Why Your Security Team Isn't Ready for a Real Cyberattack

Why Your Security Team Isn't Ready for a Real Cyberattack

by Craig Duckworth & Dino Busalachi · View the channel on PSI

Applied Sciences & Engineering Computing & Cybersecurity UComputing and Information TechnologyURComputer security
🎙 Craig Duckworth & Dino Busalachi 👥 210 📅 October 14, 2026 ⏱ 34 min 👁 3 📄 expert opinion 🧭 2026-10-14
Available in: English (current) Français

Keywords

incident responseIT/OT convergenceAI agentscontinuous monitoringCMMC

Summary

In this episode of Industrial Cybersecurity Insider, hosts Craig Duckworth and Dino Busalachi discuss lessons from the OTICS Cybersecurity Conference in Nashville. They highlight that while many manufacturers have incident response plans, few practice them outside office hours, leaving teams unprepared for real crises. The conversation covers how threat actors ’live in the normal’ to stealthily steal intellectual property, using process data that can be reverse-engineered to expose trade secrets. They stress that the divide between IT and OT groups hampers security, recommending a unified ’technology team’ approach. The hosts note that security tools often go unused after deployment, and that integrators and OEMs should embed security into projects from the start. They examine the CISO’s limited tenure and authority, the evolving CMMC requirements now including OT networks, and the growing speed of AI-driven attacks, which compress response times dramatically. The discussion concludes that collaboration and continuous monitoring are essential to staying ahead of adversaries.

155 words

Critical Evaluation

Value of the Information & Strength of the Argument

The value of this video lies in its practical, action-oriented insights drawn from real-world industrial cybersecurity experience. The hosts argue persuasively that security readiness is more about people and processes than technology, giving concrete examples such as the need for practiced incident response under realistic conditions and the danger of treating data as merely opaque numbers when combined into information that reveals intellectual property. Their argumentation is coherent and grounded in years of field work, though it is primarily opinion-based and lacks supporting data or citations. The hosts effectively convey that cybersecurity is not a checkbox but a continuous effort that requires organizational alignment. While they offer compelling anecdotes, the lack of verifiable evidence weakens the overall rigor.

Scientific Rigor, Source Quality, Title Accuracy

The video references several conference presentations and mentions a book by an intelligence officer, but no specific titles or links are provided in the transcript. The description lists only promotional and LinkedIn URLs, which serve as contact points rather than sources. The title accurately captures the content, which is fully focused on industrial security unpreparedness. The hosts do not make unsubstantiated claims that conflict with known facts, but they also do not provide citations for statistics or quoted material, limiting the scientific verifiability. The title and content are well-aligned, and the absence of references in the video is compensated only partially by the description’s links, which are not directly used as sources.

245 words

Title / Content Match

The title accurately reflects the central theme: why industrial security teams may be unprepared for real attacks, emphasizing gaps in planning, practice, and integration.

Quality & Reliability

6/10

The discussion offers practical insights from experienced professionals but relies on anecdotal evidence and conference highlights without citing specific verifiable sources. Claims are plausible but not rigorously backed by data or external references.

Chapters

Cited Sources

Contribution & Novelties

The video brings fresh perspective from the OTICS conference on how industrial organizations fail to prepare for cyberattacks, emphasizing the need for practiced incident response beyond office hours and the risk of data aggregation. It highlights the growing role of AI in accelerating both attacks and defenses, compelling faster reaction times. The discussion offers practical advice on integrating IT and OT teams, and on embedding security into project scopes from the start. It also sheds light on the CISO’s limited tenure and the challenge of authority without accountability.

Pour aller plus loin :

146 words

Radar Profile

The radar profile shows moderate scores across all dimensions, indicating a balanced but not exceptional presentation. The quantity of information is decent, but quality and reliability suffer from lack of citations, while the technical level is accessible yet not deep. Overall, this is a useful expert discussion for practitioners, though not a rigorous scientific source.

Reliability 5/10