The biggest mistake I see organizations make. Moving SCADA under IT. The question is will they realize the mistake and undo it prior to there ICS/OT being compromised with the IT.

Joe Slowik(LinkedIn):

When IT manages all the layers of security.

IT checking out ICS/OT.

If you haven't read this book, I highly recommend it.

I let a vendor do the on prem software install because they said it was "too complicated". AKA they don't have a manual. Who had to fix their shitty fucking install when it broke? This guy! Never again will I fall for that BS.

We don't need people dropping CISA ICS/OT CVE Advisory notifications on LinkedIn anymore. Anyone that is doing ICS/OT security are already getting emails about this stuff.

Have you taken your ICS/OT experts for coffee lately?

ICS Security is more than just cybersecurity. We need to take a more holistic approach that includes physical security and safety engineering. Cyber is only one part of the ICS Security puzzle and it's not going to protect us from the unacceptable physical consequences.

When you finally get time to work in on a unfinished project:

This is very cool and scary at the same time. techcrunch.com/2026/06/13/t...

When the security consultant says they know ICS/OT.

Can we go back to Skype for business?

Bob Radvanovsky (LinkedIn): 🤣🤣🤣

I did my part.

Mike Holcomb (LinkedIn):

Tom Lawrence (LinkedIn):

Physical security doesn't get enough attention.

The work load is so high I'm just flying by the seat of my pants.