Cyber Brews - The Operational Technologies Podcast

Dave A. and Chris F.
  • 0.0 (0)
  • Technology
  • Semimonthly

Cyber Brews explores the world of Cybersecurity in Industrial Control Systems (ICS) and Operational Technology (OT) — one conversation (and one brew) at a time. Each episode breaks down complex cyber topics into easy-to-digest discussions. From ransomware in critical infrastructure to OT security culture, we dive into real-world challenges, emerging threats, and the people behind the systems that keep industry running safely. This is an independent, passion-driven podcast created by cybersecurity professionals who love to share stories, insights, and lessons from the front lines of industry.

  1. Oct 22

    The Buncefield Questions: Rethinking OT Cybersecurity

    Series 3 - Episode 7 A step back in time to 11 December 2005. 06:01 in the morning. A series of explosions at the Buncefield oil storage depot near Hemel Hempstead shook the surrounding area. The blast could be heard up to 125 miles away and registered 2.4 on the Richter scale. In this episode of Cyber Brews, we explore the three questions posed by the UK Competent Authority following the Buncefield incident and consider how they can help organisations rethink their approach to cybersecurity: 🔹 Do we understand what can go wrong? 🔹 Do we know what systems are in place to prevent this happening? 🔹 Do we have information to assure ourselves that they are working effectively? These questions may sound straightforward, but they raise some important challenges for organisations responsible for critical infrastructure. We discuss how they apply to OT cyber risk assessments, security controls, organisational accountability and the evidence needed to demonstrate that cybersecurity measures are actually working. Because having firewalls, procedures and security policies in place is one thing. Understanding what could go wrong, knowing whether the right protections exist, and having evidence that they remain effective is another. Whether you're an OT engineer, cybersecurity professional, site owner or process safety specialist, join us as we explore how lessons from Buncefield can help us ask better questions about industrial cybersecurity. ☕ Grab a brew and join the conversation. Are we asking the right questions about OT cyber risk?

  2. Sep 3

    The Maginot Line & OT Cybersecurity: Lessons in Defence in Depth

    What does a French military fortification from the 1930s have to teach us about OT cybersecurity? Quite a lot, actually. In this episode of Cyber Brews, we take a trip back to the Second World War and explore the story of the Maginot Line a hugely engineered defensive system that largely worked as designed, but failed to stop the attack because the attacker didn't follow the route its designers expected. We explore what this can teach us about modern OT and industrial cybersecurity, including why having a firewall doesn't mean you have a security strategy, why defence in depth is about more than simply adding more security products, and why organisations need to plan for what happens when a control fails. We discuss: Network segmentation, zones and conduitsIdentity, authentication and least privilegePhysical and application securityMonitoring, detection and incident responseRecovery, resilience and maintaining safe operationsAnd perhaps most importantly challenging the assumptions behind our security strategy. Because the lesson of the Maginot Line isn't that walls don't work. It's that a wall is only useful if you've thought about what happens when someone gets around it. So grab a brew and join us for another Cyber Brews story.

  3. Jul 28

    Remote Access in OT: Securing Industrial Systems with IEC 62443

    Series 3 - Episode 5 In this episode of Cyber Brews, we explore how Remote Access fits into the IEC 62443 standard and discuss the different approaches organisations are using to securely connect to their OT environments. We cover topics including: ▪️ The different types of OT remote access and why it's much more than simply using Remote Desktop (RDP)▪️ The advantages and disadvantages of common remote access technologies▪️ How secure remote access supports maintenance, vendors and operational teams▪️ Where remote access fits within the principles of IEC 62443▪️ Practical considerations for reducing cyber risk while maintaining operational availability Whether you're an engineer, asset owner, system integrator or cybersecurity professional, understanding how to implement secure remote access is becoming increasingly important in today's connected industrial environments. ☕ Grab a brew and join us as we explore one of the most critical topics in OT cybersecurity.

  4. Jun 1

    IEC 62443-2-1 Cyber Security Program

    Series 3 - Episode 4 In this episode of Cyber Brews, we dive into IEC 62443-2-1 Edition 2 and explore what the updated standard means for organisations building and managing cybersecurity programs within industrial and OT environments. We discuss the difference between a Cybersecurity Management System (CSMS) and a broader Security Program (SP), why the terminology matters, and how the latest edition of the standard is evolving beyond traditional compliance thinking. The episode also covers: ▪️ What the IEC 62443-2-1 security program is designed to achieve ▪️ The biggest changes introduced in Edition 2 ▪️ How the standard impacts different stakeholders across industry ▪️ What engineers, site owners, OT teams, and process safety professionals should be thinking about moving forward As industrial cyber security continues to mature, organisations are increasingly being asked to demonstrate not just technical controls, but governance, ownership, and long-term resilience.

