We hear it all the time. OT is different than IT, and IT doesn’t understand OT. People argue about IT/OT convergence. In all these discussions I believe two things are true.
- OT doesn’t really understand IT, and the similar, but not identical, requirements that mission critical IT has.
- OT can actually learn a lot from IT.
So I wanted to discuss this with someone with significant experience in both OT and IT security. Lesley Carhart of Dragos was a great choice. Before Dragos she worked for Motorola and was involved with incident response for both OT and mission critical IT.
I talk and opine a bit more than normal in this episode because I have strong feelings on this topic.
Send any comments or suggestions to firstname.lastname@example.org, and subscribe if you haven’t already.
Lesley Carhart on Twitter: @hacks4pancakes
Lesley Carhart personal website
Lesley’s DerbyCon session: Confessions of an IT / OT Marriage Counselor