Your Security Tools Are Useless Without This

Your Security Tools Are Useless Without This

by Craig Duckworth and Dino Busalaki

Applied Sciences & Engineering Computing & Cybersecurity UComputing and Information TechnologyURComputer security
🎙 Craig Duckworth and Dino Busalaki 👥 192 📅 March 11, 2026 ⏱ 25 min 👁 41 📄 expert opinion 🧭 2026-08-16
Available in: English (current) Français

Keywords

OT securitydata sharingIT/OT convergencesystem integratorsvulnerability management

Summary

In this episode of the Industrial Cybersecurity Insider podcast, hosts Craig Duckworth and Dino Busalaki discuss a critical issue in industrial cybersecurity: the failure to share OT security tool data with the people who need it, such as plant floor teams, system integrators, and OEMs. They argue that IT teams often deploy OT IDS platforms without engaging OT stakeholders, leading to a siloed approach where 85% of collected data is meant for OT action but never reaches them. This disconnect results in system integrators bringing their own tools to fill the gap, leading to a proliferation of unstandardized technologies. The hosts emphasize the importance of true IT/OT convergence, where collaboration and data sharing are essential. They recommend that organizations work with partners who can ‘build the car’ rather than just ‘sell the car,’ and suggest tabletop exercises to align teams and identify asset owners. They also stress the need for CISOs to include all external partners in cybersecurity discussions and to treat the entire enterprise, including OT, as a unified entity. The episode concludes with a call to action for organizations to evaluate whether they are truly practicing IT/OT convergence or just paying lip service to it.

197 words

Critical Evaluation

Value of the Information & Strength of the Argument

The value of the information lies in its practical insights from experienced practitioners in the field. The hosts provide real-world examples of the challenges faced when OT security data is not shared, such as system integrators being unable to access critical information for project execution. The argumentation is coherent and persuasive, relying on anecdotal evidence and industry experience rather than empirical data. The hosts make a strong case for the necessity of collaboration and data sharing, using analogies like the car analogy to illustrate the difference between selling and building technology. However, the lack of concrete data or case studies weakens the overall argumentation, making it more opinion-based than evidence-based.

Scientific Rigor, Source Quality, Title Accuracy

The podcast does not cite any external sources, relying solely on the hosts’ professional experience. This limits the scientific rigor, as claims such as ‘85% of data is meant for OT’ are not backed by references. The title ‘Your Security Tools Are Useless Without This’ is somewhat clickbait but accurately reflects the core message that tools are ineffective without proper data sharing and collaboration. The content is well-structured and stays on topic, but the lack of sources and the anecdotal nature of the discussion reduce its overall reliability.

213 words

Title / Content Match

The title is somewhat vague but accurately reflects the core message that security tools are ineffective without proper data sharing and collaboration with OT teams.

Quality & Reliability

6/10

The podcast presents expert opinions from practitioners in industrial cybersecurity, but lacks citations to external sources or data. The discussion is based on anecdotal experience and industry insight, which provides practical value but limited verifiable evidence.

Key Moments

Markers derived by PSI from the transcript: the creator did not define chapters.

Contribution & Novelties

The podcast provides a practitioner’s perspective on the often-overlooked issue of data sharing in OT cybersecurity, highlighting the disconnect between IT and OT teams. It offers practical advice for organizations to improve collaboration and avoid tool proliferation. The discussion is valuable for professionals in the field, though it does not introduce novel concepts or research.

Pour aller plus loin :

  • IT/OT Convergence — Provides background on the concept of IT and OT integration.
  • Purdue Model — Reference architecture for industrial control systems, relevant to understanding OT network segmentation.
  • Tabletop Exercise — A method for testing incident response and collaboration, as recommended in the podcast.

104 words

Radar Profile

The radar profile shows moderate scores across all dimensions, indicating a balanced but not exceptional content. The highest score is in quantity of information, reflecting the podcast's detailed discussion, while technical level and reliability are lower due to lack of sources and depth.

Reliability 5/10