Cloud Security in Operational Technology vs Information Technology world - Parul Kharub, CISSP
Cloud Security Podcast19 Heinä 2020

Cloud Security in Operational Technology vs Information Technology world - Parul Kharub, CISSP

In this episode of the Virtual Coffee with Ashish edition, we spoke with Parul Kharub, CISSP, HMM. Parul has spent number of years in the Operational Technology (OT) space building cybersecurity strategy and if you in the OT space or want to do cybersecurity in this space.

This is episode not to miss.

Parul & Ashish spoke about

  • What was your path into CyberSecurity or your current role?
  • What does Cloud Security mean for you?
  • Do you work in any particular cloud provider or multi-cloud?
  • Operational Technology Vs Informational Technology, what’s the difference?
  • Example of industries that use Operational Technology
  • How is the public cloud space effecting OT environments?
  • What is Industry Evolution 4.0?
  • What is IoT?
  • Why would someone move OT environment (physical assets) to Cloud?
  • Example of Cyberattacks in OT and how do these attackers get access to this network?
  • Social Engineering, Phishing, SPAMs are these relevant in Operational Technology environments?
  • How are the different environments like IT, Corporate IT & Operational Technology architected in this industries?
  • Do Executives, C-Suite in such industries know about cybersecurity for OT?
  • Is the Information Security Triad for OT world different? CIA + Safety
  • What are the right process to consider for an Operational Technology environment?
  • What does Incident Response and CyberSafety process and training look like in OT environments?
  • Relevance of IoT and AI in OT (Smart Factory or Smart Devices or 5G LTE)?
  • What certifications and training (certifications) are available for cybersecurity jobs in an Operational Technology industry (e.g Tesla) ?


ShowNotes and Episode Transcript on www.cloudsecuritypodcast.tv

Twitter - @kaizenteq @hashishrajan

If you want to watch videos of this and previous episodes:

- Twitch Channel: https://lnkd.in/gxhFrqw

- Youtube Channel: https://lnkd.in/gUHqSai

Jaksot(345)

Why EDR Fails at AI Security & The Rise of Endpoint Behavior Modeling

Why EDR Fails at AI Security & The Rise of Endpoint Behavior Modeling

Is your EDR blinding you to insider threats? In this episode, Ashish is joined by Brandon Dixon (Co-Founder & CTO of Ent AI, and former Microsoft Security Copilot leader) to discuss why traditional en...

14 Huhti 31min

Solving Prompt Injection & Shadow AI for AI Malware

Solving Prompt Injection & Shadow AI for AI Malware

Are AI agents functioning like adversarial malware inside your network? In this episode of the Cloud Security Podcast, Ashish sits down with Jasson Casey, Co-founder and CEO of Beyond Identity, to spe...

7 Huhti 36min

Browser Security Explained: Consent Phishing, "Click Fix" Attacks & The Limits of EDR

Browser Security Explained: Consent Phishing, "Click Fix" Attacks & The Limits of EDR

Is your security team treating your Identity Provider (IDP) like a firewall? In this episode, Adam Bateman (CEO & Co-founder of Push Security) explains why that's a dangerous mistake and how modern at...

10 Maalis 46min

Is AI Hallucinations a Myth and the Real Threat from AI

Is AI Hallucinations a Myth and the Real Threat from AI

Are attackers really using AI to run end-to-end cyber campaigns? In this episode, Edward Wu (Founder and CEO, DropzoneAI) joins Ashish to separate the hype from reality when it comes to AI-driven atta...

6 Maalis 40min

Why AI Infrastructure is Harder to Secure Than Cloud

Why AI Infrastructure is Harder to Secure Than Cloud

Is AI security just "Cloud Security 2.0"? Toni De La Fuente, creator of the open-source tool Prowler, joins Ashish to explain why securing AI workloads requires a fundamentally different approach than...

20 Helmi 34min

How Attackers Bypass AI Guardrails with Natural Language

How Attackers Bypass AI Guardrails with Natural Language

In the world of Generative AI, natural language has become the new executable. Attackers no longer need complex code to breach your systems, sometimes, asking for a "poem" is enough to steal your pass...

10 Helmi 46min

Vulnerability Management vs. Exposure Management

Vulnerability Management vs. Exposure Management

In this episode, Brad Hibbert (COO & Chief Strategy Officer at Brinqa) joins Ashish to explain why traditional risk-based vulnerability management (RBVM) is no longer enough in a cloud-first world .We...

6 Helmi 39min

Is Developer Friendly AI Security Possible with MCP & Shadow AI

Is Developer Friendly AI Security Possible with MCP & Shadow AI

Is "developer-friendly" AI security actually possible? In this episode, Bryan Woolgar-O'Neil (CTO & Co-founder of Harmonic Security) joins Ashish to dismantle the traditional "block everything" approa...

5 Helmi 1h 3min