Is Your IIoT Strategy Creating More Security Risks?

Is Your IIoT Strategy Creating More Security Risks?

by Craig Duckworth and Dino Busalacchi

Applied Sciences & Engineering Computing & Cybersecurity UComputing and Information TechnologyURComputer security
🎙 Craig Duckworth and Dino Busalacchi 👥 192 📅 June 9, 2026 ⏱ 22 min 👁 15 📄 expert opinion 🧭 2026-08-16
Available in: English (current) Français

Keywords

IIoTOT securityasset inventoryintrusion detectionIT/OT convergence

Summary

In this episode of Industrial Cybersecurity Insider, hosts Craig Duckworth and Dino Busalacchi discuss the overlooked security risks posed by IIoT devices in industrial environments. They argue that while many organizations deploy OT intrusion detection systems, they often fail to cover the full spectrum of connected assets, particularly at the control layer. The hosts debunk the myth of air-gapped machines, explaining that devices like PLCs can act as gateways, hiding other assets from detection. They emphasize that asset inventory alone is insufficient; organizations must understand the vulnerabilities and CVEs associated with each device. The conversation extends to the operational impact of cyber threats, linking security blind spots to unplanned downtime and reduced OEE. They draw parallels between predictive maintenance for physical equipment and digital anomaly detection, advocating for a process-integrity approach. Finally, they address common pitfalls like alert fatigue and shelfware, and suggest two paths to effective IT/OT convergence: building relationships with OEMs and system integrators, and designing security-ready facilities from the start.

163 words

Critical Evaluation

Value of the Information & Strength of the Argument

The value of the information lies in its practical, field-based insights into OT security gaps, particularly the emphasis on the control layer and the dangers of assuming air-gapped networks. The argumentation is coherent and builds logically from identifying the problem (undetected IIoT devices) to explaining its consequences (downtime, financial loss) and proposing solutions (process-integrity mindset, partnerships). However, the discussion relies heavily on anecdotal evidence and lacks concrete examples or data to strengthen the claims. The hosts’ expertise adds credibility, but the absence of references to specific incidents or studies weakens the overall argumentation.

Scientific Rigor, Source Quality, Title Accuracy

The scientific rigor is moderate; the hosts provide practical knowledge but do not cite specific research or standards. The sources listed in the description are primarily promotional (LinkedIn profiles, podcast links) and do not include authoritative references. The title accurately reflects the content, focusing on the security risks of IIoT strategies. The discussion is well-structured and stays on topic, though it could benefit from more concrete evidence. No comments were provided for analysis.

181 words

Title / Content Match

The title accurately reflects the content, which focuses on the security risks introduced by IIoT devices and the gaps in OT security strategies.

Quality & Reliability

7/10

The hosts are experienced practitioners in industrial cybersecurity, providing practical insights based on field experience. However, the discussion is largely anecdotal and lacks specific data or references to external studies, which limits its scientific rigor.

Key Moments

Markers derived by PSI from the transcript: the creator did not define chapters.

Cited Sources

Concurring Sources

  • IEC 62443 — International standards for industrial automation and control systems security.
  • NIST SP 800-82 — Guide to Industrial Control Systems (ICS) Security.

Contribution & Novelties

The episode provides a practitioner’s perspective on the often-overlooked security risks of IIoT devices in industrial settings, emphasizing the need for comprehensive asset visibility and the integration of cybersecurity with operational efficiency. It reframes OT security as a process-integrity issue, drawing parallels with predictive maintenance.

Pour aller plus loin :

  • IEC 62443 — International standards for industrial automation and control systems security.
  • NIST SP 800-82 — Guide to Industrial Control Systems (ICS) Security.
  • MITRE ATT&CK for ICS — Knowledge base of adversary tactics and techniques specific to industrial control systems.

90 words

Radar Profile

The radar profile shows a balanced but moderate performance across all dimensions, with slightly higher scores in information quantity and quality, reflecting the practical insights provided. The lower technical level score indicates the content is accessible to a broad audience, while the overall reliability is solid due to the hosts' expertise.

Reliability 7/10