How Vulnerable is OT?

Once you’ve secured your IT stack, the greatest blind spot often remains: Operational Technology (OT), the pumps, drives, PLCs, and sensors that keep your business (and the economy) running.

But you can’t defend what you can’t see. Before you patch, segment, or harden a single controller, you need a complete picture of every asset that touches the internet or your process network and how each one could be exploited.

In this episode of Threat Talks, host Lieuwe Jan Koning teams up with Caitlin Clarke (Venable; former U.S. National Security Council) and Patrick Ford (CISO, Schneider Electric) to lay out a proven, government-and-industry playbook for discovering, ranking, and securing vulnerable OT without halting production.

They explore:
✅ CISA’s Installed Base Initiative – using Shodan-style scans and subpoenas to locate orphaned PLCs
? Asset-to-Process Mapping – merging external scans with internal CMDBs for a live OT inventory
? Compensating Controls – micro-segments, DMZs, and proxies when downtime or patches aren’t feasible
? Cross-Functional Response – how CISOs, integrators, plant managers, and federal agencies share intel
⚡ Risk-Based Prioritization – fix first what hits hardest: criticality × exploitability × business impact

Get the strategy (and the field-tested tactics) to turn vulnerable OT into vigilant OT. Watch now and close the last big gap in your security posture.

Additional Resources:

► Securing critical infrastructure: https://www.se.com/ww/en/download/document/Secure_by_Operations_Posture/

? Follow and Support our channel! ?
===
► YOUTUBE: https://youtube.com/@ThreatTalks
► SPOTIFY: https://open.spotify.com/show/1SXUyUEndOeKYREvlAeD7E
► APPLE: https://podcasts.apple.com/us/podcast/threat-talks-your-gateway-to-cybersecurity-insights/id1725776520

? Receive your Threat Talks T-shirt
https://threat-talks.com/

?️ Explore the Hack's Route in Detail ?️
https://threat-talks.com

?️ Threat Talks is a collaboration between @ON2IT and @AMS-IX