Skip to main content

Chad Lemaire

Chief Information Security Officer (CISO) at ExtraHop and retired U.S. Air Force Cyber Operations officer.

Oct 3, 2025

26:47
with
26:48
unique communication protocols.
26:51
Standard networks, we're all familiar with the standard networks, but when it comes to some of the industrial networks, you have to deal with unique communication protocols.
27:02
The other thing that we're seeing is an expanding attack surface within it.
27:06
uh environments are growing uh but we have an incomplete asset inventory and so all of those things together make it difficult to detect lateral movement uh throughout and then recently you know sans released a report saying that there's just a scarcity of ot security expertise out there so you combine it with a unique set of circumstances and individuals who aren't capable of of handling and doing security and that's where we end up and having that lack of visibility
28:40
What advice could you offer manufacturers in sort of trying to embrace a lot of the fact that it's not a standard approach, that it does take a little bit more customization, and really embrace that in order to have a better just network construction, I guess you could say, that's more security-friendly?
28:57
Yeah, I think one of the issues we deal with in the OT space is, unlike a traditional network where we may be able to have some downtime, right, that's coordinated, that makes it easier to get after improving your network security or network architecture.
29:15
It's extremely hard in the OT space to do that just based on what those systems are doing.
10:13
Sure.
10:14
So Colonel John Boyd came up with this concept called the OODA loop.
10:19
Observe, orient, decide, and act.
10:23
And, you know, within the military, the goal of that, your goal is to shrink that OODA loop, right? Make it as tight as possible so you get to your act portion before the adversary does.
10:36
I relate that same thing when it comes to cyber defense.
10:40
How do we shrink our OODA loop? And one of the things that's, in essence, thrown a wrench into it is AI.
10:48
And before I continue, let me say there really isn't a such thing as bad AI or good AI.

5 MINS LATER

16:09
What do you see as some of the things having the biggest impact down the road if we look a year, year and a half away?

We value your privacy

We use cookies to understand how you use our platform and to improve your experience. Click “Accept All” to consent, or “Decline non-essential” to opt out of non-essential cookies. Read our Privacy Policy.