Episode 20

full
Published on:

12th May 2025

Old systems, new dangers: OT pentests as the key to safe production

Boost your industrial cybersecurity knowledge with "Cybersecurity shall be C-level priority!" – the podcast where real-world threats meet hands-on solutions.

In this episode, host Nico Freitag welcomes Sebastian Froede, Managing Director of Pentaris Security GmbH, to talk about the realities of OT security and how penetration testing in industrial environments differs drastically from IT.

Sebastian brings over 12 years of field experience in OT pentesting and shares why tools like Nmap or Nessus can be dangerous in these contexts. They also discuss why the #1 priority in OT isn’t data – it's availability.

🛠 Topics covered in this episode:

✅ Legacy systems in production: How to deal with outdated yet critical infrastructure

✅ Remote access risks: Why TeamViewer is a popular but risky tool in OT

✅ Real-world attack paths: From spoofed sensor data to manipulated HMI displays

✅ Why Blackbox pentests don't work in OT – and what to do instead

✅ Best practices: Segmentation, protocol control, and safe access strategies

✅ Empowering OT teams: Why awareness and training are essential

✅ Incident response in OT: Why recovery matters more than forensics

✅ ESP32 and Flipper Zero: What's real and what's just fearmongering?

💡 Learn how to truly protect your production – from factory floor to control room.

____________________________________________

👤 More Information

Sebastian Froede - LinkedIn-Profile - Webpage

____________________________________________


🚨 This Podcast is translated from the original content Cybersecurity ist Chefsache using AI technology to make them accessible to a broader audience.  🚨

____________________________________________


🎧 Take a look!

🎙Podcast - Cybersecurity ist Chefsache: @cybersec_ist_chefsache

🎙Podcast - Cybersecurity shall be C-Level priority: @cybersec_clevel_priority

🎙Podcast - Die Zwei Auftrag: Cybersicherheit: @diezweicyber


Join us as we dive deeper into the world of digital security.


____________________________________________


You can find me on these social media channels:

📸 Instagram: cybersec_clevel_priority

🕺 TikTok: cybersec_clevel_priority

🤝 LinkedIn: nicowerner

📌 Getting in touch - Podcast: Cybersecurity shall be C-level priority


____________________________________________


Your journey into the world of cybersecurity starts here – I’m looking forward to connecting with you!

All Episodes Previous Episode

Listen for free

Show artwork for Cybersecurity shall be C-level priority

About the Podcast

Cybersecurity shall be C-level priority
Security begins with a click
The weekly podcast "Cybersecurity shall be C-level priority" serves as a platform where various experts from the world of digitalization and cybersecurity come together to discuss current topics, trends, and practical applications.

Host Nico Freitag invites friends, colleagues, or like-minded individuals from different industries to share their experiences and opinions, engaging in discussions on topics such as digitalization, cybersecurity, OT security, data protection, information security, and hands-on solutions.

This Podcast is translated from the original content Cybersecurity ist Chefsache using AI technology to make them accessible to a broader audience.

About your host

Profile picture for Nico Werner

Nico Werner

Moin! Ich bin Nico Werner, ein erfahrener Experte für Digitalisierung & Cybersecurity.
Seit meiner Kindheit begeistere ich mich für die Welt der Technologie und habe diese Leidenschaft durch meine Ausbildung zum Fachinformatiker vertieft. Besonders interessiert mich die Absicherung von OT-Systemen in industriellen Anlagen.

Seit 2012 habe ich in verschiedenen Firmen als Consultant, Projektleiter, Pre-Sales und im Management im Bereich Cybersecurity gearbeitet und wichtige Erfahrungen gesammelt.

Ich verfolge das Ziel, die Bedeutung der Cybersecurity den entscheidenden Stellen zu vermitteln und sicherzustellen, dass die Umsetzung und stetige Verbesserung dieser vorangetrieben wird. Dabei stehen für mich Menschen, Technologien, Prozesse und Organisationen im Mittelpunkt meiner Arbeit, um einen 360° Ansatz zu gewährleisten. Ich bin zusätzlich in diversen Gremien: UP KRITIS, VDI und IHK aktiv an der Verbesserung unserer Cybersicherheit beteiligt. Getreu meinem Motto "Cybersecurity ist Chefsache" bin ich davon überzeugt, dass die Absicherung von OT-Systemen von entscheidender Bedeutung ist. Ich unterstütze Unternehmen bei den Herausforderungen der Digitalisierung und helfe ihnen, ihre Organisationen, Prozesse und Technologien auf eine sichere Zukunft auszurichten.

---

Hello there! I'm Nico Werner, an experienced expert in Digitalization & Cybersecurity. Since my childhood, I've been passionate about the world of technology, and I have deepened this interest through my education as an IT specialist. I'm particularly fascinated by securing OT systems in industrial plants.

Since 2012, I have worked in various companies as a consultant, project manager, in pre-sales, and in cybersecurity management, gaining valuable experience along the way.

My goal is to convey the significance of cybersecurity to key stakeholders and ensure the continuous implementation and improvement of it. People, technologies, processes, and organizations take center stage in my work, aiming for a 360° approach. Additionally, I actively participate in various committees such as UP KRITIS, VDI, and IHK to contribute to the enhancement of our cybersecurity. True to my motto "Cybersecurity shall be C-Level Priority," I firmly believe in the critical importance of securing OT systems. I assist companies in facing the challenges of digitization, helping them align their organizations, processes, and technologies for a secure future.