On this week's Industrial Talk we're onsite at FABTECH in Atlanta, GA and talking to Mike Brattain, Account Executive with Systems X about “Manufacturers must secure their business to succeed”. Get the answers to your “Cyber” questions along with Mike's unique insight on the “How” on this Industrial Talk interview!

Finally, get your exclusive free access to the Industrial Academy and a series on “Why You Need To Podcast” for Greater Success in 2023. All links designed for keeping you current in this rapidly changing Industrial Market. Learn! Grow! Enjoy!

MIKE BRATTAIN'S CONTACT INFORMATION:

Personal LinkedIn: https://www.linkedin.com/in/mikecharlesbrattain/

Company LinkedIn: https://www.linkedin.com/company/systemsx/

Company Website: https://www.systems-x.com/en-us/

PODCAST VIDEO:

THE STRATEGIC REASON “WHY YOU NEED TO PODCAST”:

OTHER GREAT INDUSTRIAL RESOURCES:

NEOM: https://www.neom.com/en-us

Hitachi Vantara: https://www.hitachivantara.com/en-us/home.html

Industrial Marketing Solutions:  https://industrialtalk.com/industrial-marketing/

Industrial Academy: https://industrialtalk.com/industrial-academy/

Industrial Dojo: https://industrialtalk.com/industrial_dojo/

We the 15: https://www.wethe15.org/

YOUR INDUSTRIAL DIGITAL TOOLBOX:

LifterLMS: Get One Month Free for $1 – https://lifterlms.com/

Active Campaign: Active Campaign Link

Social Jukebox: https://www.socialjukebox.com/

Industrial Academy (One Month Free Access And One Free License For Future Industrial Leader):

Business Beatitude the Book

Do you desire a more joy-filled, deeply-enduring sense of accomplishment and success? Live your business the way you want to live with the BUSINESS BEATITUDES…The Bridge connecting sacrifice to success. YOU NEED THE BUSINESS BEATITUDES!

TAP INTO YOUR INDUSTRIAL SOUL, RESERVE YOUR COPY NOW! BE BOLD. BE BRAVE. DARE GREATLY AND CHANGE THE WORLD. GET THE BUSINESS BEATITUDES!

Reserve My Copy and My 25% Discount

PODCAST TRANSCRIPT:

SUMMARY KEYWORDS

business, conversation, companies, cybersecurity, industrial, cyber, manufacturers, Systems X, secure, mike, absolutely, security, find, people, industry, attack, digital transformation journey, put, manage, data

00:00

Industrial Talk is brought to you by Armis. Yes, you were in the digital transformation game. Yes, you need to find trusted companies, trusted individuals to help you along with that journey. The Armis platform delivers complete asset intelligence, you know what that means? insights into your connected assets, you're in the digital transformation game, you have to have that insights into what is connected. Go to Armis.com Find out more, you will not be disappointed. Industrial Talk is brought to you by Arduino the original all in one IoT platform. That's right, go out to arduino.cc and you will find documentation you will find devices powerful boards to help you with your digital transformation journey. It's all there. Go out to arduino.cc Find out more see how you can connect with these professionals to help you along with your digital transformation journey arduino.cc.

01:07

Welcome to the industrial talk podcast with Scott Mackenzie. Scott is a passionate industry professional dedicated to transferring cutting edge Industry Focus innovations and trends while highlighting the men and women who keep the world moving. So put on your hardhat grab your work boots, and let's go

01:25

Alright, what's good, thank you very much for joining industrial talk we are broadcasting here at FABTECH. Atlanta, Georgia, it is day three, and has been a man I'm telling it's been a barnburner of companies that have just innovated the heck out of their solutions and providing solutions to your problems. More importantly. And once again, we're just having a ball. So you got to put this one on your calendar big time you got to put this this event if you're not here this year, go next year, you will not be disappointed. You're going to be bigger and better. Most definitely. All right. We got a gentleman by the name of Mike, say your last name.

02:02

It's Brattain

02:04

Systems X. With the s on that Systems X. Let's get cracking. cybersecurity, right. Absolutely. And that's something you know, it's sort of an odd thing. One, that your job never gets old?

