Overview:
Information Technology (IT) and Operational Technology (OT) are converging faster than most security and compliance programs are prepared for, and the risk models built for traditional IT don't map cleanly onto operational environments. In OT, availability and safety outrank confidentiality, legacy protocols often lack basic authentication, and a missed patch window can halt a production line rather than simply create inconvenience. This session speaks to both the security practitioner defending and monitoring converged environments and the compliance professional assessing and governing them.
We'll cover how IT frameworks and control language need translation, not abandonment, when applied to OT; the priority inversion in OT's risk ordering and its impact on defense design and audit findings; how OT risk assessment differs from IT in scope, process, and stakeholder involvement; how security testing can be tailored to OT assets and risks; common convergence points where segmentation typically fails; and practical steps for building OT security into an existing program.
Speaker BIO:
Derek Boczenowski is SVP of Compliance & Risk with Compass IT Compliance. Derek has over 20 years of IT experience in a variety of vertical markets, including financial services, higher education, and state/local government. Prior to joining Compass IT Compliance, Derek was the VP of Technology for a credit union in Massachusetts with approximately $700M in assets under management. With an MBA in Technology Management as well as industry leading certifications, such as being a Certified Information Systems Auditor (CISA), Qualified Security Assessor (QSA), Certified Information Security Manager (CISM), and Certified Data Privacy Solutions Engineer (CDPSE), Derek works with clients of all sizes and in all vertical markets to help them identify gaps in their IT security strategies and provide relevant, attainable solutions to ultimately mitigate their overall risk. Derek has spoken at numerous conferences throughout his career, including the Fiserv national conference and New York Banker’s Association Annual Meeting, and is recognized as a thought leader in the field of information technology and information security.
Jesse Roberts is SVP of Cybersecurity with Compass Cyber Guard. Jesse Roberts is an information technology & cybersecurity professional with over 25 years of experience in the field. He is a former professor of Network Engineering & Cyber Security at the New England Institute of Technology. Jesse holds multiple industry level certifications & has been invited to speak at events across the country. His presentations often include real-time live hacking demonstrations. He has also mentored students at various local schools and colleges through cybersecurity clubs over the years. In his role with Compass Cyber Guard, Jesse leads the organization's IT Security, Digital Forensics, and Incident Response teams. He is responsible for implementing innovative techniques and strategies to drive growth and improvement in these areas.