Sign in

Technology
Business
Derek Harp
Control System Cyber Security Association International, or (CS)²AI, is the premier global non-profit workforce development organization supporting professionals of all levels charged with securing control systems. With over 34,000 members worldwide, we provide the platform for members to help members, foster meaningful peer-to-peer exchange, continue professional education, and directly support OT and ICS cyber security professional development in every way. Our founder, Derek Harp, interviews cyber security leaders and brings relevant insights to help any company handle cybersecurity effectively.
Total 117 episodes
Go to
17: Practical Applications of the Theoretical Work of Academic Research with Robin Berthier

17: Practical Applications of the Theoretical Work of Academic Research with Robin Berthier

Today, Derek Harp is happy to have Robin Berthier, the CEO, and Co-founder of Network Perception, joining him as his guest for this episode in the Security Leaders series! Robin took a piece of technology out of a university research study and, together with some others, built a company around it. Network Perception is a startup committed to designing and developing highly-usable network audit solutions.Robin grew up in Brittany, in the North-West region of France. He attended the first French school dedicated to cybersecurity. In addition to being an entrepreneur, Robin is also a researcher, technologist, and problem-solver. In his free time, he enjoys rock climbing and movies. He has even tried his hand at producing and directing movies! In this episode of the (CS)²AI Podcast, Robin shares his backstory and discusses his career journey. He talks about becoming a research scientist, designing specification-based intrusion detection systems for smart energy delivery systems, and transitioning from a researcher to an entrepreneur. He also talks about mentorship and offers some nuggets of advice for entrepreneurs.You won’t want to miss this episode if you are interested in finding out about the practical applications of the theoretical work done in academic research. Stay tuned for more!Show highlights:Robin talks about where his passion for breaking and protecting systems began. (1:37)The more Robin worked with computers, the more he became fascinated with the notion of feeling the universe. (2:33)In the early 2000s, the French government created the resources to train the next-generation workforce in computers and cybersecurity. (3:30)Robin discusses his first dedicated open-source project. (7:51)In addition to cybersecurity, Robin was also interested in information visualization. (9:41)How he moved from doing post-doctoral work to becoming a research scientist. (11:12)How Robin got into designing specification-based intrusion detection systems for smart energy delivery systems. (15:07)Recognizing an opportunity for university-based research to become a company. (17:46)Transitioning from being a researcher to becoming an entrepreneur and the challenges that went along with that. (23:18)What Robin would do differently if he had to start his entrepreneurial journey over. (28:58)Some advice for entrepreneurs. (31:20)Why you should never burn bridges or feel afraid of reaching out to others. (36:55)
57:4014/12/2021
16:  Transitioning from the Military to a Career in Cybersecurity  with Ernest Wohnig

16: Transitioning from the Military to a Career in Cybersecurity with Ernest Wohnig

Derek Harp is happy to have Ernest Wohnig joining him as his guest for today’s show! Ernest has performed a variety of different roles. Currently, he serves as the Senior Vice President of CISO Advisory in CIP and ICS services at System 1, a specialized cybersecurity consulting firm. In addition to that, he also serves on the Thomas Edison State University (TESU) Cybersecurity Program Advisory Board and chairs the global advisory board of the Control System Cyber Security Association International (CS2AI). Before that, he served as a Deputy CISO and Senior Global Cybersecurity Advisor for a Fortune 200 energy company, leading the coordination of cybersecurity activities across their global operations.Ernest is recognized internationally as a cybersecurity executive. He is a sought-after strategic adviser to the senior leadership of global firms, national government agencies, and corporate and non-profit directors. His main areas of interest and experience include integrating cyber risk as a key component of business risk and opportunity, the effects of cyber risk on critical infrastructure from both operations and national infrastructure governance perspectives, and the threat and promise of Artificial Intelligence as an enabler in the cybersphere.In the 1990s, Ernest served as an Air Force Intelligence officer and an Information Warfare advisor for the US Government. He also has significant experience, directing the development and delivery of cyber security consulting services for large and boutique global consulting firms. In this episode of the (CS)²AI Podcast, Ernest shares his superhero origin story. He discusses his early interest in the impact of technology on national security, his introduction to information warfare and cybersecurity while in the military, and the skills he needed when he joined the DIA after leaving the Air Force. He also talks about mentorship and offers suggestions for finding the right niche early in your career and developing additional non-technical career skills. Ernest is proof that you don’t have to have a degree in computer science or engineering to do cybersecurity. Tune in today to hear his fascinating story! You won’t want to miss this episode if you are entering the market after the military or thinking of transitioning into the cybersecurity space. Show highlights:As a talkative young lieutenant in the Air Force, Ernest often spoke to his colonel about the book, Third Wave by Alvin Toffler. That resulted in him becoming a liaison to the first Information Warfare Squadron. (2:39)Technology fascinated Ernest, but he focused more on how people use technology and how technology impacts national security. (4:30)You don’t need any specific formal education to get into the cybersecurity space. (5:16)Ernest got introduced to cybersecurity after joining the military. (7:27)We have forgotten some of the security problems that Ernest addressed in the late 1990s. They have resurfaced again, however, and caused some concern in the last four or five years. (11:20)Ernest spent a year-and-a-half with the DIA after leaving the military. He talks about the skill sets that he needed there. (14:10)Reaching the level in his career where he had to dial down the technical aspect and dial up the people aspect. (15:36)We have come a long way with cybersecurity. It has grown a lot, and many subdivisions have formed since the time it was known as information security. (19:48)Find the right niche early on in your career. (20:58) Ernest talks about mentorship and discusses ways of developing additional skills. (24:47)Some practical advice for connecting with potential mentors in the industry sector you would like to join. (34:48)What you could gain from taking career-broadening tours. (44:52)Tips for...
57:3507/12/2021
15: Running a Successful Cyber Security Company with Clint Bodungen

