A CISO's Guide to OT Security
Practical insights for IT professionals navigating the world of industrial control systems, critical infrastructure, and OT security — hosted by Chris McLaughlin.
About the Podcast
The OT Podcast bridges the gap between IT and OT security. Each episode delivers practical guidance, real-world examples, and actionable advice for CISOs and security professionals working in or moving into operational technology environments. The series is mapped to Chris McLaughlin's forthcoming book, A CISO's Guide to OT Security, due in 2026.
Listen on Your Favorite Platform
Episodes
Four Common OT Attack Points
March 22, 2026
Chris McLaughlin drills into the primary vulnerabilities attackers exploit in OT systems — insecure remote access, poor network segmentation, unpatched software, and human risk. Each vector is illustrated with real incidents including water and pipeline breaches, Ukraine grid outages, and ransomware impacts on energy operations. Practical steps include zero-trust, MFA, OT-aware patching, and insider-threat controls.
OT Threats Every CISO Should Know About
January 24, 2026
A twenty-year tour of the most significant cyber incidents in industrial control systems — nation-state attacks (Stuxnet, Ukraine grid, TRITON), ransomware spillover (NotPetya, Colonial Pipeline), supply-chain compromises, and insider threats. Each category reveals how vulnerable OT environments have become and sets the stage for practical mitigation strategies.
Seven Steps to a Sustainable Industrial Security Program
January 18, 2026
A walkthrough of the seven practical steps to build a sustainable OT security program — from securing executive buy-in and adding an OT translator to your team, through asset inventory, adding value to operations, implementing governance, and keeping the program real with tabletop exercises and practical awareness training.
5 Mistakes CISOs Make When Crossing Into OT
January 1, 2026
The series opener explains why IT-led security programs often struggle in OT environments. Five common CISO mistakes are outlined: misunderstanding OT priorities, undervaluing OT engineers, incorrect patching assumptions, excluding OT from incident response, and not applying OT-specific frameworks. Introduces the CIA + S concept and framework recommendations including ISA/IEC 62443 and NIST 800-82.
Subscribe and Never Miss an Episode
New episodes follow the chapters of A CISO's Guide to OT Security. Subscribe on any platform to get practical OT security guidance delivered directly to your podcast app.