02:23

No, no, it's becoming more and more important. You know, we are managed security service provider just north of Detroit. And look, I'm amongst my people right now. These are these are manufacturers that are looking to take technology and gain a competitive edge with it. And so 60% of our our business base is manufacturing. So So these are my people hear

02:50

Yeah. And there's three huge conference halls of your people. Oh, yeah, here. It's massive. And it's everything's here. Yeah, everything. Yeah, let me ask you this, a lot of buzzy buzz out there. And I agree with it. 100%. But but one of the areas that everybody talks about, of course, I need to have that ability to connect my assets, I need to I have to have to start pulling that data, I have to start looking at that data, I've got to figure out how to make tactical decisions based off of the data of my assets. That's wrong. But every time they connect, it's an IoT device. The conversation rarely happens around cyber now. And if you want to be competitive, you've got to have that cyber conversation at the beginning. Is that true?

03:37

Absolutely. You know, we tell our customers, we are a cyber first company. And the reason is, Why manage your data. If you're not going to protect your data. This is no longer an option. It is a cost of doing business, you know, as as a leadership of your manufacturing company, your most valuable asset is your ability to do business. And the stats are out there. And these aren't scare tactics, but oh no, the downtime of a manufacturer is roughly $5,600 a minute. The average ransomware that the manufacturing industry.

04:15

I'm gonna stop you right there. Yeah. $5,600 a minute. Yeah, that's sort of average. That's sort of a big smile. It doesn't matter average. $5,600 a minute. Yeah, continue. I interrupted because I I'll just zone in on number. Yeah,

04:30

no, that's right. It's not feelings. It's it's facts. data, right. thing, but, but yeah, and then, you know, your average ransomware in the manufacturing industries got up to $2 million. Gosh, you know, and so, once you learn that ability, it will lose that ability to earn then then you lose your business. Yeah, I

04:53

this just popped into my head ever so fleeting. Are there insurance companies that are saying, Hey, I know ransom Where attacks are out there. They just don't just whether you like it or not, whether you hear my voice, they are out there. But to be able to sort of wrap it in an insurance policy, can they do that?

05:10

Yeah. So you're touching on a a crazy subject, it is the Wild West when it comes to cyber insurance right now. So companies looked at that as an opportunity, right? So when cyber-attacks really started to skyrocket, they were like, oh, an insurance companies never lose. Right. So now they're sitting there going, well, we're gonna have to start backtracking, what our coverages and start putting different things in our policy that we're not going to cover, like, let's say, a attack from a foreign country, you know, well, most of your cyber-attacks are from foreign men, and they are here. Yeah. So yeah, in the tough part is now most companies most most manufacturers, don't have the required cybersecurity measures in place to even qualify for proper cyber insurance. And so that is, it's a, it's a difficult situation right now.

06:03

But what I think you can mitigate it, if you connect with organizations like yours, and be able to have that conversation of fraud. Yep. And be able to know that, hey, here's where I want to go. How do we make sure that my data is secure, my business is secure, so that we can continue to do what we do best by that service? So, again, it's a cotton, it's a conversation, but if you find people not wanting to have that conversation?

06:32

Absolutely. And it's because they don't understand it, right? Some companies, a lot of times they hear look, we're too small, no, no. Right. And I always do the comparison of, you're looking at two houses and one doors locked and one door is not, I'm the bad guy, I'm going in the unlocked door, at least have some sort of security in place, because there's so much low hanging fruit there. But you know, being able to prove that you're secure, that's why I think a lot of the sea levels avoid that conversation. Because usually they have that IT person talking a different language, that doesn't make sense to transmit, you know, and so, yeah, that's, that's the conversation have more of a strategy behind behind the cybersecurity,

07:18

I find, it doesn't have to be, there's the buzz that says, hey, you're gonna lock me down, and I'm not going to be able to do anything, I'm not going to be able to do my business, you're gonna lock me down so tight, I won't be able to do anything. And that's, that's one faults, don't go down that road. But two, if you can create some, some firewall, some sort of way of preventing, or making it difficult for the various behavior to say, they're lazy just like me, they're going to just try to find that simple penetration point, and just, you know, exploit that. So they're going to go on to something else, at least make it a little bit more difficult.

