Podcasts

The OT Security Made Simple Podcast is all about OT security from practice for practice, hosted by Rhebos founder Klaus Mochalski. The podcast invites experts from the forefront of OT security at energy suppliers, distribution system operators, manufacturing companies or governmental bodies to share their experiences and best practices. You want to take part or have questions to our experts? Get in touch via podcast@rhebo.com.

Listen to us also on:

Apple Podcast Button

Previous podcasts

How to implement Zero Trust in OT environments?

Zero Trust expert Stefan Sebastian talks us through the process of Zero Trust in critical OT networks like substations - and explains why this will be the make segmentation obsolete.

The State of Smart Grid Cybersecurity

Landis+Gyr CISO Todd Wiedman talks about state-nation threat actors, supply chain compromise and what the shift of US legislative power from federal to state will mean for smart grid cybersecurity.

The CISO's Role in OT

Eileen Walther, General Manager of Northwave Cyber Security, and Klaus Mochalski get to the bottom of how the role of the CISO in OT security has changed and what SMEs can learn from this.

ISO 27001 for OT: Benefit or Overhead?

Klaus Kilvinger, Managing Director from the security expert Opexa Advisory, reports on his diverse experiences with ISO 27001. While this is already an old hat in the IT, in industrial environments - OT - it is often greeted with a mixture of suspicion and excessive demands. In the podcast, we get to the bottom of the added value.

From the diary of an OT pentester

As a passionate pentester, Patrick Latus reports from the front line of OT security. From a lack of awareness and expertise among vendors, users and auditors to the question of whether the only reason there are so few publicized OT security incidents is because they are simply not detected.

How do you secure the smart grid infrastructure?

In this episode of OT Security Made Simple, Zeek Muratovic, Director of Security Solutions for the Landis+Gyr group talks about the challenges and shortcomings of energy distributors, and the first steps to secure the growing and ever more complex smart grid infrastructure from the distribution network to the edge like smart meters and EV charging stations.

How to secure the smart metering infrastructure?

OT Security Made Simple welcomes Kenneth Lampinen, Head of Global Security Operations at energy management system provider Landis+Gyr. Kenneth talks about the threats targeting the smart metering infrastructure and why the starting point of cybersecurity is always knowing your turf.

Looking at smart grid cybersecurity regulation under Trump

OT Security Made Simple welcomes Marguerite Behringer, Director of Regulatory Policy & Industry Relations at Landis+Gyr USA. She talks about the difficulty of US-wide cybersecurity regulation, the grind of redundant requirements and why smart meter cybersecurity needs more frameworks than laws.

How to translate IT in OT security?

OT Security Made Simple welcomes senior OT cyber security expert Mohammed Saad, who spent twelve years developing security solutions at Honeywell. He talks about his experiences with customers, successful attacks and how the communication gap between IT and OT in companies needs to be bridged.

Why it is worth thinking outside the box when it comes to use cases

OT Security Made Simple meets IoT Use Cases. Klaus Mochalski talks to Madeleine Mickeleit, Managing Director of IoT Use Cases. Together, they shed light on the power of other companies' use cases in the realization of own projects, the added value of security solutions for completely unrelated use cases and the (also monetary) benefits of sharing experiences with the community.

Ignoring NIS2 compliance is Russian roulette

In this episode of OT Security Made Simple, we talk to Gerald Krebs from TÜVIT about the status of NIS2 implementation in companies. Gerald explains why companies are currently putting off cyber security and how sitting it out can quickly cost a few million euros (and not just because of the legal fines!). More importantly, Gerald gives tips on how companies can take the first steps without overburdening themselves.

How does OT security in the water sector work?

In this episode of OT Security Made Simple, we welcome Rainer Stecken from the German Technical and Scientific Association for Gas and Water. Rainer discusses the challenges in the water sector and presents the concept of a sector SOC, which has been bringing together the cyber security of several water companies in Germany since the beginning of 2024.

Why the IT department has to change to achieve OT security

This OT Security Made Simple podcast by Rhebo sees host Klaus and OT cybersecurity expert Max Weidele of Secure Industry fame speak about the need for organizational change to achieve OT security. What starts with asset management as the foundation quickly moves into the clear vision that IT will be at the heart of OT security organization.

How OT monitoring enables and secures TSN on a large scale

In this episode of OT Security Made Simple, our guest Moritz Flüchter from the University of Tübingen explains how OT monitoring can also be used to enable Time Sensitive Networking (TSN) in networks in which some of the systems and end devices are not TSN-capable. Last but not least, he shows how integrated anomaly detection monitors the existing uncertainties of TSN and detects denial-of-service attacks.

How programming language Rust makes for a more secure product code

This episode sees Rhebo Head of Development, Martin Förster, taking the driver’s seat. He talks to fellow developers Ingmar Pörner & Rafael Peters about how programming language Rust makes for robust and secure software and what a high-quality development process in an OT security company looks like.

The right cybersecurity invest decisions need an OT security strategy first and foremost

In this episode of Rhebo's OT Security Made Simple, Matthias Maier from SIEM system provider Splunk explains why an OT security strategy at management level is essential in order to make the right investment decisions when selecting tools. He explains the individual steps and once again highlights the responsibility of the management when it comes to OT cyber security, particularly with regard to NIS2 and Co.

Why are companies still playing with fire when it comes to OT security?

In this episode of OT Security Made Simple, Götz Schartner, Managing Director of SOC service provider 8com and cyber insurance consultant, shares his experience of the most common attacks. He explains why OT security still receives too little attention and why this could be a company's biggest mistake.

