Olúwaséyi Òjó Ph.D., CEng, ITBMC.

Among the direct impacts of this data breach are the moral impact on CISOs and cybersecurity stakeholders, the consequences on the security of information systems, and the opportunities it creates for third parties to sell more services and products — following the CNSS incident.

15

3 Comments

Legacy systems, such as end-of-life software and obsolete but still critical operational technology (OT), create cybersecurity risks that need to be mitigated or addressed through modernization. Ayo Akinsanya, CISSP, CC, shares his personal perspective on addressing this challenge: https://ow.ly/QNM950WJzWy

49

14 Comments

Zero Trust Is Not a Product, Zero Trust is often misunderstood as a technology purchase. In reality, it is an architectural philosophy. Successful implementation requires: • Identity-first strategy • Segmented OT & IT environments • Continuous validation • Strong governance alignment In complex manufacturing and retail ecosystems, Zero Trust must be contextual — not theoretical. It’s not about “never trust.” It’s about “always verify, intelligently.” Where is your Zero Trust journey today — strategy, pilot, or measurable execution? #ZeroTrust #IdentitySecurity #OTSecurity #EnterpriseSecurity #CISOInsights

28

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) and partners published on Wednesday a resource that helps OT (operational technology) system owners and operators strengthen infrastructure security by creating a clear inventory and classification of their assets.

23

This morning at Detroit Metro (DTW), Delta operations at the McNamara Terminal experienced a reported “network outage,” resulting in a ground stop and delays. Currently, there is no confirmed public statement indicating that this incident is a cyberattack or data breach. An important point for leadership to remember is that while services can be outsourced, accountability cannot. There is often a narrative that points to a third party as the cause—be it a vendor, an upstream dependency, or issues with internet infrastructure. However, the more pressing concern is internal: - Why doesn’t the operation degrade gracefully? - Where are the tested failovers and “break-glass” runbooks? - Why does one failure mode halt all activities at a terminal? - Who is responsible for the end-to-end service, both on paper and in practice? This is where ITIL discipline becomes crucial—not the superficial version, but real change control, clear service ownership, dependency mapping, resilience testing, and incident/problem management that leads to measurable improvements. Vendors may not fully understand legacy environments as you do. Weak governance can lead to repeated outages—different triggers, but the same outcome. Many have learned this lesson in enterprise outsourcing over the years. If Delta aims for “second time’s a charm,” the solution is straightforward: take ownership, engineer for failure, and demonstrate that testing has been conducted. #ITIL #OperationalResilience #ChangeManagement #IncidentManagement #ThirdPartyRisk #CIO #CISO #DTW #Delta

25

2 Comments

Dragos, Inc. is estimating that OT Disruptions Could Cost $330B Globally. I had the chance to weigh in on the importance of having the right visibility when handling OT data (or really any data). Security Magazine

6

1 Comment

🔐 Security programs don’t fail due to a lack of alerts — they fail when decisions get buried in noise. High-performing CISOs don’t chase every signal. They triage risk like surgeons — with clarity, intent, and speed. The real question isn’t what happened, but: 👉 What demands attention 👉 What runs itself 👉 What can be parked This clarity doesn’t come from more tools — it comes from a decision model aligned with business pressure. 🚨 Most teams escalate what’s loud. 🏛️ Mature teams escalate what can move the boardroom. While many chase false positives, top CISOs build triage layers that cut through clutter and expose real exposure paths. 🔍 High-functioning security teams do three things better: Link alerts to asset criticality — not just severity Escalate based on crown jewel impact — not noise frequency Automate only when reliability, context, and closure are guaranteed What you automate, defer, and escalate defines your operational maturity. #CyberSecurity #CISO #RiskManagement #SecurityLeadership #OperationalExcellence #ThreatIntelligence #DecisionMaking #SecurityStrategy

43

5 Comments

It was an honor to discuss the critical importance of #cybersecurity at the NYSE hosted by Cheddar. With threats from nation-state actors on the rise, geopolitical tensions and active conflicts in Eastern Europe and in the Middle East, I outlined five essential steps organizations must take to protect themselves. 1. Know your adversary with a robust threat intelligence program! 2. Build an enduring threat hunting capability looking for the bad guys! 3. Train your employees on cybersecurity…. Full stop! 4. Test,Test and Test! 5. Know your assets! You can’t protect what you can’t see and if you can’t see it you probably don’t know you have it on your network!

157

14 Comments

💡 On Nexus, experts weigh in on the recent Cybersecurity and Infrastructure Security Agency (CISA) guidance aimed at addressing the risks associated with the convergence of OT/IT in modern #industrial organizations. CISA recommends enhanced asset inventories and taxonomies as foundational #cybersecurity pieces of an #OTsecurity program. https://hubs.li/Q03GyC6J0

24