07:58

Yeah, absolutely. Some ways that you can improve your cyber posture, because let's face it firewall and all that that's, that's kind of a thing of the past. They're, they're blown by that like nothing, looking at managed detection and response, but really putting a foundation in place 30% of that 60% manufacturers we work with are in the Defense Supply Chain, they have to meet very stringent, stringent standards now called NIST and cmmc. So we would go in and build that foundation around NIST, it's a set of controls, that now gets the whole company from the top down on the same goal, and making sure that it's not just software, a very small portion of your cybersecurity is going to be software, it is that strategy from from the top down and it becomes part of the DNA of your company. And in no way like you said, should it lock your company down? It has to make common sense for the business.

08:52

And it's not static. It's an ongoing, continuous continuous it because if you think you're it, things change. Now, businesses change. If you're plopping this out there, you're doing whatever is necessary or you're trying to make your business more efficient. That has to be also in light of your cyber and your security strategy. Oh, that business? Yeah.

09:16

Yeah. And like I said, the way you manage your it is very important, because that is all the system updates and the different settings you have throughout your organization. That's a large part of your your cybersecurity Foundation. And from there, you start getting more technical on what are some things we can do to really make sure we lock these guys out. But I tell you what, as as you're looking to find that help for cybersecurity, and how do you tackle that, that giant beasts, the weight in gold for organizations like Systems X x is not. It's not, you know, getting, stopping the attack. It's when you get attacked, what happens after that? How quick can we take the little spark that little fire and hurry up and jump in, put that out, and then put the incident response plan in place. You know, when I talked to when I talked to CEOs, they say, Well, how do I even know if I'm secure? Well, most of them are getting the reports and things they understand. But I just say, hey, ask your IT support, whoever that is to hand you have an incident response plan. And if they can't hand you one in 10 minutes, you have a major problem.

10:25

That sounds Yeah, so let's let's sort of do a little roleplay. Here. I'm a I'm a small manufacturer, let's keep it small. How would you approach my business? Just generally speaking, that hey, get on in here, check it out. Please tell me tell me what we need to do.

10:43

Yeah. Having a business conversation, talking maybe less about the IT and more about what are the goals for the organization? What are some things they're trying to do moving forward? We're always taking that business strategy approach. I'll let you in on a little secret. I knew nothing about it. Three years ago, I came to Systems X X and said, Hey, look, I know, I know, business. I know, C level, I understand how their minds work. Why don't you teach me a little bit about it. So we can start making that connection? Because they're just sick of hearing it jargon constantly brought to them. Yeah, but really that question of how do you manage it? Do I have an IT department come in very expensive? Do I outsource all of it, we're finding right now. Get yourself that mid-level IT person, you know, and then outsource the heavy lifting, outsource the 24/7 monitoring the cybersecurity all the things that it's hard for that one person to do. But it's important to have that one person in your organization being able to take all the quick light work that needs to happen. And companies would should help that IT person grow within the company and understand how to also, you know, work as a team to make sure they're secure.

11:59

Do you? Do you have the conversation with the it? Yeah, where it's saying, Hey, don't be so it ash? You be a little bit more human and less cyborg? Like,

12:11

it's not in their DNA? You know, it's not, it's not what they want to do. But look, that's a fun conversation when I have the person and the CEO there. And they look at each other like, Oh, hey, yeah, you.

12:25

And then it's all acronyms on both sides. Don't get me wrong. It's on both sides.

12:29

Well, when I asked the question of, Hey, how is it supporting sales today? And they look at me like what? And so those are the types of questions we got to start having? How do we gain that competitive edge for you, you know, I talked to companies all time, especially your sea level, and I say, Look, you put your bid in and another company puts their bid, and I would be touting my cybersecurity posture from the mountaintop. And the reason is, it's going to shadow and put doubt on the company you're going against. Because look, whether it's DoD or its commercial, this is coming companies are asking for your cybersecurity possible policy, they're looking for your system security plan, they want to know that. So

13:09

before they do business, I had a conversation with somebody else on this, and they do island hopping. So if you have vendors, and they're connected to your system, because they want connectivity, if I'ma if I want my vendors to be able to transmit information, I gotta have them connected. So what happens is that they Island hop these these nefarious characters, and they'll try to penetrate the bigger company through those. And again, to your point, you're gonna have to have that conversation, I want you to be secure, right? Well, that's exactly

13:39

what's happening in the defensive supply chain. There is it's no coincidence that our F 35. There's the same f 35 sitting in in China right now, what they do is they grab that small mom car manufacturer that made just make a tiny part. And they ride that all the way to the top. And that's why now the primes are looking down saying, Look, no more. In order for us to give you a contract, you gotta meet these standards. And the government is not joking around anymore. I mean, these manufacturers have to get there. But then the next year.

