S2 E7: ICS/OT Security Operations Centers

S2 E7: ICS/OT Security Operations Centers

From Simply ICS Cyber by Simply Cyber Media Group

November 5, 2025 · 26 min · Episode 14

About this episode

The episode discusses the implementation and functioning of ICS/OT Security Operations Centers in various industrial environments.

The growing need for visibility and response in industrial environments is driving more organizations to consider ICS/OT Security Operations Centers — but what does that actually look like for small and medium-sized operations? In this episode of Simply ICS Cyber, Don and Tom sit down with Dan Gunter, CEO and founder of Insane Cyber, to discuss how ICS/OT SOCs function, what data truly matters for monitoring, and how incident response changes when operators have (or don’t have) the right information at hand. Drawing on experience from the Air Force CERT to founding an OT-focused security company, Dan shares a practical look at the realities of SOC implementation across industries — from utilities with limited staff to large-scale enterprises managing thousands of assets. Listeners will gain insight into how to start building visibility, selecting the right MSSP partners, and managing SOC fatigue — all while keeping industrial operations safe and resilient. ⚙️ Tune in to learn how data, process, and people come together to make ICS/OT SOCs work in the real world. Connect with Dan on LinkedIn: https://www.linkedin.com/in/dan-gunter 👉 Subscribe to Simply ICS Cyber for more…

People in this episode

Hosts: Don, Tom

Guest: Dan Gunter

Topics covered

  • ICS Security
  • OT Security
  • Security Operations Centers
  • Incident Response
  • Industrial Operations

Keywords

  • ICS
  • OT
  • Security Operations Center
  • Incident Response
  • MSSP
  • Visibility
  • Cyber Security

Mentioned in this episode

Organizations: Insane Cyber, Air Force CERT, ICS Village

More episodes of Simply ICS Cyber

Explore listener stats, chart rankings, contacts and more on the Simply ICS Cyber podcast page.