Ask Us Anything: OT Cybersecurity Office Hours with Industry Experts

Ask Us Anything: OT Cybersecurity Office Hours with Industry Experts

🎙 Insane Cyber 👥 2K 📅 March 16, 2026 ⏱ 46 min 👁 51 📄 expert opinion 🧭 2026-08-16
Available in: English (current) Français

Keywords

OT securityICSasset inventorynetwork segmentationModbus

Summary

In this Ask Me Anything session, four OT security experts from Insane Cyber answer community questions about entering the field, useful tools, critical data, certifications, and common security gaps. They recommend free resources like DHS ICS 301 and emphasize hands-on learning. For tools, they highlight Wireshark, tcpdump, and Zeek for network analysis, along with the importance of notepad and pen for site walks. The most critical data is a comprehensive asset inventory, which is often incomplete. They advise tailoring certifications to career goals and stress the value of fundamentals. Key security gaps include poor network segmentation and lack of visibility. They discuss protocol concerns, noting Modbus remains prevalent despite its simplicity, while DNP3 and OPC UA offer more complexity. The experts share practical advice for bridging the cultural divide between IT and OT teams.

134 words

Critical Evaluation

Value of the Information & Strength of the Argument

The video provides valuable practical insights from experienced professionals, covering a range of topics relevant to OT security. The experts offer concrete advice, such as using Wireshark for network analysis and emphasizing the importance of asset inventory. Their arguments are based on real-world experience, making them credible. However, the discussion is informal and lacks deep technical detail, and some answers are high-level. The panelists sometimes diverge in their perspectives, but they generally agree on key points like the importance of visibility and segmentation.

Scientific Rigor, Source Quality, Title Accuracy

The video does not cite specific sources, but the experts reference their own experience and mention a few resources like DHS ICS 301 and Hack The Box Academy. The title accurately reflects the content, as it is an AMA session. The information is presented as expert opinion rather than rigorously sourced data, which is appropriate for the format. The lack of formal citations reduces the scientific rigor, but the practical knowledge shared is valuable.

172 words

Title / Content Match

The title accurately reflects the content: an AMA session with OT cybersecurity experts.

Quality & Reliability

7/10

The video features four experienced OT security professionals sharing practical insights from their field work. Their expertise is credible, but the format is an informal Q&A session without formal citations or verifiable sources. The information is anecdotal and based on personal experience, which is valuable but not rigorously sourced.

Key Moments

Cited Sources

  • DHS ICS 301 — Mentioned as a free course for OT security
  • Hack The Box Academy — Recommended for learning offensive security skills

Concurring Sources

  • IEC 62443 — Standards that address network segmentation and asset inventory, aligning with the panel's recommendations.

Contribution & Novelties

The video offers a candid, practitioner-driven perspective on OT security, highlighting common challenges like incomplete asset inventories and poor network segmentation. It provides actionable advice for those entering the field and emphasizes the importance of bridging IT/OT cultural gaps.

Pour aller plus loin :

  • IEC 62443 — International standards for industrial cybersecurity, relevant to the discussion on security gaps.
  • Modbus protocol — Overview of the Modbus protocol, central to the protocol discussion.
  • DNP3 protocol — Overview of DNP3, another key protocol mentioned.
  • Zeek — Network security monitoring tool recommended by the panel.

92 words

Radar Profile

The radar profile shows balanced scores across all dimensions, with slightly lower technical depth and source rigor, reflecting the informal Q&A format. The video excels in practical insights and expert credibility, making it a valuable resource for practitioners.

Reliability 7/10

💬 No comments were provided for analysis.