  5. Apr 22

    AI and OT Security: The Future of Industrial Cybersecurity?

    Series 3 - Episode 3! Artificial Intelligence is rapidly becoming part of the industrial cyber landscape but is it strengthening critical infrastructure, or introducing entirely new risks? In this episode we explore the growing relationship between AI and OT security, discussing how organisations are beginning to rely on AI-driven technologies within critical infrastructure environments. We dive into topics including:▪️ AI as a new dependency in critical infrastructure▪️ AI-assisted defence for OT environments▪️ How attackers are beginning to use AI against operational technology▪️ The emerging cyber “arms race” between defenders and adversaries▪️ New vulnerabilities and attack vectors introduced by AI systems▪️ Risks such as malicious data poisoning and the growing concern around AI model collapse caused by AI-generated training data As AI adoption accelerates, understanding both the opportunities and the unintended consequences becomes increasingly important for organisations operating industrial systems. So grab a brew and join us as we explore whether AI is becoming the future of industrial cybersecurity or the next major challenge.

  6. Mar 9

    OG86 to IEC 62443…what’s really changing?

    Series 3 - Episode 2! The landscape of industrial cybersecurity guidance in the UK is evolving, and many organisations are now navigating the transition from HSE’s OG86 guidance to the more comprehensive IEC 62443 standard. In this episode of Cyber Brews, we explore what that shift really means for engineers, operators, and organisations responsible for industrial control systems and operational technology. We discuss why OG86 existed, the role it played in protecting safety-related systems, and how the growing cyber threat landscape has driven the move toward IEC 62443’s broader, lifecycle-based approach to cybersecurity. Along the way, we unpack key differences between the two approaches, the expectations emerging from regulators, and some of the practical challenges organisations face when applying these concepts to real-world OT environments. So grab a brew and join us as we break down the journey from OG86 to IEC 62443 and what it means for the future of industrial cyber security!

  7. Feb 4

    OT Cyber Stories 2025: Lessons from the Front Lines

    Series 3 – Episode 1!2025 has been a year full of remarkable OT cybersecurity stories, and in this episode of Cyber Brews, we take you behind the scenes of the most impactful events in the industrial cyber world. From Jaguar Land Rover incidents to human-factor challenges in incident response planning, AI ransomware and defence-in-depth strategies, zero-day threats, and attackers embedding infostealers in PyPI packages, we cover the stories that shaped the year. We also discuss the wider regulatory and geopolitical landscape, including the Cyber Security and Resilience (Network and Information Systems) Bill, CISA alerts, FBI advisories, and global collaboration to defend critical infrastructure against pro-Russia hacktivist threats. Join us as we unpack the lessons learned from 2025, explore the evolving threat landscape, and highlight what it takes to protect critical industrial systems in a world where cyber risks are ever-present. So grab a brew and tune in to the front lines of OT cybersecurity.

  8. 12/16/2025

    Cyber Brews - CAF 4 Is Here: What’s New and What’s Changed

    Series 2 - Episode 8 CAF 4.0 – What’s Changed Since CAF 3.2? In this episode of Cyber Brews, we take a closer look at Cyber Assessment Framework (CAF) version 4 and explore how it differs from CAF 3.2. We talk through the key changes, what they mean in practice for organisations operating in ICS and OT environments, and how teams should start thinking about alignment, evidence, and assurance under the updated framework. Whether you’re already working with CAF or preparing for future assessments, this episode helps break down what’s new, what’s evolved, and what really matters moving forward. So grab a brew and join us as we navigate the latest changes in the CAF landscape.

See All (23)

About

Cyber Brews explores the world of Cybersecurity in Industrial Control Systems (ICS) and Operational Technology (OT) — one conversation (and one brew) at a time. Each episode breaks down complex cyber topics into easy-to-digest discussions. From ransomware in critical infrastructure to OT security culture, we dive into real-world challenges, emerging threats, and the people behind the systems that keep industry running safely. This is an independent, passion-driven podcast created by cybersecurity professionals who love to share stories, insights, and lessons from the front lines of industry.

Information

You Might Also Like