14:11

It's reasonable. No, I mean, it just it and it's so funny. I struggle with companies talking about cyber, just companies like hey, what do you do? Well, we manufacture widgets. Tell me about your cyber Nope. Not going to talk about it. Yeah. And that conversation, it just, I understand the reality that you don't want to just, you know, air your dirty laundry and be able to do that. But I think at a minimum you need to have trusted individuals that you can have conversation and lock it down.

14:39

Yeah, even when you're attacked, even after your attack. Yeah, absolutely. I was. I was so happy to see here on stage. I don't know. I think it was the first day. The gentleman that THAT'S IT manager for Wilson tool. That that was an amazing story that they told and put their name out there to say Yeah, we were attacked. This is how we handled it. And I Yeah, I know I want. I was like, wow. But I tell you what, that's the important thing is you're telling the community what happened. It only secures all of us together.

15:11

See? And that's, we're getting there. You're getting there. I mean, I love this conversation. No, yeah. I know people get a hold on.

15:19

Yeah. So they can go to Systems X dash x.com They can actually reach me directly at 586-500-1001. And, look, I love having these conversations all day long. It's just a conversation

15:35

is Come on. Let's put our adult pants on. Yeah, let's have this conversation. Here you go. It's gonna be painless. Mike would greatly appreciate it. I like this. Thank you. A better person because of you. There you go. All right. Once again, we're broadcasting from FABTECH here in Atlanta, Georgia. Again, great people like Mike solving problems, and willing to have a conversation, we're gonna have all the contact information for Mike and his company out on industrial talk. Just go there and find his his conversation boom, connect, you will not be disappointed because he's gonna want to check with you. No obligation, right? No obligation

16:14

whatsoever.

16:16

When when all around? Absolutely. All right. All right, we're gonna be right back. So stay tuned.

16:22

You're listening to the industrial talk, Podcast Network.

16:27

All right, thank you, again, for joining industrial talk for your support, and your support, have an ever expanding industrial ecosystem of problem solvers. Like Mike, you're gonna go out to industrial talk, you're going to reach out to Mike Mike will definitely set you in the right direction. We need to be about protecting if you're in the digital transformation world, which you should be. And if you're saying this is what this is how we create a business that is resilient, which it does. And you need, you need Sherpas, you need professionals that you can trust, which is Mike, you need a security, you need a security, you need to do that. And you need to do it upfront. And it just, you just have to, yeah, there's no other way of getting around it. And because we want you to succeed, this platform is all about your success, and delivering the solutions and delivering the information and educating as much as we possibly can on how you industry can succeed. Now, again, reach out to me go out to industrial talk, you want to be on the podcast, yes, make it happen. You're going to be out in the bent, like conference or some other thing that you're going to be out and you're saying, Scott, I want to have you there. You just got to let me know. I would love to be able to read minds, but that's just not going to be the case. And I would be more than honored to be able to help you in your efforts to create that resilient industrial business. Alright. Industrial talk.com People will be brave. They are greatly hanging out with people like Mike, you're going to change the world. Thank you very much. We're gonna have another great conversation coming from FABTECH shortly so do not go away.

The post Mike Brattain with Systems X appeared first on Industrial Talk.

Industrial Talk is onsite at the OMG Quarterly Standards Meeting and speaking with Keao Caindec, CEO and Principal Analyst with Farallon Technology Group about cybersecurity and how it's crucial for industrial companies to protect themselves. With the increasing reliance on internet-based technologies, it's more important than ever to have conversations about cybersecurity and collaborate with others in the industry to stay secure. Tune in to hear more about the importance of cybersecurity in the industrial world.

Finally, get your exclusive free access to the Industrial Academy and a series on “Why You Need To Podcast” for Greater Success in 2023. All links designed for keeping you current in this rapidly changing Industrial Market. Learn! Grow! Enjoy!

