Simply ICS Cyber podcast features veteran OT security experts Don and Tom, delivering practical insights on securing critical infrastructure and industrial automation systems. With episodes covering essential topics from ICS fundamentals to advanced security frameworks, our show reaches a dedicated audience of operators, security professionals, and decision-makers actively implementing industrial cybersecurity control solutions. Connect with your ideal customers through targeted sponsorships and ad placements.
Sam Blaney discusses the value of ICS and OT exercises, drawing from his experience coaching students at the Department of Energy CyberForce Competition in an interview with Don and Tom.
5 Nov 2025
S2 E7: ICS/OT Security Operations Centers
Hosts Don and Tom interview Dan Gunter, CEO of Insane Cyber, about the function of ICS/OT Security Operations Centers, relevant data for monitoring, and incident response, offering insights into building visibility and managing SOC fatigue.
22 Oct 2025
S2 E6: Keeping Up With ICS Threat Intelligence
Hosts Don and Tom interview Joe Slowik, a cyber threat intelligence expert, about the evolving landscape of industrial control systems and how teams can maintain resilience against emerging threats.
8 Oct 2025
S2 E5: Evolving Vendor and Integrator Cybersecurity in ICS/OT
OT Cybersecurity Lead Saltanat Mashirova discusses evolving cybersecurity vendor and integrator management within ICS/OT environments, highlighting strategic decisions impacting resilience and compliance in an interview with Don and Tom.
24 Sept 2025
S2 E4: Industrial Security Alongside a Warzone
President and CEO Patrick C. Miller of Ampyx Cyber discusses the challenges of defending industrial control systems in conflict environments with hosts Don C. Weber and Tom VanNorman in an interview.
Co-hosts Don C. Weber and Tom VanNorman interview maritime and energy cybersecurity expert Marco Ayala about defending critical infrastructure against evolving threats.
27 Aug 2025
S2 E2: Securing the Grid: Substation Security
Don C. Weber and Tom VanNorman interview Chris Sistrunk, a Technical Leader at Mandiant & Google Cloud Security, about modern threats and essential knowledge for substation security.
13 Aug 2025
S2 E1: Vulnerability Management and Feeds
Hosts Don Weber and Tom VanNorman interview Idaho National Labs Power Systems Engineer Dan Ricci about vulnerability management and feeds, offering insights into ICS cybersecurity.
14 May 2025
S1 E7: TSA Security Directives and OT
Don and Tom jump into the TSA Directives in this episode with their special guest Mike Holcomb, the Fellow of Cybersecurity and the ICS/OT Cybersecurity Global Lead for Fluor, one of the world’s largest engineering, procurement, and construction companies. He also founded the BSides ICS/OT and BSides Greenville cons.
In this episode, our expert guest helps us answer the questions below:
- What are TSA Directives?
- Where do we find them?
- Who do they apply to?
- How are sites checked?
Connect with Mike:
- Mike Holcomb LinkedIn: https://www.linkedin.com/in/mikeholcomb/
Learn more about BSides ICS/OT:
- BSides ICS/OT: https://www.bsidesics.org/
=========================
Join us every other Wednesday for Season 1 of the Simply ICS Cyber podcast, with your hosts, Don C. Weber and Tom VanNorman.
Connect with your hosts on LinkedIn:
- Don linkedin.com/in/cutaway (https://www.linkedin.com/in/cutaway)
- Tom linkedin.com/in/thomasvannorman (https://www.linkedin.com/in/thomasvannorman)
=========================
Simply Cyber empowers people who want a rewarding cybersecurity career
=========================
All the ways to connect with Simply Cyber (https://simplycyber.io/streams)
https://SimplyCyber.io/Socials (https://simplycyber.io/socials)
30 Apr 2025
S1 E6: ISA/IEC 62443 Cybersecurity Framework
In this episode of Simply ICS Cyber, Don and Tom interview their guest, Jim Gilsinn. Together they discuss the ISA/IEC 62443 Cybersecurity framework and answer the questions:
- What is ISA/IEC 62443 Series of Standards and how do they help?
- How do you get access to the ISA/IEC 62443 documents?
- How can you help improve the standards?
Connect with Jim Gilsinn on socials:
- Linked In: https://www.linkedin.com/in/jimgilsinn/ (https://www.linkedin.com/in/jimgilsinn/)
- X: https://x.com/JimGilsinn (https://x.com/JimGilsinn)
Learn more about the ISA/IEC 62443 Standards: https://www.isa.org/standards-and-publications/isa-standards/isa-iec-62443-series-of-standards
=========================
Join us every other Wednesday for Season 1 of the Simply ICS Cyber podcast, with your hosts, Don C. Weber and Tom VanNorman.
