Skip to content
Sign in
Artwork for Cyber Brews - The Operational Technologies Podcast
Technology

Cyber Brews - The Operational Technologies Podcast

Dave A. and Chris F.

Cyber Brews explores the world of Cybersecurity in Industrial Control Systems (ICS) and Operational Technology (OT) — one conversation (and one brew) at a time.

Each episode breaks down complex cyber topics into easy-to-digest discussions. From ransomware in critical infrastructure to OT security culture, we dive into real-world challenges, emerging threats, and the people behind the systems that keep industry running safely.

This is an independent, passion-driven podcast created by cybersecurity professionals who love to share stories, insights, and lessons from the front lines of industry.

Play
Open in
  • 21 episodes
  • monthly
  • Avg 44 min
  • English

Episodes 21

NewestOldestLongest
All20Unplayed20In progress0Played0
Counted on this page — what you have heard stays on this device, so it is not something the list can be paged by.
  • September 3 · 44 min

    The Maginot Line & OT Cybersecurity: Lessons in Defence in Depth

    What does a French military fortification from the 1930s have to teach us about OT cybersecurity? Quite a lot, actually. In this episode of Cyber Brews, we take a trip back to the Second World War and explore the story of the Maginot Line a hugely engineered defensive system that largely worked as designed, but failed to stop the attack because the attacker didn't follow the route its designers expected. We explore what this can teach us about modern OT and industrial cybersecurity, including why having a firewall doesn't mean you have a security strategy, why defence in depth is about more than simply adding more security products, and why organisations need to plan for what happens when a control fails. We discuss: Network segmentation, zones and conduits Identity, authentication and least privilege Physical and application security Monitoring, detection and incident response Recovery, resilience and maintaining safe operations And perhaps most importantly challenging the assumptions behind our security strategy. Because the lesson of the Maginot Line isn't that walls don't work. It's that a wall is only useful if you've thought about what happens when someone gets around it. So grab a brew and join us for another Cyber Brews story.

  • S3 · E5
    July 28 · 49 min

    Remote Access in OT: Securing Industrial Systems with IEC 62443

    Series 3 - Episode 5 In this episode of Cyber Brews, we explore how Remote Access fits into the IEC 62443 standard and discuss the different approaches organisations are using to securely connect to their OT environments. We cover topics including: ▪️ The different types of OT remote access and why it's much more than simply using Remote Desktop (RDP) ▪️ The advantages and disadvantages of common remote access technologies ▪️ How secure remote access supports maintenance, vendors and operational teams ▪️ Where remote access fits within the principles of IEC 62443 ▪️ Practical considerations for reducing cyber risk while maintaining operational availability Whether you're an engineer, asset owner, system integrator or cybersecurity professional, understanding how to implement secure remote access is becoming increasingly important in today's connected industrial environments. ☕ Grab a brew and join us as we explore one of the most critical topics in OT cybersecurity.

  • S3 · E4
    June 1 · 51 min

    IEC 62443-2-1 Cyber Security Program

    Series 3 - Episode 4 In this episode of Cyber Brews, we dive into IEC 62443-2-1 Edition 2 and explore what the updated standard means for organisations building and managing cybersecurity programs within industrial and OT environments. We discuss the difference between a Cybersecurity Management System (CSMS) and a broader Security Program (SP), why the terminology matters, and how the latest edition of the standard is evolving beyond traditional compliance thinking. The episode also covers: ▪️ What the IEC 62443-2-1 security program is designed to achieve ▪️ The biggest changes introduced in Edition 2 ▪️ How the standard impacts different stakeholders across industry ▪️ What engineers, site owners, OT teams, and process safety professionals should be thinking about moving forward As industrial cyber security continues to mature, organisations are increasingly being asked to demonstrate not just technical controls, but governance, ownership, and long-term resilience.

  • S3 · E3
    April 22 · 57 min

    AI and OT Security: The Future of Industrial Cybersecurity?