KEAO CAINDEC'S CONTACT INFORMATION:

Personal LinkedIn: https://www.linkedin.com/in/kcaindec/

Company LinkedIn: https://www.linkedin.com/company/farallon-technology-group/

Company Website: https://www.farallontech.com/

PODCAST VIDEO:

THE STRATEGIC REASON “WHY YOU NEED TO PODCAST”:

OTHER GREAT INDUSTRIAL RESOURCES:

NEOM: https://www.neom.com/en-us

AI Dash: https://www.aidash.com/

Hitachi Vantara: https://www.hitachivantara.com/en-us/home.html

Industrial Marketing Solutions:  https://industrialtalk.com/industrial-marketing/

Industrial Academy: https://industrialtalk.com/industrial-academy/

Industrial Dojo: https://industrialtalk.com/industrial_dojo/

We the 15: https://www.wethe15.org/

YOUR INDUSTRIAL DIGITAL TOOLBOX:

LifterLMS: Get One Month Free for $1 – https://lifterlms.com/

Active Campaign: Active Campaign Link

Social Jukebox: https://www.socialjukebox.com/

Industrial Academy (One Month Free Access And One Free License For Future Industrial Leader):

Business Beatitude the Book

Do you desire a more joy-filled, deeply-enduring sense of accomplishment and success? Live your business the way you want to live with the BUSINESS BEATITUDES…The Bridge connecting sacrifice to success. YOU NEED THE BUSINESS BEATITUDES!

TAP INTO YOUR INDUSTRIAL SOUL, RESERVE YOUR COPY NOW! BE BOLD. BE BRAVE. DARE GREATLY AND CHANGE THE WORLD. GET THE BUSINESS BEATITUDES!

Reserve My Copy and My 25% Discount

PODCAST TRANSCRIPT:

SUMMARY KEYWORDS

security, industrial, industry, cybersecurity, document, conversation, device, technology, environments, companies, omg, brisket, collaborate, meeting, people, focused, absolutely, isf, best practices, embedded

00:04

Welcome to the industrial talk podcast with Scott Mackenzie. Scott is a passionate industry professional dedicated to transferring cutting edge industry focused innovations and trends while highlighting the men and women who keep the world moving. So put on your hard hat, grab your work boots, and let's go.

00:21

Alright, once again, thank you very much for joining industrial talk the number one industrial related podcast in the universe. Amazing. And it's called backed up by data.

00:30

Yes, it is. I read that report.

00:34

That was a good one. Well done, man. You just rolled right into it. You can tell he's great. All right. It is a platform dedicated to all industrial professionals around the world because you are bold, brave, you dare greatly you collaborate, you solve problems. You're making my life better. You're making the world a better place. That's what you're all about. Alright. Hey, hey, deck in the hot seat. Bear line? Is the company talking? Can I just say cyber cybersecurity? Absolutely. And then some around let's get cracking. It's a topic that needs more talking about. Absolutely, Scott, without a doubt, you having a good meeting? Just FYI, listeners, I said, I didn't know what to call it. But he said call it meeting. So I'm going to call it a meeting.

01:18

It's a great meeting. It's the Industry Internet Consortium is great group of people committed for a long time in helping industrial companies make sense of the internet internet-based technologies. And, and certainly cybersecurity is one of the most important things that we need to figure out and do well,

01:38

it needs to be it needs to be all of it. I mean, you got to have this conversation. I know everybody's interested in that, hey, how can I digitize my business? It's the right thing to think about. It's the right thing. But I find that there is a necessity to have more conversations around cybersecurity, you're gonna go down that road, got to have that conversation. And I think another area of real importance is where you're going to collaborate, because you don't have all the answers. And the OMG team, the body, the the organization and all of the participants. I'd say collaborate with them.

02:11

Absolutely. Absolutely. It's a great group, which is, you know, because they cover so many different areas, whether it's the digital twin group, part of OMG, the industry, internet. They they're covering a lot of great areas that are important that are overlapping.

02:29

Yeah, without a doubt, and I don't know, but you are here. I have to ask this. The name Farrell on technology group. Yes. What's the meaning behind that? Oh,

02:42

it's great Scot and so the Fairlawn islands are off the coast of San Francisco. Yeah, right. And the Fairlawn islands for for for years has been the breeding ground and for great white sharks. So over the years, it's been this place where seals birds have gone to roost and as a result, sharks come around. So when I formed Fairlawn years ago, more than 10 years ago, we decided to use the Fairlawn name because we felt that it was a great representation of the market, what's important security, and how, you know, you got to make a decision. Are you going to be a shark? Are you going to be a seal?

