OT Cybersecurity Trends for 2025 | OT After Hours, An OT Security Podcast

Verve is now Rockwell Automation SecureOT


In this episode, we delve into the pressing challenges and exciting opportunities in OT cybersecurity as we look toward 2025. Join host Ken Kully, Cyber Tech Lead at Verve Industrial, and his guests Natalie Kalinowski, Tyler Bergman, and Zach Woltjer as they share insights on industry trends, compliance requirements, and the evolving role of AI in securing operational environments.



Key Takeaways:

Hybrid Workforces and Device Risks: Personal and work devices in operational environments pose security risks, requiring stronger BYOD policies.

Regulatory Compliance: Evolving regulations, like NIST and NIS2, drive cybersecurity adoption but lag in addressing sectors like water infrastructure.

AI in Cybersecurity: AI enhances detection, patching, and gap analysis, but foundational security issues must be addressed first.

Dynamic Detection: AI and machine learning are replacing outdated static rules for real-time anomaly detection.

Zero Trust Architecture: The shift to identity- and access-based security is accelerating, especially in hybrid workforce scenarios.

Legacy Device Security: Secure proxies and similar tools help protect aging OT devices, but challenges with latency persist.

Monitoring Approaches: Continuous monitoring offers immediate insights but increases network load, while scheduled checks provide stability but risk delays.

Third-Party Risks: Organizations are diversifying security tools and assessing vendor practices to reduce supply chain vulnerabilities.

Timestamps:

0:00 – Introduction

02:15 – Guest introductions

06:10 – The water industry as a critical infrastructure concern

12:36 – Predictions for OT cybersecurity trends in 2025

20:17 – AI in OT cybersecurity: workforce gaps and anomaly detection

30:12 – The shift from static rules to advanced detection techniques

33:01 – Zero trust architecture: buzzword or paradigm shift?

47:39 – Continuous vs. scheduled monitoring in OT environments

55:03 – Protecting legacy devices in operational technology

1:08:08 – Final thoughts: hybrid work risks, compliance, and AI in 2025



Guest Information:

Natalie Kalinowski: Cyber Technology Consultant at Rockwell Automation and Verve, with a background as a network engineer working in diverse operational environments, from food and beverage to natural gas.

Tyler Bergman: Cyber Operations Manager at Verve, bringing over 20 years of experience in utility and energy industries with a focus on IT/OT integration.

Zach Woltjer: Cyber Data Analyst at Verve with a passion for simplifying complex cybersecurity challenges for industrial clients.