    Series 3 - Episode 3! Artificial Intelligence is rapidly becoming part of the industrial cyber landscape but is it strengthening critical infrastructure, or introducing entirely new risks? In this episode we explore the growing relationship between AI and OT security, discussing how organisations are beginning to rely on AI-driven technologies within critical infrastructure environments. We dive into topics including:▪️ AI as a new dependency in critical infrastructure▪️ AI-assisted defence for OT environments▪️ How attackers are beginning to use AI against operational technology▪️ The emerging cyber “arms race” between defenders and adversaries▪️ New vulnerabilities and attack vectors introduced by AI systems▪️ Risks such as malicious data poisoning and the growing concern around AI model collapse caused by AI-generated training data As AI adoption accelerates, understanding both the opportunities and the unintended consequences becomes increasingly important for organisations operating industrial systems. So grab a brew and join us as we explore whether AI is becoming the future of industrial cybersecurity or the next major challenge.

  • S3 · E2
    March 9 · 42 min

    OG86 to IEC 62443…what’s really changing?

    Series 3 - Episode 2! The landscape of industrial cybersecurity guidance in the UK is evolving, and many organisations are now navigating the transition from HSE’s OG86 guidance to the more comprehensive IEC 62443 standard. In this episode of Cyber Brews, we explore what that shift really means for engineers, operators, and organisations responsible for industrial control systems and operational technology. We discuss why OG86 existed, the role it played in protecting safety-related systems, and how the growing cyber threat landscape has driven the move toward IEC 62443’s broader, lifecycle-based approach to cybersecurity. Along the way, we unpack key differences between the two approaches, the expectations emerging from regulators, and some of the practical challenges organisations face when applying these concepts to real-world OT environments. So grab a brew and join us as we break down the journey from OG86 to IEC 62443 and what it means for the future of industrial cyber security!

  • S3 · E1
    February 4 · 43 min

    OT Cyber Stories 2025: Lessons from the Front Lines

    Series 3 – Episode 1!2025 has been a year full of remarkable OT cybersecurity stories, and in this episode of Cyber Brews, we take you behind the scenes of the most impactful events in the industrial cyber world. From Jaguar Land Rover incidents to human-factor challenges in incident response planning, AI ransomware and defence-in-depth strategies, zero-day threats, and attackers embedding infostealers in PyPI packages, we cover the stories that shaped the year. We also discuss the wider regulatory and geopolitical landscape, including the Cyber Security and Resilience (Network and Information Systems) Bill, CISA alerts, FBI advisories, and global collaboration to defend critical infrastructure against pro-Russia hacktivist threats. Join us as we unpack the lessons learned from 2025, explore the evolving threat landscape, and highlight what it takes to protect critical industrial systems in a world where cyber risks are ever-present. So grab a brew and tune in to the front lines of OT cybersecurity.

  • S2 · E8
    Dec 16, 2025 · 41 min

    Cyber Brews - CAF 4 Is Here: What’s New and What’s Changed

    Series 2 - Episode 8 CAF 4.0 – What’s Changed Since CAF 3.2? In this episode of Cyber Brews, we take a closer look at Cyber Assessment Framework (CAF) version 4 and explore how it differs from CAF 3.2. We talk through the key changes, what they mean in practice for organisations operating in ICS and OT environments, and how teams should start thinking about alignment, evidence, and assurance under the updated framework. Whether you’re already working with CAF or preparing for future assessments, this episode helps break down what’s new, what’s evolved, and what really matters moving forward. So grab a brew and join us as we navigate the latest changes in the CAF landscape.

  • Dec 15, 2025 · 3 min

    Christmas Special - T'was The Night Before Patch-mas

    ’Twas the night before Patch-mas, when all through the plant, Not a system was stirring… or so we all thought. In this Cyber Brews Christmas Special, we put a cyber security spin on the classic ’Twas the Night Before Christmas tale. This festive episode tells a story from the world of ICS and OT security, where late-night alerts, unpatched systems, and seasonal good intentions collide. With humour, rhyme, and a touch of cyber realism, ’Twas the Night Before Patch-mas is a light-hearted reminder of why patching, preparation, and a bit of caution still matter — even during the holidays. Grab a brew of hot chocolate, settle in, and enjoy a festive cyber tale.