03:29

That's great, man. I knew it had a meeting. It was it's the ones that I say, hey, what does that mean? The URL URL is valuable. It's a mashing of words. And yeah, it's all good. All right, before we get into the conversation, give us the listeners a little 411 on who Keao is.

03:51

So I'm a longtime participant in the tech industry spent most of my career in telecommunications and networking cybersecurity. Fairlawn provides consulting to industrial companies and cybersecurity vendors. And our sweet spot is really helping companies to figure out what they should be doing to leverage embedded security, Industrial Security and and DevOps security which is really taking the technology down into the the more modern way of deploying and running applications

04:30

definition when we start talking about industrial security, embedded security define those please.

04:37

So unlike traditional security models, like things like firewalls or general enterprise monitoring, the industrial sector has a different environment. They have control systems and these control systems are running on equipment that control things like conveyor belts or pipelines and flow. They operate on oil rigs or in a food processing plant. But but they're typically a combination of old legacy equipment that's no longer supported, and also some modern robotics. So it takes a different way about thinking about security. And a different way of thinking about how you secure these things, all the way down into the core of the machine, which typically involves collaborating with silicon vendors, like Qualcomm and Intel, to secure everything down to the core.

05:47

And my challenge is always that in the world of cyber, in the world of what we're doing here, and the innovation that's taking place within industry, it's constantly changing. It's constantly evolving, you know, if you're one of many that come up with new use cases that you can apply, and then you got to create some, you know, whatever words around that and figure out how to protect that. And that's just a it's an amazing, what you guys do is, is amazing, it's just nothing short of amazing,

06:17

it is evolving at the same time. The majority of devices in industrial environments are more than 15 years old. So you have this big problem of, of, you know, the big headline of digital transformation and industry for Dotto are all great. But the reality is that companies need to advance but they also have this problem of they got a ton of old stuff that they need to protect.

06:49

So I had a conversation with FANUC. And they do the same thing. But from from a CNC perspective. So you have these embedded assets, these old assets, these old great machines, and then they can retrofit them to be more modern, but they still use it. And it's the same thing with you got these legacy embedded assets, that all you need to do is there's only Okay, let's let's tweak it, let's do it. Let's protect it. Let's you know, bring it up to today's standards. But anyway, so you're here at this meeting, the OMG meeting, I am queued for, did you go to q1?

07:24

I did. I went to 2123 and four curcumin,

07:28

I now hit the cycle.

07:31

It's and what a change from the first one where there were just a handful of us still trying to get used to the fact that you know, being close to humans again, to just being together. And last night. We had a great dinner with the team. It's just nice to be back

07:46

by the way. That was good. Yeah. That was it was quite the place. Yeah, it was great. It was a did you like the brisket.

07:54

I'm surprised I could stay awake walking home. I think I had so much brisket. Ribs is bad.

08:01

The competition here is stiff in the brisket. Because I somebody asked me You said, Hey, Scott, what brisket is better? I thought, well, how can you? It's all up here. I can't do it. I don't have that type of distinguishing palate of St. Right. Oh, okay. So smokers. Alright, so you're here at this meeting? And so what are you doing? What's

08:23

what's so I'm the, I'm the chairman of the security Working Group at the, at the IIC. So I work with a lot of great people, a lot of smart individuals with way more expertise than than me in a lot of interesting areas around security. So we work together to come up with guidance and help our membership to understand use cases that they care about around security. And, and we several times a year get together and face to face and make progress in a number of areas.

09:04

How does how does your organization how do you? How does your group handle the constantly changing environment out there? From a threat perspective from what's taking place? A we found something new over here, oh, here's some news that this wasn't good, whatever. And how do you when you bring it in? And you're saying okay, I hear you. This is how we're going to address it as an organization.