15: Running a Successful Cyber Security Company with Clint Bodungen

Today, Derek Harp is excited to have Clint Bodungen, the Founder and CEO of ThreatGEN, joining him for an episode of the Security Leader interview series. Clint is an inspiring and creative individual who has been working in the cybersecurity industry for more than 25 years. He is a founder, entrepreneur, gamer, game designer, teacher, researcher, professor, martial artist, and father. Clint Bodungen is the lead author of Hacking Exposed: Industrial Control Systems and creator of the ThreatGEN® Red vs. Blue cybersecurity gamification platform. He is a United States Air Force veteran and an active part of the cybersecurity community. Since 2003, his focus has been exclusively on ICS/OT cybersecurity, and he has helped many of the world's largest energy companies. Clint has worked for Symantec, Kaspersky Lab, and Industrial Defender and has published many technical papers and training courses on ICS/OT cybersecurity vulnerability assessment, penetration testing, and risk management.While growing up, Clint was both technically inclined and artistic. He wanted to study commercial art and graphic design but started studying theatre and movie special effects instead. After a while, he switched to studying art, and soon after that, he quit his studies to join the Air Force. While in the military, he was allowed to learn about computers and computer security. In today’s episode of the (CS)²AI Podcast, Clint tells his inspiring story and shares some great nuggets of advice for getting ahead in your career, finding opportunities, and running a successful company! He talks about his love of gaming and other interests while growing up. He discusses his studies, joining the Air Force, mentorship, the turning point in his career when he learned about industrial systems for the first time, and the process of writing his book, Hacking Exposed: Industrial Control Systems. Stay tuned! You won't want to miss this nugget-filled and inspiring episode! Show highlights:Clint’s love of games and technology started when his family got an Atari in the early 1980s. (5:28)His mom introduced him to one of her co-workers, a programmer. That got him interested in programming. (6:54)Deciding to quit studying art and join the Air Force. (10:23)What made Clint decide to join the military? (12:13)Clint got the opportunity to start working on internet networks and learn about computers and computer security in 1995, while in the military. (15:26)Clint and his colleague became interested in hacking in the mid-1990s. (16:27)Clint talks about what prompted him to leave the military and discusses what he would have done differently today. (18:38)Clint shares some nuggets of advice for anyone considering a career in computer security or technology. (22:45)Much of what we learn comes from experience rather than books or classrooms. (25:40)Clint talks about mentorship and how he got mentored by a hacker. (29:05)The turning point in Clint’s career was when he got the opportunity to cross-train and write intrusion detection system codes with some of the developers at Symantec. (38:34)When Clint learned about industrial systems for the first time. (42:00)Writing papers and sharing his knowledge gave Clint a lot of exposure and the opportunity to give something back to his community. (47:53)Clint talks about the process of writing his book, Hacking Exposed: Industrial Control Systems. (52:02)Clint shares some of the nuggets he learned along the way in his career. (1:03:38)
01:09:2330/11/2021
14: Consequence-Driven, Cyber-Informed Engineering (CCE) with Sara Freeman and Andy Bochman

14: Consequence-Driven, Cyber-Informed Engineering (CCE) with Sara Freeman and Andy Bochman

