Trust But Verify: Why Every Air-Gap Claim Deserves Scrutiny

This week we're bringing back one of our most requested episodes, because the problem it covers hasn't gone away.

Dino and Jim break down one of the most dangerous assumptions in industrial security: that OT environments are air-gapped and therefore safe.

Through real examples from actual plant floors, they show exactly how that assumption falls apart, from cellular modems inside machine centers to third-party technicians on guest Wi-Fi to VPN concentrators IT doesn't know exist, and explain why the gap between IT and OT teams is just as much an organizational problem as a technical one.

They also get into why point-in-time assessments aren't enough, where zero trust runs into its limits in industrial settings, and what continuous visibility on the plant floor actually looks like. If you're responsible for securing manufacturing or critical infrastructure, this one is as relevant today as when it was first recorded.

Chapters:

• (00:00:00) - The Air Gap Myth: Introduction
• (00:03:00) - How OT Devices End Up Connected Without IT Knowing
• (00:07:00) - Why Plant Managers Bypass IT Security
• (00:12:00) - The Compliance and Insurance Stakes
• (00:15:00) - Why Zero Trust Struggles in OT Environments
• (00:17:00) - Bringing in Outside Experts to Find the Truth
• (00:20:00) - Supply Chain and Hidden Connectivity
• (00:24:00) - What Visibility Tools Reveal on the Plant Floor
• (00:26:00) - Wrap-Up: Trust But Verify, Then Monitor Continuously

Links And Resources:

• Want to Sponsor an episode or be a Guest? Reach out here.
• Industrial Cybersecurity Insider on LinkedIn
• Cybersecurity & Digital Safety on LinkedIn
• BW Design Group Cybersecurity
• Dino Busalachi on LinkedIn
• Craig Duckworth on LinkedIn

Thanks so much for joining us this week. Want to subscribe to Industrial Cybersecurity Insider? Have some feedback you’d like to share? Connect with us on Spotify, Apple Podcasts, and YouTube to leave us a review!