Why CISOs are becoming a the companies' supermen and superwomen

This episode of OT Security Made Simple welcomes Jonathan Gordon of the OT cybersecurity researchers and analyst Takepoint. Jonathan argues that OT security needs to merge the bottom up and top down approach to succeed and that the CISOs will be at the frontline of driving and moderating this process.

Has the energy sector been just lucky with cyber attacks so far?

OT Security Made Simple host Klaus Mochalski talks to Stefan Grützmacher, who has managed several energy suppliers over the last few decades. For Stefan, OT security in critical infrastructures is still treated far too neglected. As an industry expert, he also has clear requirements for solutions for the critical infrastructure sector.

Forensic analysis in OT - a case study

In this episode of OT Security Made Simple, Klaus Mochalski welcomes Digital Forensics Managing Director Dr. Frank Stummer. Frank talks about the importance of digital forensics in security incidents in OT, the challenges he faces and how he was able to thwart another security incident worth hundreds of millions of euros at a logistics service provider.

How does the OT market develop (from an investor’s perspective)?

In this episode of OT Security Made Simple, we welcome cybersecurity expert Dirk Seewald from B2B investor eCapital. Dirk talks about the development of the OT security market from 2006 until today, upcoming trends, why cyber insurance is not the silver bullet, as well as the relevance of military research for innovation. And he explains way German startups need to plan for internationalization from day 1.

What is Zero Trust really (and does it work in OT)?

Klaus Mochalski invited cyber security expert Stefan Sebastian from Zscaler to talk about the paradigm shift Zero Trust entails. Stefan Sebastian explains who Zero Trust would have prevented the cyber attack on the Danish energy sector in May 2023 from the onset and how companies can implement this security concept step by step and can get rid of the notoriously problematic VPN connections in OT.

Who’s responsible for Security By Design? (not who you think of first)

In the latest episode of OT Security Made Simple, OT security experts Sarah Fluchs and Klaus Mochalski discuss the sense and nonsense of security by design and ask the crucial question of who is responsible for its implementation. Their answer is that device and system vendors not the only ones liable.

The 4 types of OT monitoring and which to choose

Raphael Arakelian has been testing OT monitoring system for their effectiveness for many years. He has developed a guide that identifies 4 categories of OT monitoring. In this episode of OT Security Made Simple, Raphael explains host Klaus Mochalski and our listeners the differences and which type works best depending on the operational goal(s) within a company.

OT Security from the view of a Pentester

Klaus Mochalski's guest this time is Sascha Zinke from pentest service provider Splone. Sascha provides insights into his experiences with municipal utilities and energy supply companies, outlines the challenges and discusses with Klaus ways to establish OT security in your own networks with a steady pulse.

How to overcome the insecure-by-design challenge?

This episode sees Hans-Michael Krause from Bosch Rexroth and Dr. Frank Stummer from Digital Forensics talk about how to integrate OT security in new and existing automation environments without having to wait for all vendors to comply to security requirements. We dig into how Bosch Rexroth make their industrial automation platform ctrlX secure and discuss why the ROI of an OT monitoring should not only be evaluated in terms of cyber security but also production availability.

How to deal with the complexity of the OT security challenge?

This episode welcomes Alexander Harsch, the Head of the Cybersecurity Consulting Practice of E.ON's grid companies that runs the Cyberrange-e training center. We reflect on the change in OT security awareness over the last 4 years, why AI is not the general key to success, how to reduce the complexity of the OT security challenge and what electrical companies perceive as the biggest cyber threats today.

End-to-end cybersecurity of the smart grid from the control system to the edge

Klaus Mochalski is joined by none other than Todd Wiedman, CSO of Landis+Gyr and CEO of Rhebo. Todd talks about his more than 15 years of experience in industrial enterprise cybersecurity and provides insights into the security challenges of the Smart Grid and Advanced Metering Infrastructure with its millions of smart meters and essential head-end systems.

Why OT Security needs to become a platform solution

This episode features Jos Zenner, managing director and CTO at Welotec, a provider of rugged computing and communication platforms for DSOs and TSOs in the electrical sector. Jos and Klaus talk about the challenge to think and implement “security by design” on infrastructure level and from the very first step of planning. And we dive into the discussion on how OT security in distributed infrastructures could work as a platform solution to balance limited budgets with the need to secure thousands of secondary substations.

The challenge and relevance of OT security services

In this OT Security Made Simple podcast, Thomas Menze, Sensior Consultant at the ARC Advisory Group, talks about the contrast between the highly dynamic cyber risk evolution and companies' sluggish ability to respond. He discusses with Klaus Mochalski the issue of lack of OT visibility while the number of networked devices is increasing, and why very few companies will be able to get by without OT security services.

The necessity of NIS2 for bringing cybersecurity to the companies

In this week’s OT Security Made Simple podcast, Andreas Könen, Head of the Cyber and Information Security Department at the German Federal Ministry of the Interior and Homeland, provides insights into the BMI's work to strengthen cybersecurity in Germany. He explains why cybersecurity enforcement needs legislation, why companies are willing to take cyber risks, and why the EU's NIS2 directive is essential for pushing cybersecurity forward.

Lessons Learned from 10 Years OT Anomaly Detection

Rhebo CEO Klaus Mochalski starts off the new podcast series OT Security Made Simple with a reflection on his last 10 years in OT security. How did the threat landscape evolve? Has the security level improved? Why is OT security still a challenge for many companies? And which vulnerabilities and risks can be considered a classic in operational technology networks?