OT After Hours

About OT After Hours

OT After Hours, a podcast about operational technology security, brings you candid conversations with ICS engineers and experts who get the unique challenges you face. Join us for unfiltered stories and advice from the front lines of industrial cybersecurity as we share best practices, lessons learned, and a few laughs along the way.

Publisher

Rockwell Automation

Category

technology

Language

en

Explicit

No

First episode

14 May 2024

Latest episode

16 Sept 2026

Latest episodes

29 episodes in the feed.

1. 

   16 Sept 2026

   The EU CRA and OEMs

   How can industrial device OEMs comply with the new EU CRA and its requirements for digital devices sent to the European market? In this episode of OT After Hours, Ken Kully (Delivery Readiness at Rockwell Automation) is joined by Lance Lamont (Special Projects & Protocols Team Lead at Rockwell Automation), Tyler Bergman (Principal Security Consultant at Rockwell Automation), Zach Woltjer (Technical Account Manager), and by special guests Maria Else (Global Product Manager for Industrial Cybersecurity) and Stefan Turi (EMEA Cybersecurity Lead for OEMs) to discuss the EU Cyber Resilience Act (CRA), its implications for industrial device original equipment manufacturers (OEMs), and how the SecureOT™ solution suite can help drive both compliance and security in response. Key Takeaways EU Cyber Resilience Act Scope: The CRA applies broadly to products with digital elements placed on the EU market, including industrial machines. These responsibilities extend across manufacturers, OEMs, system integrators, importers, distributors, and end users. OEM Compliance And Product Lifecycle: CRA obligations include having a secure-by-design processes, vulnerability handling, documentation, risk analysis, and support throughout the product lifecycle. OEMs must establish repeatable processes rather than simply purchase security technology. Asset Inventory And Vulnerability Traceability: Under the CRA, maintaining a durable record of shipped equipment, its configuration, ownership, location, and software or firmware versions so OEMs can identify affected customers and respond to newly disclosed vulnerabilities across their installed base. Vulnerability Remediation And Patching: Vulnerability findings should be prioritized and remediated without disrupting industrial production, including update limitations for embedded devices, vendor dependencies, maintenance windows, and the need for tested procedures. Digital Twins And Security Validation: Digital twins can be used to model manufacturing lines and test patches before deployment. Rockwell's Emulate3D and associated consulting capabilities provide a solution for validating dependencies and developing secure operational procedures. Cybersecurity Governance And Safety: CRA compliance requires sustained organizational ownership and collaboration, while cybersecurity must be treated as part of machine safety because exploitation can affect operators, equipment, production, and the surrounding environment. Subscribe Follow and subscribe (https://otafterhours.libsyn.com/) for more episodes on Apple Podcasts, Spotify, YouTube, or wherever you get your podcasts. Get in Touch 🔗 LinkedIn | YouTube (https://www.youtube.com/@secure-ot) | X (https://www.youtube.com/@secure-ot/) | Contact Us (https://otafterhours.libsyn.com/contact)

2. 

