The IT-OT Knowledge Gap Costing Organizations Millions

The IT-OT Knowledge Gap Costing Organizations Millions

by Dino Busalachi

Applied Sciences & Engineering Computing & Cybersecurity UComputing and Information TechnologyURComputer security
🎙 Dino Busalachi 👥 192 📅 February 3, 2026 ⏱ 22 min 👁 13 📄 interview 🧭 2026-08-16
Available in: English (current) Français

Keywords

IT-OT gapOT SOCasset inventorynetwork segmentationAI bridge

Summary

In this episode of Industrial Cybersecurity Insider, host Dino Busalachi interviews Adeel Shaikh Muhammad, a cybersecurity expert with 16 years of experience in IT and OT security. They discuss the persistent communication and cultural gap between IT and OT teams, which often leads to security vulnerabilities and financial losses. Adeel highlights that many CISOs lack understanding of OT environments, such as not knowing what a PLC is. They explore the challenges of building OT SOCs, including legacy systems, data integration issues, and false positives. The conversation touches on the potential of AI to act as a bridge between IT and OT, similar to the Matter standard for smart devices. They also address the importance of fundamentals like asset inventory, vulnerability management, and network segmentation, which are often neglected in OT. Third-party access control and OEM warranty restrictions are identified as common blind spots. The episode concludes with recommendations for OT-focused conferences like S4 and Rockwell Automation Fair, and notes the market consolidation in OT security vendors.

166 words

Critical Evaluation

Value of the Information & Strength of the Argument

The video provides valuable insights from a practitioner’s perspective, emphasizing the real-world challenges in OT security. The argumentation is based on anecdotal evidence and professional experience rather than rigorous data, but it is coherent and addresses practical issues. The discussion on AI as a potential bridge is speculative but grounded in current trends. The emphasis on fundamentals and third-party risks is well-argued and actionable.

Scientific Rigor, Source Quality, Title Accuracy

The video does not cite specific sources or studies, relying instead on the guest’s expertise and industry observations. The title is appropriate and reflects the main theme. The description includes links to the guest’s LinkedIn and the podcast’s social media, but no direct references to academic or technical sources. The content is consistent with common knowledge in the field, but lacks formal citations.

142 words

Title / Content Match

The title accurately reflects the core theme of the IT-OT knowledge gap and its financial impact, though the 'millions' figure is not quantified in the video.

Quality & Reliability

7/10

The discussion is based on the guest's 16 years of practical experience in IT/OT security, with concrete examples and references to industry trends. However, it is an interview without formal citations or peer-reviewed sources, and some claims are anecdotal.

Key Moments

Markers derived by PSI from the transcript: the creator did not define chapters.

Cited Sources

Concurring Sources

  • IEC 62443 — Standards for industrial cybersecurity, aligning with the emphasis on fundamentals.
  • NIST SP 800-82 — Guide to ICS security, supporting the need for asset inventory and segmentation.

Contribution & Novelties

The video offers a practitioner’s perspective on the IT-OT knowledge gap, emphasizing the need for fundamental security practices in OT environments. It highlights the cultural divide and the potential of AI to bridge it, which is a forward-looking viewpoint. The discussion on third-party access and OEM warranty restrictions provides practical insights often overlooked.

Pour aller plus loin :

  • IEC 62443 — International standards for industrial automation and control systems security, relevant to the fundamentals discussed.
  • NIST SP 800-82 — Guide to Industrial Control Systems (ICS) Security, providing best practices for OT security.
  • Purdue Model — Reference architecture for ICS, useful for understanding network segmentation.
  • MITRE ATT&CK for ICS — Knowledge base of adversary tactics and techniques specific to industrial control systems.

121 words

Radar Profile

The radar profile shows a balanced score across all dimensions, with slightly lower technical depth and quantity of information, but strong practical relevance and reliability. The video is a valuable resource for understanding real-world OT security challenges.

Reliability 7/10