  • S2 · E7
    Nov 13, 2025 · 52 min

    Cyber Brews - OT Incident Response & Recovery Plans

    Series 2 – Episode 7!When something goes wrong in the OT world, every second counts....but whatever happens, don’t panic. This months episode we take a look into incident response and recovery plans. We break down the essentials of Incident Response in Operational Technology environments — what it is, who needs to know about it, and why it matters — towel is optional. We discuss what makes a strong Incident Response Plan (IRP), the key components every organisation should include, and how even well-prepared plans can fail when theory meets reality. Along the way, we share real examples and lessons learned from the front lines of OT security and we talk a little about our latest published cyber security paper on using critical task analysis to understand the human element of incident response plans. So grab a brew, keep calm, and join us as we hitchhike through the world of OT incident response.

  • Oct 29, 2025 · 17 min

    Halloween Special - Ghost In the Control Room

    Something sinister is stirring in the systems… In this Cyber Brews Halloween Special, we dive into the true story behind one of the most chilling cyber incidents in industrial history the Triton malware attack. What began as a routine night in a control room turned into a digital nightmare, when rogue code infiltrated safety systems designed to prevent catastrophic industrial accidents. With a Halloween twist, “Ghost in the Control Room” explores how a few hidden lines of code nearly turned a secure facility into a scene of chaos — and what this haunting real-world case teaches us about human error, resilience, and the invisible forces moving through our networks. So grab your favourite brew, turn down the lights and settle in for a Halloween Special.

  • S2 · E6
    Sep 10, 2025 · 57 min

    Cyber Brews - What’s Brewing in IEC 62443-2-2?

    Series 2 – Episode 6! This month’s brew takes a fresh look at the latest updates in IEC 62443-2-2:2025 — The standard that sets out requirements for industrial automation and control system security programs. If that sounds a bit dry, don’t worry — we’re serving it up in plain English, with a dash of Dave & Chris -style "banter". In this episode, we break down what’s new in the revised standard, why it matters, and how these changes impact organizations looking to strengthen their OT security posture. Key topics on tap this month include: What IEC 62443-2-2 actually covers and why it’s important The most significant changes in the latest update How these updates affect compliance and real-world implementation So grab your favourite brew and join us as we try to make sense of the updates in the new IEC 62443-2-2:2025 — hopefully without the headache.

  • S2 · E5
    Jul 15, 2025 · 42 min

    Cyber Brews - IEC-62443 Security Levels, Simplified?

    Series 2 – Episode 5! Cyber Brews: IEC-62443 Security Levels, Simplified?This month’s brew tackles the industrial cybersecurity standard that everyone talks about — but few really get: IEC 62443. If you’ve ever felt lost in a sea of FRs, SRs, and SLs, you’re not alone. We’re here to break it down, coffee (or pint) in hand. In this episode, we unpack the core components of IEC 62443 — from Foundational Requirements (FRs) to Security Levels (SLs) — and explore what they actually mean for real-world OT environments. Key topics on tap include: What the different Security Levels (SL1 to SL4) actually represent — and why SL4 isn’t always the goal The role of Foundational Requirements (FRs) and how they structure your cybersecurity baseline How System Requirements (SRs) map to practical controls in the field Why context matters: understanding your risk, your environment, and your realistic target level So whether you’re just getting into IEC 62443 or trying to explain it to someone else without inducing a yawn, this episode’s for you. Grab your brew of choice and join us as we demystify the standard — one security level at a time.

