Why Your Security Team Isn't Ready for a Real Cyberattack

Podcast: Industrial Cybersecurity Insider Episode: Why Your Security Team Isn't Ready for a Real Cyberattack Pub date: 2026-10-14 Get Podcast Transcript → powered by Listen411 - fast audio-to-text and summarization Most manufacturers have an incident response plan. Few have tested it at 2 AM on a Sunday, with a skeleton crew and the people who know the equipment best nowhere to be found. Fresh from the ICS Cybersecurity Conference in Nashville, Craig Duckworth and Dino Busalachi compare notes on what keeps industrial organizations from being ready for a real attack. The risk today goes beyond ransomware. It's attackers who blend into normal plant activity, process data that quietly exposes your intellectual property, security tools that never get used after the sale, and teams that still work in separate camps. Craig and Dino talk through why IT, plant floor teams, system integrators, and equipment builders need to operate as one technology team, why new projects are the best place to build security in, and why passing an audit is not the same as being secure. They also look at how AI is speeding up both attacks and defenses, leaving manufacturers less time to react. If you lead a plant, an engineering team, or a security program, this conversation will help you answer one question: if your plant was hit tonight, who makes the first call and who's on the other end receiving the call? Listen now and share it with the people who own your plant floor. Chapters: 00:00:00 Incident response plans must work outside office hours 00:01:00 Inside the OTICS Cyber Security Conference 00:02:00 Threat actors living in the normal 00:04:00 Why process data can expose intellectual property 00:07:00 The gap between tools, skills, and operating practice 00:08:00 Moving beyond the IT and OT divide 00:11:00 Why technology adoption matters after the sale 00:12:00 Building security into projects from the start 00:15:00 Defense in depth and protecting critical assets 00:17:00 Practicing incident response when it counts 00:19:00 Bringing integrators and asset owners to the table 00:20:00 Authority, accountability, and the CISO challenge 00:23:00 CMMC, continuous monitoring, and process data 00:24:00 Artificial intelligence changes the threat timeline 00:27:00 Asset discovery and security baselines 00:29:00 Checking a box versus improving the environment 00:32:00 Staying ahead through collaboration and readiness Links And Resources: Want to Sponsor an episode or be a Guest? Reach out here. Industrial Cybersecurity Insider on LinkedIn Cybersecurity & Digital Safety on LinkedIn BW Design Group Cybersecurity Dino Busalachi on LinkedIn Craig Duckworth on LinkedIn Thanks so much for joining us this week. Want to subscribe to Industrial Cybersecurity Insider? Have some feedback you’d like to share? Connect with us on Spotify, Apple Podcasts, and YouTube to leave us a review! The podcast and artwork embedded on this page are from Industrial Cybersecurity Insider, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.