Today, Derek Harp, the host of (CS)²AI Podcast, shares an episode of the Author Spotlight that features practitioners and contributors who do great work and write books about new modalities, new systems of organization, and new thought processes. In this episode, Andy Bochman and Sarah Freeman, authors of Countering Cyber Sabotage- Introducing Consequence-Driven Cyber-Informed Engineering, join Derek to talk about their book. Sarah has been an Industrial Control Systems Cyber Security Analyst at The Idaho National Laboratory (The Lab) for the past eight years. She did not get there through the traditional computer or cyber security background, however. Sarah studied Intelligence and Security Studies, focusing on terrorism in Graduate School, and came into cyber security through Language Services by assisting with certain investigations and operations on the language side. That eventually transitioned into industrial control systems when she joined The Lab. Sarah has a unique understanding of different kinds of threat actors from some of the work she has done in the past. The Lab focuses on bringing in people with different backgrounds, like cyber security researchers, malware reverse engineers, and engineers. That is invaluable when talking about attacks specifically leveled against industrial control systems because some things translate well between traditional IT attacks while others are completely different. Bringing in different groups helps with much of their work. One of the first companies Andy ever worked for was an applications security company that eventually got bought by IBM. He was also involved in some startups and some consulting. At IBM, Andy matched his cyber security day job with his night job, moonlighting as a blogger on the DOD Energy Blog and the Smart Grid Security Blog. While at IBM, he asked if he could cover energy from a cyber point of view, and they agreed. From that point, it became clear that he would eventually end up at the Idaho National Laboratory, where he has been for the last seven years. Show highlights:Sarah is valuable to the community because of her knowledge of the spoken and written languages used in certain parts of the world. (4:28) The genesis of their book and the philosophy behind it. (7:51)From about 2003-2004, Idaho National Laboratory has focused on electric grid security. (16:16)Whatever first hits the people on the street and then ripples up to the people on The Hill brings about a new level of awareness. (19:37)Critical infrastructure is sure to be targeted, and once something has been targeted it will be compromised. (20:40)Putting security into the design stage is a different approach that is now evolving out of The Lab. (24:23)Many opportunities exist for adversaries to get in and turn things to their advantage after a new software product has been deployed and begins to interact with other networks. (29:49)What initially prompted Andy to write the book before Sarah came on board. (30:35)How Andy came up with the title of the book. (36:43)When espionage turns into sabotage. (39:04)How you can use the book. (40:25)A partner program and another version of the book, known as “Bootcamp” or “Partner Training” are also available. (41:13)People are tired of the status quo and would be willing to explore a new way. (44:43)
47:0723/11/2021
13: What You Need to Know Before You Consider a Cybersecurity Career with Brad Raiford

13: What You Need to Know Before You Consider a Cybersecurity Career with Brad Raiford

(CS)²AI- Security Leaders – Brad RaifordDerek Harp is excited to have Brad Raiford joining him on the show today! Brad is a Director in the Cybersecurity Services Practice at KPMG. His primary focus is divided between operational technology, ICS, data, the expanding industrial world of the internet of things, the internet of everything, and how the impact of 5G will change the course of manufacturing and production systems.Brad was born in Galveston, Texas, and spent most of his childhood in Saudi Arabia because his dad worked for Ramco. He has a degree in Computer Information Systems from Texas A&M University and a Master’s in Computer Engineering from Johns Hopkins University. Brad was introduced to technology very early on because his dad loved trying out the latest technology. They got linked to the internet at the beginning of the 1990s. From there, Brad’s interest in technology continued to grow. When he was ten or eleven years old, he and his brother started building computers, and they even designed their entire home network a couple of years later.In today’s episode of the (CS)²AI Podcast, Brad talks about how he developed an interest in technology as a young boy and how he got introduced to internet security. He also shares some nuggets about how you need to think and what you need to understand if you are interested in making a career in the technology or cyber security space.Be sure to stay tuned for more! You definitely won’t want to miss this episode!Show highlights:How Brad first got introduced to technology. (2:50)How he started learning about internet security and firewalls (6:38)Why Brad has always viewed cyber as a lens through which to digest technology. (7:24)A simple question that Brad always likes to ask new hires or people interested in the technology space. (10:07)How the industrial part of cyber security intersected with his career path. (15:48)What you would need to have in place to join an OT team at KPMG. (18:38)Where industrial control systems came into Brad’s career. (22:59)The three mentors Brad has had in his life. (26:35) The biggest challenges he has experienced in his career. (31:30)Knowing how and when to say “no”. (34:09)The greatest single skill anyone can have. (35:38)Staying abreast of new things. (41:16)
40:5816/11/2021
12: Using Writing Skills to Unlock Careers in Cybersecurity with Andrew Ginter

