity career advice48:22 - What is DeNexus? 52:22 - Learn more about Tindill and DeNexus53:22 - Outro– Get your FREE cybersecurity training resources: https://www.infosecinstitute.com/free– View Cyber Work Podcast transcripts and additional episodes: https://www.infosecinstitute.com/podcastAbout InfosecInfosec’s mission is to put people at the center of cybersecurity. We help IT and security professionals advance their careers with skills development and certifications while empowering all employees with security awareness and phishing training to stay cyber-safe at work and home. More than 70% of the Fortune 500 have relied on Infosec Skills to develop their security talent, and more than 5 million learners worldwide are more cyber-resilient from Infosec IQ’s security awareness training. Learn more at infosecinstitute.com.