15 - Managing Industrial Cybersecurity Challenges and Solutions with Gavin Dilworth
Unplugged: An IIoT PodcastShow Notes
In this weeks episode brought to you by Smithtek, we're joined by Gavin Dilworth, a leader in cybersecurity at Assessment Plus who provides valuable insights into protecting critical infrastructure from cyber attacks, the importance of the Purdue model, and the impact of sophisticated industrial malware.
Learn about cybersecurity standards like IEC 62443 and NIST CSF, and why effective risk management is crucial. This episode covers practical strategies for OT and IT collaboration, password management, and future trends involving AI and machine learning.
------
00:00 Introduction to Unplugged: An IIoT Podcast
00:30 Meet Gavin Dilworth: Cybersecurity Expert
01:41 Challenges of Adhering to IEC 62443
04:52 Alternative Frameworks: NIST CSF for Beginners
07:05 Importance of Cross-Departmental Collaboration
10:14 Cybersecurity Gaps Among Process Engineers
12:36 Real-World Vulnerabilities and Examples
15:42 The "When, Not If" Approach to Cybersecurity
18:29 Cybersecurity Trends in Different Regions
20:44 OT vs. IT: Shifting from Isolation to Connectivity
23:12 Evolution of the Purdue Model in Network Security
26:18 Understanding Public Key Infrastructure in OT
28:46 Challenges of Implementing Security Controls in OT
32:15 The Role of AI and ML in Cybersecurity
36:08 Importance of Resiliency and Redundancy
39:21 Real-World Attack Examples and Lessons Learned
42:37 Positive Changes and Ongoing Challenges in Cybersecurity
45:18 Engaging OT Engineers in Cybersecurity Processes
48:05 Practical Solutions for Improving Industrial Cybersecurity
51:26 Final Thoughts on Cybersecurity Best Practices
------------------------------- This Episode Is Brought To You By Smithtek.
Smithtek provides turn-key hardware and software for remote monitoring and control, supporting a wide range of industrial protocols and offering a web-based SCADA system. Designed and built in Perth, Western Australia, their solutions make asset management easy for industries like agriculture, mining, and automation, ensuring reliable and real time control.
Smithtek is committed to providing reliable, Australian-made solutions for remote asset management. Our systems are designed to be intuitive and adaptable, making integration with existing infrastructure straightforward. We prioritize simplicity in user experience, ensuring that our technology is accessible for all levels of technical expertise.
For more information, visit http://www.smithtek.com.au.
-----------------
Connect with Gavin on LinkedIn:
https://www.linkedin.com/in/gavin-dilworth/
Connect with Phil on LinkedIn:
https://www.linkedin.com/in/phil-seboa/
Connect with Ed on LinkedIn:
https://www.linkedin.com/in/ed-fuentes-2046121a/
About Industry Sage Media:
Industry Sage Media is your backstage pass to industry experts and the conversations that are shaping the future of the manufacturing industry.
Learn more at: http://www.industrysagemedia.com
More from Unplugged: An IIoT Podcast
This episode is brought to you by Canary Labs, and Cirrus Link Solutions.
This episode is brought to you by Cirrus Link Solutions and Canary Labs. Cirrus Link: https://unpluggediiot.com/go/cirrus-link Canary Labs: https://unpluggediiot.com/go/canary-labs
Phil Seboa and Ed Fuentes sit down with David Ariens (Analytics For Industry / AVEVA) and Willem van Lammeren (Syensqo) to explore why IT/OT convergence fails — and what organisations actually get right when convergence works.
What changes when the assets you operate stop being centralised and predictable, and start being distributed, intermittent and weather-dependent? The old operations playbook breaks — and most digital programmes are still designed for the old one. Dr Hema Wadhwa, Associate, Data & Analytics | Asset Management and Performance at Aurecon, joins Phil Seboa and Ed Fuentes to talk about building digital asset intelligence for the energy transition. Hema's career is a live map of that transition: she started as a Floating Systems Engineer in global oil and gas, moved through subsea engineering and power generation operations, and now leads digital strategy and analytics for mixed energy asset fleets. Key topics in this episode: - The unplanned career arc — floating production systems and subsea engineering into renewable operations - "Are you here to take my job?" — what digital transformation actually feels like from inside the control room - Why the solution providers have to evolve, not the operators - One gas turbine versus a hundred wind turbines: why renewable fleets break the old operations model - No standard across vendor SCADA screens and UIs, and what that inconsistency costs - Why there is no AI magic without the data groundwork first — and why selling it that way isn't ethical - Cognitive load: lean frontline teams, PDF report fatigue, and tools that land as a burden - OT/IT convergence and the cybersecurity questions that come with opening it up - OEM warranties and whether asset owners really have access to their own asset data - Recording data when it changes, not on a fixed scan rate - One source of truth, different views per role — data presented so it guides a decision - Predicting failures months ahead: cranes, spares, and turning downtime into planned work - BESS as a trading platform, not just another renewable asset - Why the real cost driver is people, and why it only stacks up if it scales across assets