Connect with your hosts on LinkedIn:
- Don linkedin.com/in/cutaway (https://www.linkedin.com/in/cutaway)
- Tom linkedin.com/in/thomasvannorman (https://www.linkedin.com/in/thomasvannorman)
=========================
Simply Cyber empowers people who want a rewarding cybersecurity career
=========================
All the ways to connect with Simply Cyber (https://simplycyber.io/streams)
https://SimplyCyber.io/Socials (https://simplycyber.io/socials)
16 Apr 2025
S1 E5: Incident Response in ICS/OT/SCADA
How does Incident Response in ICS/OT/SCADA work? In this episode of Simply ICS Cyber, Don and Tom welcome Kai Thomsen, Director of Global Incident Response Services at Dragos.
Join us as we answer the questions below and provide more insight into how IR works in OCS, OT, and SCADA:
- Is DFIR the same on the OT side as the IT side?
- What are some of the challenges the OT DFIR team faces?
- In an organization, who is responsible for OT incident response?
- What are table tops, how should you conduct them?
- What are some table top exercises?
- How do you get into OT DFIR?
Discover the Dragos 2025 YIR Report: https://www.dragos.com/ot-cybersecurity-year-in-review
Connect with Kai on LinkedIn: https://www.linkedin.com/in/kai-thomsen-a635b21b7
Check out the Incident Response Table top resources below:
- CISA Tabletop Exercise Packages (CTEPs) (https://www.cisa.gov/sites/default/files/publications/CTEP%20Fact%20Sheet%20v.%2011%2016%202021%20FINAL.pdf)
- CISA ICS Training (https://www.cisa.gov/ics-training-available-through-cisa)
- Dean Parson’s ICS Incident Response Tabletops (https://www.sans.org/blog/top-5-ics-incident-response-tabletops-and-how-to-run-them/)
- Lenny Zeltser Cheat Sheets and Presentations (https://zeltser.com/cheat-sheets/)
- NERC’s Grid Security Exercise (GridEx) (https://www.nerc.com/pa/CI/ESISAC/Pages/GridEx.aspx)
- MITRE Cyber Exercise Playbook (https://www.blackhillsinfosec.com/projects/backdoorsandbreaches/)
- Black Hills Information Security (BHIS) Backdoors and Breaches ICS/OT Deck (https://spearphish-general-store.myshopify.com/collections/backdoors-breaches-incident-response-card-game/products/ics-ot-backdoors-breaches-core-deck-v1)
- Center for Internet Security, Tabletop Exercises – Six Scenarios to Help Prepare Your Cybersecurity Team (https://www.cisecurity.org/wp-content/uploads/2018/10/Six-tabletop-exercises-FINAL.pdf)
- Red Canary: Are You Using Tabletop Simulations to Improve Your Information Security Program? (https://redcanary.com/blog/using-tabletop-simulations-to-improve-information-security/)
- Dragos: Preparing for Industrial Cyber Response Tookit (https://www.dragos.com/blog/industry-news/preparing-for-industrial-cyber-response-what-to-have-in-your-incident-response-toolkit/)
- Dragos: Preparing for Incident Handling and Response in ICS (https://www.dragos.com/resource/preparing-for-incident-handling-and-response-in-ics/)
- Dragos Tabletop Exercise (https://www.dragos.com/tabletop-exercise/)
- ICS4ICS Incident Command System for Industrial Control Systems (https://www.ics4ics.org/)
- European Network for Cyber Security (ENCS) Red Team – Blue Team Training (https://encs.eu/training/red-team-blue-team-training/)
Join us every other Wednesday for Season 1 of the Simply ICS Cyber podcast, with your hosts, Don C. Weber and Tom VanNorman.
Connect with your hosts on LinkedIn:
- Don linkedin.com/in/cutaway (https://www.linkedin.com/in/cutaway)
- Tom linkedin.com/in/thomasvannorman (https://www.linkedin.com/in/thomasvannorman)
=========================
Simply Cyber empowers people who want a rewarding cybersecurity career
=========================
All the ways to connect with Simply Cyber (https://simplycyber.io/streams)
https://SimplyCyber.io/Socials (https://simplycyber.io/socials)
2 Apr 2025
S1 E4: What are the 5 ICS Cybersecurity Controls?
In this episode, Tom and Don host special guest Michael Hilken, Cyber Physical Engineer at Grimm. The trio review and discuss the Five ICS Cybersecurity Critical Controls.
Links from this episode:
- Michael Hilken: https://www.linkedin.com/in/michael-hilken/
(https://www.linkedin.com/in/michael-hilken/)- SANS Whitepaper on the The Five ICS Cybersecurity Critical Controls: https://www.sans.org/white-papers/five-ics-cybersecurity-critical-controls/ (https://www.sans.org/white-papers/five-ics-cybersecurity-critical-controls/)
- Dragos 2025 OT Cybersecurity Report - 8th Annual Year in Review: https://www.dragos.com/ot-cybersecurity-year-in-review/ (https://www.dragos.com/ot-cybersecurity-year-in-review/)
Join us every other Wednesday for Season 1 of the Simply ICS Cyber podcast, with your hosts, Don C. Weber and Tom VanNorman.