12: Using Writing Skills to Unlock Careers in Cybersecurity with Andrew Ginter

Today, Andrew Ginter, a pioneer in the cyber security space, joins Derek Harp. Andrew is the VP of Industrial Security at Waterfall Solutions. He is an author, a podcast host, and a well-known cyber security expert with multiple credentials in the industry. Andrew was raised on a farm outside of Calgary and has remained there ever since. Where ever he worked early on in his career, Andrew would always step up and volunteer to do anything important that needed to get done. So he often wound up doing the things no one else wanted to do. That mostly involved doing maintenance because everyone else in the computer field wanted to do development. Andrew found that going with whatever was important and executing it well got him promoted and afforded him better opportunities.In this episode of (CS)²AI Podcast, Andrew discusses his journey into cyber security. He shares his insights and offers advice for those who want to use their writing skills to open up new opportunities. This is an episode you won’t want to miss if you are interested in starting a career in the industrial security space!Show highlights:Andrew shares his background. (2:00)How Andrew got pulled into doing SCADA security. (5:06)Where technology first intersected with Andrew’s life. (7:05)How Andrew wound up doing maintenance on 100,000 lines of assembly code. (10:15)The helpful role mentorship played in Andrew’s career. (12:24)Andrew talks about the control system product he developed. (17:54)How Andrew’s writing skills opened up opportunities for him. (19:55)What got highlighted for Andrew as a result of him writing a controversial book. (28:02)Some practical advice for where writing skills could get developed and applied to the cyber security industry. (34:36)Andrew shares some great advice about researching while working on a Master’s Degree to get a Ph.D. (37:46)What you need to know if you are starting in the industrial security space. (43:26)Resources:Practical Cryptography by Bruce Schneier
42:2109/11/2021
11: Career Advancement in Information Security Services with Bill Malik

11: Career Advancement in Information Security Services with Bill Malik

Today, Bill Malik, the Vice President for Infrastructure Strategies at Trend Micro, joins Derek Harp. Bill is a well-rounded individual who has been involved in the security industry for quite some time. He has tons of experience in many different areas and has a long list of career milestones. Bill is a well-known writer, analyst, and speaker. He is a former programmer who still enjoys dabbling for fun! He is also a father and grandfather, an explorer of ideas, a chef, a wine connoisseur- and was even once a DJ!In this episode of the (CS)²AI Podcast, Bill gives an inside view into his career journey. He discusses his interesting career and explains how he got involved in developing an information security service. He also shares some gold nuggets of advice for those individuals who would like to get to the next level in their organization by bettering their communication skills and offers excellent advice for those starting in their careers.  This is a great conversation full of nuggets that you won’t want to miss! Stay tuned for more!Show highlights:Bill talks about his background. (10:15)When technology first came into play in Bill’s life. (13:08)Bill discusses MIT’s involvement in developing a secure system for time-sharing, which led to his first intersection with cookies and security. (14:12)Bill talks about the event that led to his first information security moment as an app developer. (19:39)One of the biggest bits of programming Bill has ever done. (21:03)Leaving IBM to join Gartner. (24:42)How Bill got into developing an information security service during his time at Gartner. (26:05)Bill shares some nuggets for those who want to better their communication skills and get to the next level in any organization. (29:39)How Bill transitioned to KPMG. (33:12)Where Bill first encountered industrial control systems. (36:03)Why we are fortunate to be living in this age, in human history. (38:45)Bill talks about mentorship and shares some valuable advice for people starting in training positions. (39:35)The advice Bill would give to his younger self. (45:56)Bill shares his advice regarding potential future careers. (47:40)Why Bill sees no significant productive application in the future of blockchain. (51:12)Links and resources:Recommended video: The Last Lecture by Randy Pausch
47:1402/11/2021
10: A Non-Traditional Path of Curiosity & Cybersecurity with Jim McGlone

