Dino sits down with Mike Holcomb, Fellow and Director of ICS/OT Cybersecurity at Fluor, to explore the critical, and often overlooked challenges in securing operational technology.

From his early fascination with hacking culture to leading OT security for one of the world’s largest engineering firms, Mike shares personal insights and lessons learned.

The conversation covers the delayed cybersecurity maturity in OT environments and the lasting impact of the Colonial Pipeline breach.

They address the crucial role of visibility, engineering partnerships, and cultural buy-in when building secure industrial systems.

Whether you’re managing pipelines, power grids, or manufacturing floors, this episode delivers actionable insights and strategic foresight for leaders protecting our most vital infrastructure.

Chapters:

• 00:00:00 - Why OT Security Still Falls Behind
• 00:01:03 - Mike Holcomb’s Unlikely Path to Cybersecurity
• 00:01:23 - Hacking Curiosity and a Love for Breaking Things
• 00:02:16 - From Network Admin to OT Defender
• 00:03:08 - Stuxnet, Colonial, and the Wake-Up Calls We Ignored
• 00:06:18 - When OT and IT Don’t Speak the Same Language
• 00:12:14 - Threats Are Getting Smarter — Are We Keeping Up?
• 00:26:29 - Evolving the Culture of Cyber Hygiene
• 00:32:14 - Final Takeaways for Security Leaders

Links And Resources:

• Mike Holcomb on LinkedIn
• Industrial Cybersecurity Insider on LinkedIn
• Cybersecurity & Digital Safety on LinkedIn
• BW Design Group Cybersecurity
• Dino Busalachi on LinkedIn
• Craig Duckworth on LinkedIn

Thanks so much for joining us this week. Want to subscribe to Industrial Cybersecurity Insider? Have some feedback you’d like to share? Connect with us on Spotify, Apple Podcasts, and YouTube to leave us a review!

Dino welcomes Kevin Kumpf, Chief OT/ICS Security Strategist at Cyolo to this episode. They discuss the growing challenges and evolving strategies around cybersecurity in industrial environments.

Kevin shares a seasoned perspective on bridging the gap between IT and OT, busting myths about Zero Trust certifications, and the dangers of underutilized security tools - or "shelfware."

From real-world examples involving breweries, milk production, and energy plants, the conversation uncovers how lack of visibility, broken remote access practices, and aging systems create critical vulnerabilities.

Most importantly, Kevin offers actionable advice for CISOs, CTOs, and plant managers on building resilient cybersecurity frameworks without disrupting operations.

Don't miss this episode full of practical advice from industry experts.

Chapters:

• 00:00:00 - Kicking Off: Why OT Cybersecurity Can't Wait
• 00:01:18 - Meet Kevin Kumpf: From Bank Vaults to Industrial Battlegrounds
• 00:02:56 - Hard Truths About Securing Operational Technology
• 00:06:42 - Shelfware Syndrome: Why Tools Fail Without Strategy
• 00:12:09 - Plant Managers, Vendors, and the Battle for Cyber Resilience
• 00:23:56 - Remote Access Exposed: The Hidden Risks Inside Your Plant
• 00:30:58 - Closing Thoughts: Building Stronger, Smarter Industrial Defenses

Links And Resources:

• Industrial Cybersecurity Insider on LinkedIn
• Cybersecurity & Digital Safety on LinkedIn
• Dino Busalachi on LinkedIn
• Craig Duckworth on LinkedIn

Thanks so much for joining us this week. Want to subscribe to Industrial Cybersecurity Insider? Have some feedback you’d like to share? Connect with us on Spotify, Apple Podcasts, and YouTube to leave us a review!

Dino and Craig address the recent acknowledgment by China of their role in U.S. infrastructure hacks. They explore the urgent cybersecurity challenges facing industrial environments.

With rising geopolitical tensions, tariffs, the push to bring more manufacturing back to the U.S. and increasing attacks on critical infrastructure, the stakes have never been higher.

From end-of-life PLCs still running core operations, to the disconnect between IT and OT leadership, this conversation identifies the systemic gaps leaving industrial operations exposed.

They outline the pressing need for visibility, actionable incident response plans, and a cultural shift toward collaboration across the stack, from plant floor to the boardroom.

Whether you’re a CISO or an operations lead, this episode offers real-world insights, battle-tested perspectives, and one clear takeaway: in cybersecurity, doing nothing is no longer an option.

Chapters:

• 00:00:00 - Kicking Off: Why IT-OT Unity Isn’t Optional Anymore
• 00:01:17 - Cyber Threats, China, and the Global Wake-Up Call
• 00:02:16 - CISA’s New Role: From Background Player to OT Ally
• 00:05:32 - Still Separate, Still Vulnerable: Why IT & OT Must Sync Up
• 00:09:48 - Blind Spots Kill: Why Visibility Is the Real MVP
• 00:10:43 - Remote Access Realities and the Myth of the Air Gap
• 00:20:29 - Crisis Mode: Are You Ready for the Worst?
• 00:23:50 - Dino & Craig’s Parting Shot: Do Something - Now

Links And Resources:

• Industrial Cybersecurity Insider on LinkedIn
• Cybersecurity & Digital Safety on LinkedIn
• Dino Busalachi on LinkedIn
• Craig Duckworth on LinkedIn

Thanks so much for joining us this week. Want to subscribe to Industrial Cybersecurity Insider? Have some feedback you’d like to share? Connect with us on Spotify, Apple Podcasts, and YouTube to leave us a review!