  • S2 · E4
    May 12, 2025 · 41 min

    Cyber Brews - Trust No One, Verify Everything (Zero Trust)

    Series 2 – Episode 4! Cyber Brews: Trust No One, Verify Everything (Zero Trust) This month’s brew dives into a game-changing security model that’s making waves in both IT and OT: Zero Trust. Forget the old perimeter mindset — in this episode, we explore why trust is no longer a security strategy, especially when it comes to protecting critical industrial systems. We kick off with a breakdown of what Zero Trust actually means, where it came from, and why it’s become essential in the world of Operational Technology. As OT and IT networks continue to converge, the traditional “trust but verify” approach just doesn’t cut it anymore. Key topics on the table include: Why OT environments need Zero Trust now more than ever. How to apply Role-Based Access Control, Network Segmentation, MFA, and Continuous Monitoring in industrial settings. The real-world benefits of Zero Trust: from reduced insider threats to better compliance and resilience. Common challenges and how to start making progress, even in complex legacy environments. So grab your favourite brew and join us as we unravel how Zero Trust could secure the future of OT — one segment, one policy, one verified connection at a time.

  • S2 · E6
    Apr 17, 2025 · 38 min

    Cyber Brews - CEOs meet Cyber

    Series 2 - Episode 3! Cyber Brews: CEOs meet CyberThis time, we’re flipping the script and taking cybersecurity straight to the top. That’s right — we’re talking senior management and the critical questions they need to be asking when it comes to protecting Operational Technology (OT). In this episode, we unpack the essential governance-level questions that help leaders understand their organization's cyber risk posture. From assessing the cyber threat landscape to defining roles and responsibilities the various teams, we dive into the high-level decisions that can make or break your organization’s resilience. We will cover topics like: Understanding your threat surface and who’s targeting your systems The importance of a complete asset inventory and dealing with obsolete equipment How to evaluate your risk management and incident response plans Why clarity in responsibilities (especially between IT and OT) is non-negotiable Using frameworks like IEC 62443 to guide your cybersecurity governance So grab your favourite brew and join us as we arm the boardroom with the right questions to protect the control room.

  • S2 · E2
    Mar 4, 2025 · 45 min

    Cyber Brews - Lets Get Physical

    Series 2 - Episode 2! Lets get Physical, Physical. I wanna get Physical... In this episode, we delve into the critical interplay between physical security and cyber security within Operational Technology (OT) environments. In this months episode we discuss the importance of well-defined physical security policies, robust perimeter controls, and effective access management to protect sensitive areas and critical assets. Key topics include establishing security perimeters, entry controls, and physical segmentation, along with the roles and responsibilities of personnel in maintaining these security measures. We discus the need for a unified approach that integrates physical and cyber security strategies, ensuring that both realms work in harmony to protect against threats from all angles. So as always grab your favourite brew and join us for another episode of Cyber Brews!

  • S2 · E1
    Feb 7, 2025 · 53 min

    Cyber Brews - From Hacks to Heroes: 2024 in OT Cyber security

    Welcome everybody to Series 2 of Cyber Brews the series that tries to make OT Cyber–Security Interesting!! In this episode of Cyber Brews, we take a deep dive into the biggest cybersecurity stories we covered in 2024. From shocking insider threat statistics to the evolving tactics of ransomware groups like Ransomhub, we break down the key trends shaping the cyber landscape. We also revisit wild stories like the Dieselgate scandal, hackers targeting air-gapped systems, and even how lava lamps and internal door pass-codes played a role in security breaches. Plus, we explore the unexpected collaboration between Western hackers and Russian organised crime groups. So grab your brew and join us for a recap you won’t want to miss!