10: A Non-Traditional Path of Curiosity & Cybersecurity with Jim McGlone

In today’s episode of (CS)²AI Podcast, Derek Harp is joined by Jim McGlone. Jim is from Kenexis. He is an industry veteran working on control systems, safety, and security. Jim was born in Baltimore, Maryland. His dad worked for government contractors, so Jim was taken all over the world as a child. He remembers living in Germany, where his dad was responsible for all the control systems, and targeting mechanisms on cold war nuclear missiles pointed at Russia. His life was a little stressful and strange back then because his family took some weird vacations to places in Switzerland which Jim, only in his fifties, learned were safe houses. Later, when he was in grade school, their family moved back to a small town in Ohio where Jim grew up amongst some interesting people living on the edge of Amish country. After graduating from high school, Jim went to the University of Akron intending to get a double E Degree. He did not do well, unfortunately, and dropped out after three years. He later graduated from the University of New York, with honors, with degrees in computer technology, nuclear technologies, and physics. Then, ten years later, he earned his MBA. Jim is a multi-talented individual! What really sets him apart from others is his insatiable curiosity. He is constantly changing and evolving. In this episode, he talks about his career and how the unusual education choices he made early on later influenced his career path. He did not follow the expected order of things, preferring to do it in his own time. Later in his career, he went back and completed much of what had earlier been expected of him. You will not want to miss this episode if you’re curious, like Jim, and always striving to grow and develop. Show highlights:Jim’s children get upset with him because he is unable to tell his grandchildren what he does in his career because it is too complicated. (13:45)Jim just did several safety courses and is preparing to get some certifications for process safety, like risk analysis. (14:46)How education in the military differs from other education. (15:15)Where industrial controls and systems intersected with Jim’s journey. (16:00)Jim’s career journey just after he got out of the navy. (17:59)The point at which Jim’s life became all about computers and software. (21:58)Meeting Bryan Singer and traveling with him, doing sustainability and security summits. (25:31)Jim went to work for Honeywell. (28:00)When Jim got ahead of the curve with the software he created. (31:10)Some circuits are so critical that we need to rethink what they get hooked up to. (35:05)Jim is coming up with standard language around cyber security. (45:35)Some of the challenges Jim has faced in his career: Good advice for anyone who’s looking to get into cybersecurity as a career (47:00)How mentorship has played a part in Jim’s life. (57:24)This podcast is brought to you by: Waterfall Security Solutions, Fortinet, Network Perceptions, Industrial Defender, Tripwire and Q-Net Security.
56:4226/10/2021
09: Mentorship for Cyber Security Career Development with Rick Peters

09: Mentorship for Cyber Security Career Development with Rick Peters

Today, Rick Peters joins Derek Harp. Rick has a long history in the world of cyber security. He is currently the CISO for Operational Technology, North America for Fortinet. Rick was born and raised on the east coast and was always involved with the community there. That involvement afforded him some wonderful opportunities, both before and after he graduated from college with a Double E degree. In high school, Rick never thought he would end up with a career in math and the sciences. He dabbled in architecture for a while but soon realized he was not cut out for it. Then, he looked into engineering and found he had an aptitude for it and was a natural fit for that world. He found his niche specifically in the digital aspect of engineering.In this episode of (CS)²AI Podcast, Rick tells his story. He talks about the awesome opportunities he had for growth while working as an engineer at the NSA and discusses the time he spent overseas with US Air Force Europe, working with industrial control systems and SCADA technology. He also explains why mentorship is vital and shares some sterling advice for getting ahead in your career and for those thinking about moving from working for the government to working in the private sector. Tune in to hear more!Show highlights:How Rick found his niche. (3:01)The fantastic opportunities Rick had for growth while working as an engineer at the NSA. (6:35)The questions you need to ask yourself as a career professional. (6:50)Spending five years with the US Air Force in Europe as NSA’s Liaison. (8:45)Raising the bar for security in the US Air Force. (12:37)Working with operational technology- or industrial control systems and SCADA technology. (14:35)Thinking about security from the inside out. (20:00)Rick talks about his career path. (24:35) Some advice for those considering moving from working for the government to working in the private sector. (26:52)The career advice Rick would give to his younger self. (34:02)Resources:Fortinet WebsiteCS2AI WebsiteThis podcast is brought to you by: Waterfall Security Solutions, Fortinet, Network Perceptions, Industrial Defender, Tripwire and Q-Net Security.
35:3819/10/2021
08: Creating a Business Around a Great Idea That Solves Problems with Lior Frenkel

08: Creating a Business Around a Great Idea That Solves Problems with Lior Frenkel

