In this episode of Data Security Decoded, Cybersecurity veteran Dawn Cappelli joins host Caleb Tolin to unpack the rapidly evolving threat landscape facing operational technology environments. With decades of experience spanning CERT, Rockwell Automation, and now Dragos, Dawn breaks down how geopolitical conflicts, empowered hacktivists, and ransomware are reshaping OT risk. She shares the five critical ICS controls every organization should prioritize and discusses why community-driven defense models are now essential for resilience. A must-listen for leaders responsible for critical infrastructure, manufacturing, and industrial cybersecurity.

What you'll learn:

• How global conflicts have dissolved previous norms that protected critical infrastructure from cyber retaliation.
• Why hacktivist groups are becoming more dangerous — and how state actors quietly support them.
• The five highest-impact ICS security controls and where most organizations fail.
• Why OT environments remain decades behind IT security — and what leaders must immediately address.
• How ransomware operators target manufacturing and critical infrastructure for maximum leverage.
• The risks of insecure remote access and unmanaged third-party connections.
• How OT-CERT and community defense can uplift organizations with limited resources.
   

Episode Highlights:

• Caleb introduces Dawn and frames her decades of OT and insider threat leadership.
• How nuclear engineering, the CDC bioterrorism portal, and 9/11 sparked her cybersecurity mission.
• Inside the origin story and its impact on insider risk theory.
• Why insider sabotage in OT environments was a turning point in her career.
• How Russia–Ukraine changed everything about attacking critical infrastructure.
• Why groups like Cyber Avengers now have real disruption capability.
• Dawn breaks down the controls that prevent and detect most attacks.
• Why manufacturing is a prime target and how attacks are evolving.
• Why autonomous agents could cause catastrophic outcomes.
• How Dragos is empowering organizations worldwide with practical support.
   

Episode Resources:

• Information on OT-CERT: OT-CERT
• Register for OT-CERT: Register for Dragos OT-CERT | Dragos
• Information on Community Defense Program: Community Defense Program | Dragos
• Register for Community Defense Program: Register for Dragos Community Defense Program | Dragos
• SANS Five ICS Cybersecurity Critical Controls: The Five ICS Cybersecurity Critical Controls