WeAreDevelopers Logo WeAreDevelopers
Sign in
For You LIVE
WeAreDevelopers LIVE • Apr 27, 2023

What makes Cybersecurity different for critical infrastructure?

Kurt Eder

Enterprise IT is replaced quickly. Grid hardware must survive decades against state-sponsored hackers. Discover why protecting critical infrastructure demands an entirely different playbook.

Pause
Mute Enter Fullscreen
#1 about 3 min

Providing essential utility services for the city

Stadtwerke München operates critical infrastructure spanning energy, water, and mobility to support daily urban life.

#2 about 6 min

Acceptable downtime in critical infrastructure operations

Different utility sectors tolerate cyberattack-induced downtimes differently, with electricity requiring immediate recovery.

#3 about 7 min

The professionalization of modern cyber criminal groups

Cyber threats have evolved from individual hackers to highly organized, state-sponsored cyber operations.

#4 about 3 min

The convergence of IT and OT attacks

Real-world examples demonstrate how attackers exploit traditional IT networks to compromise operational technology grids.

#5 about 13 min

Security challenges of long OT equipment lifecycles

Operational technology often relies on decades-old hardware lacking modern encryption and access controls.

#6 about 6 min

Navigating new cybersecurity compliance frameworks and laws

Infrastructure operators must comply with fast-emerging regulations like ISO 27000, IEC 62443, and the Cyber Resilience Act.

#7 about 8 min

Partnering with hardware vendors on system security

Operators demand transparent communication from equipment manufacturers to quickly patch vulnerabilities and maintain grid stability.

#8 about 5 min

Prioritizing employee awareness and business continuity planning

Organizations must prepare for successful breaches by establishing manual fallback procedures and rigorous employee awareness drives.

#9 about 15 min

Balancing regulatory hardware testing with deployment speed

Regulators face trade-offs between implementing strict state certification for infrastructure devices and avoiding lengthy deployment delays.

#10 about 3 min

Exploring career opportunities and recruitment open positions

Stadtwerke München seeks developers, security professionals, and business continuity managers to support infrastructure resilience.

#11 about 3 min

Detecting malicious code with artificial intelligence models

Security systems leverage artificial intelligence to identify anomalous system behaviors that signature-based malware detection misses.

#12 about 15 min

Adapting agile practices and remote work models

Operational technology teams implement hybrid office policies and adapt frameworks like Scrum and Kanban for infrastructure projects.

#13 about 8 min

Managing outage risks through infrastructure hardware redundancy

Planners secure critical grid functions by maintaining duplicate SCADA systems and redundant fiberglass communication rings.

#14 about 6 min

Promoting diversity and employee benefits for staff

Public utilities offer competitive benefits like secure employment, pension schemes, and a highly inclusive international workspace.

#15 about 11 min

Essential soft skills and evaluating security candidates

Hiring teams prioritize strong communication, self-motivation, and technical curiosity alongside specific programming expertise.

#16 about 11 min

Continuous learning strategies and emerging industry trends

Security professionals stay updated by executing personal programming projects and studying modern architectures like zero trust.

Matching moments

1:45 min

Balancing future defensive security initiatives and unprecedented physical vulnerabilities

Michael Macher Michael Macher +1 · Europe 2026 Virtual

2:43 min

Balancing critical infrastructure innovation with regulatory compliance

Bernd Datler Bernd Datler +3 · World Congress 2025

3:22 min

Transitioning from software engineering to security roles

Anna Oliveira · Coffee With Developers

2:48 min

Transitioning from cybercrime investigation to application security

Christian Heilmann Christian Heilmann +1 · World Congress 2026 North America

1:33 min

Recapping vital capability shifts across security and enterprise infrastructure

Sergej Reznik Sergej Reznik · Europe 2026 Virtual

2:22 min

Leveraging unique cultural backgrounds in engineering design

Ixchel Ruiz · LIVE

More from WeAreDevelopers LIVE

WeAreDevelopers LIVE - Read more, Prompt Less thumbnail
1:01:30
4 days ago

WeAreDevelopers LIVE - Read more, Prompt Less

Chris Heilmann, Daniel Cranney, Luise Freese

WeAreDevelopers LIVE - Tech Education in Two Languages thumbnail
1:00:18
11 days ago