Today, Derek Harp is joined by Lior Frenkel, the CEO, and Founder of Waterfall Security Solutions. Lior is a man of many talents! He is an entrepreneur and a business executive. He is also a problem-solver, father, off-road adventurer, competitive shooter, and cooking enthusiast! He has created multiple companies, and he was involved in developing many different products, both commercially and for the military.Lior was born and raised in Israel. He had his first encounter with technology at eight years old when his parents bought a computer for his brother. He got hooked immediately, and since then, he has never left the keyboard! It has always excited Lior to see something tangible happen after writing a few lines of code, and he loves to see people using his technology to solve something meaningful! In this episode of (CS)²AI Podcast, Lior shares his captivating story. He talks about how he taught himself to code at a very young age, the software he developed while in high school, his capacity for solving problems, and why he chose to make a career in the field of cyber security. Stay tuned today to hear about Lior’s journey, and find out how to create a successful business around a great idea or solution.Show highlights:Lior shares his background and origin story. (20:48)Learning through his real-life experience and from others with more knowledge. (25:55)Finding ways to solve problems has always been most important for Lior. (29:02)How Lior started his career while still in high school, selling the educational software he developed. (35:15)Lior talks about his incredible experience in the Israeli Air Force and starting his first business as an adult. (37:29)He knew nothing about business when he started focusing on building technologies for computer/information warfare. (42:19)What Lior started to worry about when he never failed to get in through the perimeter security or firewalls of his targets. (46:13)Lior explains why security became the focus of his life. (50:25)How to start a successful business around a great idea for a new solution. (55:48)Lior shares his vision for the future. (1:06:54)Resources:Waterfall Security SolutionsCS2AI.orgThis podcast is brought to you by: Waterfall Security Solutions, Fortinet, Network Perceptions, Industrial Defender, Tripwire and Q-Net Security.
39:0712/10/2021
07: Becoming an Effective Leader in Technology Control Systems with Jim Crowley

07: Becoming an Effective Leader in Technology Control Systems with Jim Crowley

Today, Derek Harp is joined by Jim Crowley, the Chief Executer Officer of Industrial Defender. Jim is a well-known sales expert who has held many different sales positions. He started out in the world of technology in the late 1970s, loading data into an IBM system via a punch-card loader to run a statistics program. He got to know the industrial space from the bottom up at an early age, taking machines apart, putting in packing, and being on the plant floor. Jim is an extroverted family man who loves the outdoors and doing competitive saltwater fishing on the weekends.In today’s episode of the (CS)²AI Podcast, Jim shares his fascinating journey into the world of cyber security. He explains how well his past sales roles in IT fit together with the development of Industrial Defender and talks about the ingredients that contributed to Industrial Defender becoming a leader in the cybersecurity space. Jim also talks about collaboration and mentorship and offers advice about some intangible elements, other than technology, that can make a startup company successful. Stay tuned today to hear Jim’s engaging story, get some great advice, and learn what it takes to become an effective leader in the technology control systems space.Show highlights:Jim shares his backstory. (2:12)The early days, when industrial component systems intersected with Jim’s career. (6:25) What it takes to become a leader in the cyber security space. (9:22)Jim shares some tips for overcoming challenges. (13:40)The intangible elements that can help make a startup company successful. (14:21)Jim offers some advice to facilitate collaboration. (16:38)Jim talks about how things have changed at Industrial Defender since he returned after leaving and becoming an entrepreneur. (19:12)The role that mentorship has played in Jim’s journey. (21:32)Becoming more valuable in the cyber security space and knowing when it is time to move on. (24:57)Some advice for skilled IT practitioners who want to branch into the technology control systems space. (35:07)Jim talks about what it will take to be successful in the OT world in the future. (36:52)This podcast is brought to you by: Waterfall Security Solutions, Fortinet, Network Perceptions, Industrial Defender, Tripwire and Q-Net Security.
35:5705/10/2021
06: The Continuous Adaptability and Improvement of Cybersecurity with Professor Harry Wingo

06: The Continuous Adaptability and Improvement of Cybersecurity with Professor Harry Wingo

