In many OT environments, firewalls are configured, standards are mapped, and remote access is enabled. Everything looks “secure”. Yet ransomware still disrupts production, blinds operators, and forces difficult decisions under pressure.
The issue is not effort. It is an assumption.
This blog challenges ten common myths about OT and industrial security. These myths create false confidence. And false confidence is what attackers exploit.
Across industries, employees are quietly embracing generative and agentic AI to work faster and smarter, using chatbots to draft content, summarize data, and even code through “vibe coding.”
A recent KPMG study reveals that 58% of employees now use AI tools daily, often because they outperform enterprise systems. But speed without oversight creates exposure. Nearly half admit to uploading sensitive company data to unauthorized platforms. What began as a productivity boost is quickly becoming a hidden security threat operating inside the firewall.
In my last post I asked the question: Do you know if your organization is Cyber Secure or Cyber Insecure?
In this post, I will be discussing with you Cyber Risk from the Perspective of Business Risk.
AI is evolving into more autonomous, “agentic” systems capable of making independent decisions. This change is transforming the security landscape. For CISOs and security leaders, it means reevaluating strategies to balance innovation and risk. In this panel discussion, industry experts will share real-world use cases and practical ways to leverage Agentic AI for stronger defenses, improved threat detection, and resilient operations.
I began my last blog post by quoting from a business forum I had read:
“To put it bluntly, the CISO role is dead.”
And I closed my last post saying that I would encourage you all to think about the potential of a Digital Risk and Resilience Officer role and focus as an evolution needed in Information Security which will be more encompassing and vital to the success of your business’s future.
My blog posts here mostly focus on the complexity of systems supporting business operations, the complicating factors of our reliance on the internet for business communications and commerce, the extended risk and value chain of multiple layers of suppliers and customers engaged with our businesses, and the roles and methods of managing information security management in large and small interconnected businesses. Today I am going to focus narrowly on the role of the Chief Information Security Officer (CISO).