  • S1 · E6
    Dec 16, 2024 · 51 min

    Cyber Brews - Cyber Management of Change

    Welcome to the Final Episode of the Year—Episode Six! In this closing episode of 2024, we dive into the critical topic of management of change (MoC) in the context of OT cybersecurity. We kick things off with a look at the iconic failure of the Empire's Death Star and explore how its downfall can teach us valuable lessons for managing change in operational technology environments. In this Episode we cover: The Death Star Example: A discussion of one of the most iconic and catastrophic management of change (MoC) failures, analysing how overlooked risks and gaps in planning led to its downfall—and what lessons we can apply to cyber security today. MoC Assessment Basics: Exploring the foundational elements of a robust MoC process, including conducting thorough risk assessments, maintaining accurate and up-to-date documentation, and identifying critical records essential to cyber security. Supply Chain Risk: Understanding the risks posed by vendor-supplied default configurations—do you really know what’s in them? Examining how changes in the supply chain may impact current physical security controls and whether those changes could alter the criticality of your operations. Employee Training: Highlighting the importance of employee education and preparedness in the MoC process. How do training programs ensure staff adapt to and manage changes effectively while maintaining a strong security posture? Join us as we uncover the complex layers of OT cybersecurity, the importance of thorough risk assessments, and the real-world impacts of implementing robust change management strategies. Thank you for tuning in throughout 2024. We wish you a Merry Christmas and look forward to bringing you Series 2 of the Cyber Brews Podcast in 2025, with even more exciting episodes planned!

  • S1 · E5
    Oct 25, 2024 · 56 min

    Cyber Brews - The Risk & Consequence Chronicles

    Welcome to Episode Five of Our Podcast! In this episode, we dive into the critical topic of Risk and Consequence in the context of OT cybersecurity. Here, we share our insights on cyber risks and the potential consequences organisations face. In This Episode, We Cover: Risk Assessment Basics: We discuss the foundations of cyber risk assessments, focusing on identifying deviations from normal operations and exploring key concepts like "attack vectors" and the "kill chain." Example Incident: We examine the CrowdStrike case to understand how OT risk assessments account for insider threats and unintended consequences. Likelihood and Attack Types: We look at the frequency and variety of cyber threats, considering how risk changes based on the type of attacker, from disgruntled employees to bot-driven attacks. Mitigation Strategies: We wrap up with a look at prevention versus mitigation, discussing ways to prioritize actions and implement these countermeasures despite the challenge of quantifying cyber risks. Join us in exploring the complex layers of OT cybersecurity risk assessments and the real-world impacts of these measures. Thank you for tuning in, and don’t forget to rate our podcast as we continue our journey through the world of OT cybersecurity!

  • S1 · E4
    Aug 30, 2024 · 40 min

    Cyber Brews - NIS2: The Adventure Continues

    Episode Four - NIS2 Unveiled: The Future of Cyber security Compliance. Welcome to Episode Four of our podcast! In this podcast episode, we delve into the NIS2 directive, which aims to enhance cyber security resilience in critical sectors across the European Union & and maybe even some of the UK! Investigate the facts behind the directive: Impact: Strengthening Cyber Defenses in Energy, Transport, Banking, and More Unpacked: How UK Companies Navigate Enhanced Cybersecurity Requirements NIS2 and OT: Expanding Scope, Stricter Security, and Reporting Demands Compliance: Establishing a Cyber Security Management System (CSMS) for Structured Resilience Reporting: Understanding "Undue Delay" and Significance in Incident Notification Directive: Proactive Measures for Cybersecurity Resilience in Critical Sectors Join us as we uncover the Expanding layers of OT cybersecurity and the adventures of NIS2. Thank you for tuning in to our exploration of OT cybersecurity and don't forget to rate our podcast!

  • S1 · E3
    Jun 3, 2024 · 41 min

    Cyber Brews - Organised Crime Groups

    We made it to Episode Three - Revenge of the OCG - Unveiling the Dark World of Organized Crime Groups in OT Cybersecurity. Welcome to Episode Three of our podcast! In this gripping episode, we dive deep into the shadowy realm of Organized Crime Groups (OCGs) within the Operational Technology (OT) sector. Discover the secrets behind: The intricate web of the OCG industry and its diverse services. The notorious groups and gangs that dominate the landscape. The sophisticated methods used to utilize and manage OCG services. The typical OCG kill chain strategies and their execution. The cunning tactics OCGs employ to launder their ill-gotten gains. The crucial role and operations of the Joint Cybercrime Action Taskforce. Join us as we uncover the hidden layers of OT cybersecurity and the relentless threats posed by OCGs. Don’t miss this eye-opening episode! Thank you for tuning in to our exploration of OT cybersecurity!

Showing 1–20 of 21 episodes