Connect with your hosts on LinkedIn:
- Don https://www.linkedin.com/in/cutaway (https://www.linkedin.com/in/cutaway)
- Tom https://www.linkedin.com/in/thomasvannorman (https://www.linkedin.com/in/thomasvannorman)
=========================
Simply Cyber empowers people who want a rewarding cybersecurity career
=========================
All the ways to connect with Simply Cyber (https://simplycyber.io/streams)
https://SimplyCyber.io/Socials (https://simplycyber.io/socials)
=========================
19 Mar 2025
S1 E3: Critical Infrastructure vs. Everything Else
In this episode of Simply ICS Cyber, Don and Tom interview Gus Serino, water sector expert and Owner at I&C Secure, Inc.
Listen in as we will answer the following questions:
- What is Critical Infrastructure?
- What are other types of Industrial and Automation?
- Is cybersecurity different between the two?
Links from this episode:
- Gus Serino LinkedIn: https://www.linkedin.com/in/gusserino/
- Instrumentation & Control Secure, Inc.: https://www.iandcsecure.com/
- S4Events - Water Sector Cyber Risk with Gus Serino: https://www.youtube.com/watch?v=ScigBpXIjgg
Join us every other Wednesday for Season 1 of the Simply ICS Cyber podcast, with your hosts, Don C. Weber and Tom VanNorman.
Connect with your hosts on LinkedIn:
- Don https://www.linkedin.com/in/cutaway (https://www.linkedin.com/in/cutaway)
- Tom https://www.linkedin.com/in/thomasvannorman (https://www.linkedin.com/in/thomasvannorman)
=========================
Simply Cyber empowers people who want a rewarding cybersecurity career
=========================
All the ways to connect with Simply Cyber (https://simplycyber.io/streams)
https://SimplyCyber.io/Socials (https://simplycyber.io/socials)
=========================
5 Mar 2025
S1 E2: How to get started in ICS, OT and SCADA
In episode 2 of Simply ICS Cyber, we answer the following questions for those interested in starting a career in ICS (industrial control systems), OT (operational technology):
- What is Capex vs Opex? And, why does it matter when getting a job?
- What is the compensation versus actual pay?
- What does the OT side consider as important skills?
- How are the rising FTE and consultant wages affecting winning ICS/OT work?
Links to learn more about ICS, OT, SCADA:
- ICS Village: https://www.icsvillage.com (https://www.icsvillage.com)
- Contact ICS Village: https://www.icsvillage.com/contact-us (https://www.icsvillage.com/contact-us)
- NICE Framework (Find OT in the Competency Areas): https://niccs.cisa.gov/workforce-development/nice-framework (https://niccs.cisa.gov/workforce-development/nice-framework)
- SANS ICS NICE: https://www.sans.org/nice-framework/industrial-control-systems (https://www.sans.org/nice-framework/industrial-control-systems)
Join us every other Wednesday for Season 1 of the Simply ICS Cyber podcast, with your hosts, Don C. Weber and Tom VanNorman.
Connect with your hosts on LinkedIn:
- Don https://www.linkedin.com/in/cutaway (https://www.linkedin.com/in/cutaway)
- Tom https://www.linkedin.com/in/thomasvannorman (https://www.linkedin.com/in/thomasvannorman)
=========================
Simply Cyber empowers people who want a rewarding cybersecurity career
=========================
All the ways to connect with Simply Cyber (https://simplycyber.io/streams)
https://SimplyCyber.io/Socials (https://simplycyber.io/socials)
=========================
19 Feb 2025
S1 E1: Intro to ICS, OT, and SCADA
Welcome to the first episode of Simply ICS Cyber! Tune in every other Wednesday for new episodes premiering at 9:30 AM ET.
Learn more about what to expect in this episode below:
- Who are Don and Tom?
- What are industrial and automation controls and why are they important?
- What are these terms? ICS, OT, 62443, countermeasures, PLC, DCS
- Why is cybersecurity different in OT versus IT?
Join us every other Wednesday for Season 1 of the Simply ICS Cyber podcast, with your hosts, Don C. Weber and Tom VanNorman.
Connect with your hosts on LinkedIn:
- Don https://www.linkedin.com/in/cutaway (https://www.linkedin.com/in/cutaway)
- Tom https://www.linkedin.com/in/thomasvannorman (https://www.linkedin.com/in/thomasvannorman)
=========================
Simply Cyber empowers people who want a rewarding cybersecurity career
=========================
All the ways to connect with Simply Cyber (https://simplycyber.io/streams)
https://SimplyCyber.io/Socials (https://simplycyber.io/socials)
=========================
Who has been a guest on Simply ICS Cyber
Names identified in recent episode analyses. Showing up to five guests.
Sam Blaney
Dan Gunter
Joe Slowik
Saltanat Mashirova
Patrick C Miller
Reach and audience
Public platform figures. Ratings count people who left a rating, not total listeners.
Spotify
5.0 / 5
2 ratings
Host of Simply ICS Cyber?
Claim your podcast to manage its listing and keep your show details accurate.
Pod Engine is an independent podcast discovery and analytics service and is not affiliated with or endorsed by this podcast. Artwork and show content belong to their owners. Full legal notice.
Explore this show Podcast research with Pod Engine