In today’s episode of (CS)²AI Podcast, Derek Harp is joined by Professor Harry Wingo, a full-time faculty member at the National Defense University in Washington, D.C., U.S., where he serves as Chair of the Cyber Studies Department within NDU’s College of Information and Cyberspace. He has more than 25 years of government and corporate leadership experience, including 15 years focused on information and communications technology law and policy. Harry has served as President and CEO of the D.C. Chamber of Commerce, Senior Policy Counsel at Google, Counsel to the Senate Committee on Science, Commerce & Transportation, Special Counsel to the General Counsel of the Federal Communications Commission and an Associate with the law firm of Skadden, Arps, Slate, Meagher & Flom. Before his career in law and technology, he served for more than six years as a Navy SEAL officer. Harry will share the incredible journey of how he got into cybersecurity and his insights and views regarding the talent shortage in the industry, the importance of diversity and inclusion for the future workforce, national cybersecurity defense in an ever-changing environment, and the overall challenges the industry continually faces. If you’re really interested in cybersecurity like Derek and Harry are, this is one episode you won’t wanna miss.Show Highlights:Starting out as a Navy SEAL and transitioning into law and technology which led him towards specializing in cybersecurity (01:20)Growing up as a nerd with an interest in some of the earliest computers that were there (05:10)The boxing coach who facilitated his exposure to the SEALS as a possible career route (08:30)How being in the SEALS enabled him to pursue his consistent interest in information and communications (11:00)Working for the Federal Communications Commission as a special counsel to the general counsel, and being involved in the development of policy and legal frameworks around spyware and other cybersecurity issues (16:22)Why and how the cognitive side of cybersecurity came crashing into the forefront (22:04)Diving into how to protect networks, make sure they’re defended and how to conduct cyber warfare in consistency with international law (28:00)The importance of finding champions/mentors who take an interest in us and never letting go (32:42)Getting guidance on what your life purpose is through the Ikigai concept (35:05)Automation and AI: Up-to-date advice for anyone who’s looking to get into cybersecurity as a career (42:47)Links and Resources:More about (CS)²AIRebooting AI By Gary Marcus and Ernest DavisArtificial Intelligence: A Guide for Thinking Humans By Melanie MitchellThis podcast is brought to you by: Waterfall Security Solutions, Fortinet, Network Perceptions, Industrial Defender, Tripwire and Q-Net Security.
47:4328/09/2021
05: Navigating the Modern Cybersecurity Landscape with Dr. Eric Cole

05: Navigating the Modern Cybersecurity Landscape with Dr. Eric Cole

In today’s episode of (CS)²AI Podcast, Derek Harp is joined by Dr. Eric Cole, PhD, an industry-recognized security expert with over 20 years of hands-on experience in consulting, training, and public speaking. As the founder and CEO of Secure Anchor Consulting, Dr. Cole focuses on helping customers prevent security breaches, detect network intrusions, and respond to advanced threats. In addition, he is a sought-after expert witness and a 2014 inductee to the InfoSecurity Hall of Fame.Dr. Cole is the author of several books, including Advanced Persistent Threat: Understanding the Danger and How to Protect Your Organization; Hackers Beware: The Ultimate Guide to Network Security; and Insider Threat: Protecting the Enterprise from Sabotage, Spying, and Theft; and Hiding in Plain Sight. With over 20 patent applications, he is on the cutting edge of cyber security research and development. Eric will share his incredible journey from interning for the CIA as a hacker to becoming a successful entrepreneur in the cybersecurity space, and share actionable tips about the practices that led him on the path to success and fulfilment while doing what he loves most. From his cybersecurity wisdom, he will also help us understand how cybersecurity fits within this new landscape that we call life and how we can position ourselves and our businesses to take advantage of that. At the least, this episode will help you take an assessment of your inventory of skills and other resources so you can survive through the current challenging environment brought about by the Covid-19 pandemic, so stay tuned.Show HighlightsFrom being a professional hacker for the CIA to an entrepreneur in the cyber security space (01:58)His constant love for technology, from a programming and functionality perspective, throughout his life (06:42)Making the choice to work while going to school and how it equipped him with what he needed to succeed in life (11:42)The importance of approaching people who can help you find opportunities and achieve goals (14:09)How powerful old school methods of reaching out are, compared to the more modern methods like email (17:22)Looking at challenges as opportunities to keep winning even in the most difficult of times (19:40)The experience Eric has had with following his heart versus chasing money (22:14)Helping people understand the actual issues that bring about cybersecurity breaches  (30:20)Reading widely, exercising and eating well to keep his performance at the highest level (32:03)Links and ResourcesMore about (CS)²AISecure Anchor ConsultingOnline Danger By Dr. Eric ColeThis podcast is brought to you by: Waterfall Security Solutions, Fortinet, Network Perceptions, Industrial Defender, Tripwire and Q-Net Security.
34:3221/09/2021
04: The Pros & Cons of a Narrow Niche in Cybersecurity with Marty Edwards