WeAreDevelopers LIVE - Tech Education in Two Languages

Daniel Cranney, Roxy Rodriguez-Becker

WeAreDevelopers LIVE - Playing in Production thumbnail
1:06:40
17 days ago

WeAreDevelopers LIVE - Playing in Production

Andrew MacLean, Daniel Cranney, Christian Heilmann

WeAreDevelopers LIVE - Is CSS Catching Up to Flash? thumbnail
1:03:33
about 1 month ago

WeAreDevelopers LIVE - Is CSS Catching Up to Flash?

Chris Heilmann, Daniel Cranney, Bramus Van Damme

WeAreDevelopers LIVE - Project Chopin: Make Your Team and Agents Play Along thumbnail
1:21:17
about 1 month ago

WeAreDevelopers LIVE - Project Chopin: Make Your Team and Agents Play Along

Chris Heilmann, Daniel Cranney, Krzysztof Cieślak

Fake or News - AI Toothbrushes, Carrier Pigeon Tech & Life on Mars - Krzysztof Cieślak thumbnail
4:23
about 1 month ago

Fake or News - AI Toothbrushes, Carrier Pigeon Tech & Life on Mars - Krzysztof Cieślak

Chris Heilmann, Daniel Cranney

Upcoming sessions on this topic

Open session

Supply Chain Security for the Everyday Engineer

  • Pradumna Saraf

    Kestra Technologies

    Quality Assurance Engineer

Open session

What I Got Wrong Shipping an MCP Server for Live Infrastructure

  • Pritesh Kiri

    Harness

    Developer Relations Engineer

Open session

How is SWE & EM roles are changing in the age of AI

  • Amol Sharma

    Stripe

    Engineering Manager

Open session

Multi-Cloud Isn't a Project. It's a Side Effect.

  • Antonio Mendoza Pérez

    Temporal Technologies

    Staff Developer Success Engineer

  • Gaurav Thadani

    Temporal

    Staff Developer Success Engineer

Open session

Shipping MCP to Real Users: Scaling, Auth, and the PII Leak You Didn't See Coming

  • Hadar Geva

    Myop

    CTO & Co-founder

Open session

Beware of Strangers Bearing Code: Open Source Trust in the Agent Era

  • Vikram Vaswani

    Consultant

Related videos

Automotive Security Challenges: A Supplier's View thumbnail
58:59
LIVE • over 3 years ago

Automotive Security Challenges: A Supplier's View

Davor Frkat

Checkmate: 5 Real Incidents That Can End a Software Company thumbnail
27:08
World Congress 2026 Europe • 3 months ago

Checkmate: 5 Real Incidents That Can End a Software Company

Jasmin Azemović

You can’t hack what you can’t see thumbnail
29:34
LIVE • about 6 years ago

You can’t hack what you can’t see

Reto Kaeser

Unleashing the Power of Developers: Why Cybersecurity is the Missing Piece?!? thumbnail
27:36
World Congress 2023 • about 3 years ago

Unleashing the Power of Developers: Why Cybersecurity is the Missing Piece?!?

Tino Sokic

Security Pitfalls for Software Engineers thumbnail
27:32
World Congress 2023 • about 3 years ago

Security Pitfalls for Software Engineers

Jasmin Azemović

Cybersecurity for Software Defined Vehicles thumbnail
22:09
World Congress 2023 • about 3 years ago

Cybersecurity for Software Defined Vehicles

Henning Harbs

Related articles

From learning to earning

Jobs that call for the skills explored in this talk.