ITRoundTable, Inc.

IT RoundTable, a 501(c)(3) nonprofit organization, is committed to advancing IT, OT, and AI Security through education and training.

[ITRoundTable, Inc. @ITRoundTable_co]

ITRoundTable is an excellent resource for #OTSecurity executives. We are a 501(c)(3) nonprofit organization committed to advancing Operational Technology (OT) Security, offering online roundtables and expert staffing. Please follow us here on X and visit our website at https://t.co/ODyRQVXToi. We will begin sharing valuable content shortly.

Video subject: Shanduojiao (SJ) Jiang https://t.co/K91l5lNCZG…

[ITRoundTable, Inc. @ITRoundTable_co]

Every vendor with remote access is part of your attack surface. Do you know exactly who can reach your OT network right now? #ThirdPartyRisk #ITRoundTable

[ITRoundTable, Inc. @ITRoundTable_co]

Cybersecurity Awareness Month isn't only for employees. For CISOs, it's a chance to reset how the board hears risk. What's on your agenda this October? #CybersecurityAwarenessMonth #ITRoundTable

[ITRoundTable, Inc. @ITRoundTable_co]

Holiday staffing gaps historically slow OT incident response. Peer executives are scheduling Q4 tabletop exercises now, not in December.

#ThreatIntelligence #OTSecurity #Q4Planning

[ITRoundTable, Inc. @ITRoundTable_co]

Zero trust in OT isn't a rip-and-replace. Peer executives are piloting identity-based segmentation instead of full overhauls.

#ZeroTrust #OTSecurity #ICSSecurity

[ITRoundTable, Inc. @ITRoundTable_co]

NERC CIP audits keep exposing documentation gaps, not technical ones. Quarterly mock audits are what peer executives recommend.

#NERCCIP #Compliance #OTSecurity

[ITRoundTable, Inc. @ITRoundTable_co]

OT security budgets win when they're tied to a specific downtime-cost scenario, not a general risk statement. Budget season is here.

#BudgetPlanning #OTSecurity #CyberRiskManagement

[ITRoundTable, Inc. @ITRoundTable_co]

Advisory volume has outpaced most teams' ability to triage. Exposure-based scoring is what peer executives are building to keep up.

#ICSCERT #ThreatIntelligence #OTSecurity

[ITRoundTable, Inc. @ITRoundTable_co]

@WallStreetApes The welfare state is at the root of this problem, along with the public education system that pushes moron-level individuals out the door as graduates.

[ITRoundTable, Inc. @ITRoundTable_co]

You can't secure what you can't see. Shadow devices added during maintenance windows remain the most common OT blind spot.

#AssetVisibility #OTSecurity #ICSSecurity

[ITRoundTable, Inc. @ITRoundTable_co]

Ransomware is still finding its way from IT into OT. Segmentation gaps are the pattern peer executives keep naming this quarter.

#OTSecurity #ICSSecurity #Ransomware

[ITRoundTable, Inc. @ITRoundTable_co]

Insider Threat Awareness Month is a good prompt: who still has standing access to your OT systems that shouldn't?

#InsiderThreat #OTSecurity #AccessManagement

[ITRoundTable, Inc. @ITRoundTable_co]

Segmentation tops every OT security checklist and every stalled project list. Legacy equipment and uptime pressure are the usual blockers.

#NetworkSegmentation #OTSecurity #ICSSecurity

[ITRoundTable, Inc. @ITRoundTable_co]

Boards think in dollars, not CVEs. The executives closing this gap are translating OT risk into production-loss numbers.

#BoardGovernance #OTSecurity #CyberRiskManagement

[ITRoundTable, Inc. @ITRoundTable_co]

Ransomware is still moving from IT into OT. Segmentation gaps are the pattern peer executives keep naming this quarter.

#OTSecurity #ICSSecurity #Ransomware

[ITRoundTable, Inc. @ITRoundTable_co]

Vendor-free rooms full of peer CISOs solving the same OT problems you are- that's what September's roundtables look like.

#ITRoundTable #OTSecurity

[ITRoundTable, Inc. @ITRoundTable_co]

IEC 62443 compliance and IEC 62443 security are not the same thing. One gets you an audit pass. The other gets you resilience.

#IEC62443 #OTSecurity

[ITRoundTable, Inc. @ITRoundTable_co]

IT/OT convergence is expanding the attack surface faster than most teams can monitor it. Ransomware groups have noticed. Have you?

#OTSecurity #ICS #CyberSecurity

[ITRoundTable, Inc. @ITRoundTable_co]

A certified component doesn't mean a secure system.

Gaps show up at integration—default configs, open ports, and nothing hardened post-deployment.

#IEC62443 #OTSecurity

[ITRoundTable, Inc. @ITRoundTable_co]

Boards don't want CVE counts. They want to know what an OT incident does to production, revenue, and reputation in one slide.

#Leadership #OTSecurity

[ITRoundTable, Inc. @ITRoundTable_co]

NIS2 enforcement is here. Most industrial firms still can't produce a real-time OT asset inventory when regulators ask. That gap is the real story.

#NIS2 #OTSecurity