09:28

Right. You know, it's it's a constant battle, for example. We've just updated a big the, what we call the ISF, the industry, Internet of Things security framework, 150 Plus page document that goes through security and how to think about security within industrial environments. And it was originally published in 2016. And we're finally refreshing it, right so it's is taking a long time because it's been this constant challenge of trying to keep up and update it. But oh, we've got to add this other thing. Oh, we've got to add this other thing. Right. So that's updated now much more modern, which is terrific. And we hope we hope folks will take advantage of that. At the same time, we're shifting our our efforts to focus more on best practices, documents that are easier to consume that are focused on specific use cases that folks care about in in specific industries and technology use cases.

10:37

The document that you're I think you were talking about, is this the document will be finalized, I guess, for publication in the first part of January. That's right. And I can go to OMG. Say, Hey, I want to download it. That's right. There's my email address.

10:55

Well, you would go to AI Consortium. RG.

10:59

See, this is confusing, just FYI. Because it so I can I just have to know that I've got to go to ai consortium.org. Boom, find it. Download it.

11:12

Exactly. Yep.

11:14

So we have these, this document. It's up to date. I don't know how you guys. Because right when it gets published, right? There's new stuff that has to be included. There is

11:25

Yeah. But you know, this was some of the major updates to it had to do with just modernizing the way we think about computing. So originally, when this was written, we didn't include things like enough about cloud and cloud and environments or containers. IoT devices, were obviously in there. But we didn't get down to the level of depth of how all of those things work together. And so we modernized a lot of that language, we also spent a lot more time thinking about how we how we help companies to understand and how they could embed security into those devices and environments, how to onboard devices, how to manage device security, the data flows between different devices. So there's quite a bit that went into it. It's, it's, it took a long time, but I have to say it's a it's a great document and really valuable.

12:26

I see I truly can appreciate what you do, and others within IIC to truly ferret it out and create something of real value and benefit to the industrial community. I mean, cuz you guys, it's like, here's a point, but you guys debate it. And you bring in all of that knowledge that you guys all have from your work your business, and be able to hone that I just think it's a fabulous document. Now when we start talking about best practice, what does that mean? You said, Beck's best practice document or whatever? Like, Hi, I'm in manufacturing, I could just sort of pull that off of I consortium.org.

13:09

Yeah, exactly. We can you know that you can think of it as several documents that all work together. On the one hand, you have the industry, internet, reference architecture, kind of looking holistically at an overall architecture for for industrial technologies. And then you have the ISF that treat security and how you should think about security, the best practices, documents for security, focus on specific things like how should I think about endpoint IoT endpoint security? How do I think about device onboarding? And huge right, and, and, you know, how do I embed security onto a device that's, that's brand new that I'm creating, right? And organizations can figure that out on their own. But what this does is it provides them with a way to more quickly get started to, to do what they need to do. And to know that this is based on best practices.

14:10

See, it's always from what I hear is that it's always a people equation, because this is what happens out in the field. I want to digitize that asset. I got a device right there, right. I just bought this device. And they're making it so easy to sort of connect now. Right? Here's a magnet I just stick it on that motor, I'm good to go. But nobody, it despite a go. And this starts spitting data, right? Hey, check it out. Realize that that's could be compromised. Right. Exactly. And I love the fact that you do that. And that's just a change in the theory because,

14:48

well, you know, we're trying to make it easier for device manufacturers to do the right thing. Right. And oftentimes, they're so focused on delivering a product that does In a certain thing, they're focused more on the features, and the security gets bolted on later. Well, what the IIC is doing is creating, creating documents and guidance that just make it much easier for these developers, device developers, OEMs industrial operators, to just implement security the way it needs to be implemented to keep their operation, you bring

15:23

up a good point. And that point is one. It's not just me operations guy that recognizes the necessity. By the way, that guy was really kind and he's walking by real quietly. Anyway, that recognizes the necessity to secure the environment. And I want to do it right. That's one that's me, operations guy. But then you're also allowing for the developers of these devices that add value, but also be able to have that conversation. Hey, you got to bake it. And you got to do this. Yeah, there's some there's some best practices around that too.