04: The Pros & Cons of a Narrow Niche in Cybersecurity with Marty Edwards

There’s a lot more to cyber security than what meets the eye. While many opt for more traditional paths within the industry, there are unique and niche opportunities available. Todays guest, Marty Edwards, is the Vice President of Operational Technology for Tenable, former director of ISC/CERT, an amateur radio operator, and a jack of all trades in many fields. Today Marty discusses his journey of moving through his career, the pro’s and con’s he’s seen from having a narrowed niche, what he’s learned along the way, and so much more. Tune into this episode to hear more about Marty’s journey, along with an array of insight into his career. Show Highlights: Marty shares what his childhood on a ranch in Canada was like How Marty’s education helped him get into his career now What Marty’s career looked like directly out of college How Marty got into the position he has now What is INL and what do they do Marty shares what his role as an “industry liaison” looked like How Marty became a Federal Civil Servant What led to going from being in charge of a sector to overseeing the whole program How having mentors impacted Marty’s career The pro’s and con’s of having a really specialized niche The benefits of having industrialized experience Why certifications may or may not help your resume The importance of being present in conversation What excites Marty in his career today Doing a critical analysis to resolve the problem The evolution and movement to cloud based technologies Resources:TenableCS2AIThis podcast is brought to you by: Waterfall Security Solutions, Fortinet, Network Perceptions, Industrial Defender, Tripwire and Q-Net Security.
45:3814/09/2021
03: Innovations and the Value of Teamwork in Cybersecurity with Katie Pehrson

03: Innovations and the Value of Teamwork in Cybersecurity with Katie Pehrson

Being a woman in the engineering space can be a challenge, but also gives you a unique perspective and opportunities. Today’s guest, Katie Pehrson is the technical director and an engineer for Bechtel, an engineering, construction, and project management company. Katie shares what led her to the career she has today, and what propelled her into her 19 year position with Bechtel. Katie discusses what it’s like to be a women in the industry, innovative advancements that are being made, and the value of teamwork within the workplace. Tune into this episode for some remarkable insight into the engineering world. Show Highlights: Katie shares how she got to where she is in her career The building blocks of what Katie studied How Katie started her career directly out of college What Katie’s responsibilities entailed in her first job What project intersected cyber security into Katie’s career path Katie shares how learning and training was initiated at Bechtel Why you should reach out to people and get knowledge from others How problems have shifted within engineering over the years What it’s like to be a woman in engineering Advice Katie would give her younger self Bringing people together in the industry How to help the engineering industry be more inviting for women The biggest challenges within the industry Exciting emerging technology Why skills are more important than your backgroundAdvances in the industry that Katie is excited about Resources:Bechtel.comCs2ai.orgThis podcast is brought to you by: Waterfall Security Solutions, Fortinet, Network Perceptions, Industrial Defender, Tripwire and Q-Net Security.
30:4007/09/2021
02: Practical Takeaways from the Cyber Security Report with Walter Risi of KPMG

02: Practical Takeaways from the Cyber Security Report with Walter Risi of KPMG

Welcome to (CS)²AI Podcast! Todays episode is hosted by Derek Harp and joined by Walter Risi, Global Cyber IT Leader and Cyber Security Consultant at KPMG. This conversation is an assessment of the (CS)²AI/KPMG Cybersecurity Report, a mass IT report that covers broad and interesting topics within the cybersecurity space. Derek and Walter cover important topics within the report, such as the lack of resources the large-scale companies are facing, the cyber immaturity that is harming companies, and the importance of increasing sophisticated technology. Join Derek in this interview to learn more about the challenges companies are facing and how you can increase your own cyber security. Show Highlights: How the report was produced and made Dispersion we see in risk assessments within the market place Is cloud security a priority The biggest problem in the workplace The importance of company maturity and what happens as companies mature Number two reasons people are using managed services Why reducing operational disruptions is important Ensuring people understanding both cyber security and IT Why more companies spent financial increase on tax management as opposed to more qualified work force Reasons you should upgrade your defenses before it’s too serious Why you should leverage the time you have now Links and Resources:For more information about (CS)²AI visit: CS2AI.orgFor more information about KPMG visit: KPMGThis podcast is brought to you by: Waterfall Security Solutions, Fortinet, Network Perceptions, Industrial Defender, Tripwire and Q-Net Security.
30:2703/05/2021
01: Introducing the (CS)²AI Podcast

01: Introducing the (CS)²AI Podcast

In this episode, you'll meet your host, Derek Harp, as he shares the vision for the podcast. The podcast has been in the works for quite a while and we're excited to bring you some of the biggest names in the cyber security industry.We're very thankful for the sponsors of the podcast. We couldn't do it without them, and you can find them linked on the (CS)²AI website. There are so many exciting things planned for season 1, and we'd love to get your feedback on the show, as well as any suggestions you may have about the type of content you'd like to see.We can't wait for all that we have in store for you - it's an exciting time to be in our industry!
04:0302/05/2021