   22 Jul 2026

   Device Hardening in OT Systems

   What are the risks of hardening an OT environment? Are there practical hardening steps that are safe to take? In this episode of OT After Hours, Ken Kully (Delivery Readiness at Rockwell Automation) is joined by Lance Lamont (Special Projects & Protocols Team Lead at Rockwell Automation), Tyler Bergman (Principal Security Consultant at Rockwell Automation), and Zach Woltjer (Technical Account Manager) to discuss the risks of implementing different hardening strategies and standards within OT environments. This discussion was inspired by Lee Carter's article: Device Hardening in OT: How Far Can You Go Before You Break the Plant? Key Takeaways Operational Technology (OT) Device Hardening Challenges: What are the complexities and risks of hardening OT devices? The team discuss real-world experiences of balancing security improvements with operational stability in industrial environments. Importance of Institutional Knowledge in OT Cybersecurity: It's an absolute necessity for OT cybersecurity practitioners to possess deep institutional and operational knowledge, enabling them to communicate effectively with plant personnel and make informed decisions about security interventions. Identifying and Protecting Critical Assets: What are some strategies for identifying the most critical assets in OT environments, often referred to as 'crown jewels,' and the importance of prioritizing their protection to minimize business risk. Practical Guidance for OT Hardening: Actionable advice for OT hardening, emphasizing the need to understand the environment, start with basic controls, and avoid changes that could disrupt operations or exceed the organization's risk appetite. Subscribe Follow and subscribe (https://otafterhours.libsyn.com/) for more episodes on Apple Podcasts, Spotify, YouTube, or wherever you get your podcasts. Get in Touch 🔗 LinkedIn | YouTube (https://www.youtube.com/@secure-ot) | X (https://www.youtube.com/@secure-ot/) | Contact Us (https://otafterhours.libsyn.com/contact)

3. 

   20 May 2026

   Human Factors and Plant Relationships

   Important note: this episode is part two of of a discussion that began last week on the Industrial Cybersecurity Insider podcast. Before you listen, check out that episode...or watch it on YouTube! In this episode of OT After Hours, Ken Kully (Delivery Readiness at Rockwell Automation) is joined by Dino Busalachi (Director at BW Design Group), Lance Lamont (Special Projects & Protocols Team Lead at Rockwell Automation), and Tyler Bergman (Principal Security Consultant at Rockwell Automation) to discuss the technical challenges of OT cybersecurity, and the importance of the human element in any plant-facing cybersecurity strategy. Key Takeaways IT and OT Convergence Challenges: There continue to be persistent challenges and risks associated with IT and OT convergence in industrial environments, including differences in priorities, operational risks, and barriers to collaboration and domain knowledge transfer. Human Factors and Plant Relationships: Don't underestimate the importance of building trust and relationships with plant personnel, such as electricians and operators, to gain access to critical knowledge and ensure successful cybersecurity and maintenance initiatives. Technical Complexities in Industrial Environments: The discussion includes multiple real-world examples illustrating the technical complexities and legacy challenges in industrial environments, including outdated systems, undocumented network configurations, and the risks of human error. Best Practices for IT Managers Transitioning to OT: Actionable advice for IT managers tasked with taking over OT maintenance, stressing the importance of relationship-building, asset inventory, and understanding plant-specific constraints and maintenance windows. Training, Safety, and Cyber Hygiene Integration: Can cybersecurity practices be integrated into existing plant safety programs? Would it be effective to adopt 'digital safety' protocols and ongoing training to address both operational and cyber risks? Subscribe Follow and subscribe (https://otafterhours.libsyn.com/) for more episodes on Apple Podcasts, Spotify, YouTube, or wherever you get your podcasts. Get in Touch 🔗 LinkedIn | YouTube (https://www.youtube.com/@secure-ot) | X (https://www.youtube.com/@secure-ot/) | Contact Us (https://otafterhours.libsyn.com/contact)

Who has been a guest on OT After Hours

Names identified in recent episode analyses. Showing up to five guests.

• Dustin Gogue
• Andrew Wintermyer
• Zach Woltjer
• Natalie Kalinowski
• Tyler Bergman

Reach and audience

Public platform figures. Ratings count people who left a rating, not total listeners.

YouTube views

770,111

Score snapshot 15 Sept 2025

Apple Podcasts (US)

5.0 / 5

1 ratings

Spotify

5.0 / 5

1 ratings

Podcast Authority Score: 47 / 100

A composite of feed quality, social presence, YouTube performance and engagement. Read the methodology.

Quality

49

Social presence

0

YouTube

82

Engagement

32

Contact OT After Hours

Guest appearances

Does not typically book guests

Based on episode analysis; this does not confirm that the show is currently accepting guests.

Questions about OT After Hours