OT Cyber Tuesday (Ep. 4) - What Would I Do DIFFERENTLY in Starting in OT/ICS Cybersecurity Today?

Value of the Information & Strength of the Argument

The video provides valuable, practical advice for individuals entering OT/ICS cybersecurity, drawing on the speaker’s extensive experience. The argumentation is based on personal anecdotes and industry knowledge, which adds credibility but lacks formal evidence. The speaker effectively explains the differences between IT and OT security, emphasizing the importance of understanding both. He also addresses common misconceptions, such as the over-reliance on CVEs without considering the operational context. The advice is actionable, with specific resources mentioned, such as CISA courses and virtualized environments. However, the discussion is somewhat unstructured, with frequent tangents and viewer questions, which may dilute the main points. Overall, the value lies in the practical, real-world insights shared, though the argumentation could be more systematic.

Scientific Rigor, Source Quality, Title Accuracy

The speaker demonstrates a good understanding of the subject, but the scientific rigor is moderate. He references reputable sources like CISA and SANS, but does not provide formal citations or links in the video. The title accurately reflects the content, as the speaker indeed shares what he would do differently. The video is an opinion piece rather than a research-based presentation, which limits its scientific rigor. However, the practical advice is grounded in the speaker’s experience and aligns with industry best practices. The adéquation between title and content is strong, and the speaker’s credibility adds to the overall reliability.

The title accurately reflects the content, as the speaker shares his personal journey and advice for newcomers in OT/ICS cybersecurity.

7/10

The speaker is an experienced OT/ICS cybersecurity practitioner, providing practical advice and referencing reputable resources like CISA courses and SANS. However, the content is largely anecdotal and lacks formal citations or peer-reviewed sources.

Markers derived by PSI from the transcript: the creator did not define chapters.

• 02:00Introduction and overview of the session's topic.
• 05:00Speaker shares his background and how Stuxnet sparked his interest in OT security.
• 10:00Discussion on the lack of resources in the early days and the importance of community.
• 15:00First recommendation: take advantage of free courses, especially CISA's.
• 20:00Second recommendation: join the community, particularly on LinkedIn and YouTube.
• 25:00Third recommendation: read and research extensively.
• 30:00Fourth recommendation: build practical skills with hands-on projects.
• 35:00Fifth recommendation: never stop learning and stay updated.
• 40:00Q&A session: discussion on network security monitoring tools and active scanning.
• 50:00More Q&A: course recommendations and virtualized environments.

• CISA Training — Mentioned as free courses for OT/ICS cybersecurity.
• SANS ICS Security — Mentioned as a resource for courses and community.
• AutomationDirect Click PLC — Recommended as a cost-effective PLC for hands-on learning.
• LabShark — Mentioned as a virtualized environment for OT security practice.
• GRFICS — Mentioned as a virtualized environment for OT security practice.

• CISA's ICS Training — Aligns with the speaker's recommendation for free training.
• SANS ICS Security — Supports the speaker's mention of SANS as a resource.