16:00

Right. Right. It's a real ecosystem. It is play, right? Because you have the device manufacturers, you have the operators. And then you have all of the other participants within the ecosystem could be service providers. So for example, if you think about Evie, charging, right, everyone's got an electric car, let's say driving all over the place, right? Well, now you need to charge them. So how does that work, you have an Eevee charging station. Those Evie charging stations have purpose built. Filling, basically, you know, device to connect to your car, it's got all the technology inside, you have a service provider, that's going to be billing you for for for that, that power, for the recharge, and then you have the automobile manufacturers, and all of the technology within the automobile. So all of that has to work together from a security perspective. So that you know that the owner, the car, the the owner of the of that station, charging station, and the service provider, that is billing, you all can trust each other. Right? So that's, that's where documents like what we put together, help the industry to get there faster so that they can monetize whatever business they're trying to monetize, you

17:28

find possibly that the world is not getting the world is getting far more complex. Oh, yeah, it's just do you find people just saying I just there's no, I know that this is happening in manufacturing, where it's like, Hey, I gotta go down this road, if I want to make this manufacturing facility better, but I just don't I just not into it. It's just too complex. And it's, it's next level stuff. And then it's like the learning curve is upside down. And it's not even a curve, it's upside down. So there's like a high,

18:00

you know, I think people could, and it's kind of like, you know, some some sort of great story that's been written, right? Which is, okay, I'm just bouncing along, going along. And then something happens, oh, I've got to do this thing, right. But it becomes so complex. So the story ends up being about, okay, what do they do from that point? Do they say it's too complex and shy away? Or do they keep going? Or do they fix the problem? I think what what we see happening far too often is they don't shy away from the complexity, but they avoid it. Oh, that's interesting, right? They focus on, hey, let's just get it done. And let's make it work.

18:44

That's probably the conversation I would have. It's like, LP. Let me I'm at 30,000 feet and it looks like and needed to get it done.

18:51

Right. Exactly. So that's and when it comes to security. That is what we're trying to help avoid. We want to simplify it and make it easy so that more companies can adopt best practice.

19:04

I think you've just touched on something that if you if you can make it approachable, simple, you know, and I'm not I'm not expelling so much of my gray matter calories to try to figure it out. And I think that that's that's key, right? It's not a it's not a slap or slide on people but you guys are smart. And it's hard sometimes to bring it to my level where I can understand it and scratch my head and understand the noodle and

19:32

yeah, I mean, you know, when you get down into the weeds, it all becomes more more you have acronyms C of acronyms. But if you live in the sea, we're trying to make it just a little bit more bearable.

19:47

You never disappoint. So, how do people get a hold of you there? Yeah,

19:54

they can reach me at K cane det KCA i n d c At Fairlawn tech.com or just visit us at Farrell on tech.com.

20:05

I got his car here. So all of his contact information will be out on industrial talk because I like to backlink everything now. That's what I do.

20:13

So great. So great to see you again.

20:16

It was right I was so excited. There he is the legend just walked on by man so giddy with my life is so small because I have a lot of trading cards with your face and others. It's like y'all Yeah, kale. You know, that's my pathetic alright listeners. That's Keao reach out to him. Industrial talk is where his contact information of course, you're out there on LinkedIn.

20:42

Absolutely. Yeah. Up on LinkedIn. Yeah. Always a pleasure, Scott.

20:46

Always without a doubt. All right, listeners, we're gonna wrap it up on their side. Stay tuned, we will be right back.

20:52

You're listening to the industrial talk Podcast Network.

20:57

Always a pleasure to hang out with Keao out he brings the insights, he brings the skills mad skills around cybersecurity and insights and what in this digital transformation, you need to reach out to trusted individuals k out, definitely put that one up at the top of the list. Farallon is the company, his stat card out on industry or LinkedIn is absolutely spectacular, you will not be disappointed. I'm pointing at it right now. Now also, he mentioned up now a report a a standard that has been submitted particularly this, this month, go out to OMG find it, get more information. And the reality is, is that if you're in industry, industry, period, I don't care where you're at in industry, you need to be mindful of cybersecurity, that has to be up front and you need once again, connect with people ik out. I mean, it's so important because we want you to succeed, we don't want you to get frustrated, and what is being offered through paralon as well as OMG exceptional standards, a great place to start on your cyber security journey. All right, we're gonna have a lot more conversation coming from this, this meeting this OMG meeting, and I'm telling you, it's gonna blow your mind it again, I'm always dazzled by the conversations at these events. So thank you for joining. Thank you for your support. It's going to be a great year. We're going to be back. Hang tight. Another great conversation shortly.

The post Keao Caindec with Farallon Technology Group appeared first on Industrial Talk.