WeAreDevelopers Logo WeAreDevelopers
Sign in
For You LIVE
WeAreDevelopers LIVE • Apr 27, 2023

What makes Cybersecurity different for critical infrastructure?

Kurt Eder

Enterprise IT is replaced quickly. Grid hardware must survive decades against state-sponsored hackers. Discover why protecting critical infrastructure demands an entirely different playbook.

Pause
Mute Enter Fullscreen
#1 about 3 min

Providing essential utility services for the city

Stadtwerke München operates critical infrastructure spanning energy, water, and mobility to support daily urban life.

#2 about 6 min

Acceptable downtime in critical infrastructure operations

Different utility sectors tolerate cyberattack-induced downtimes differently, with electricity requiring immediate recovery.

#3 about 7 min

The professionalization of modern cyber criminal groups

Cyber threats have evolved from individual hackers to highly organized, state-sponsored cyber operations.

#4 about 3 min

The convergence of IT and OT attacks

Real-world examples demonstrate how attackers exploit traditional IT networks to compromise operational technology grids.

#5 about 13 min

Security challenges of long OT equipment lifecycles

Operational technology often relies on decades-old hardware lacking modern encryption and access controls.

#6 about 6 min

Navigating new cybersecurity compliance frameworks and laws

Infrastructure operators must comply with fast-emerging regulations like ISO 27000, IEC 62443, and the Cyber Resilience Act.

#7 about 8 min

Partnering with hardware vendors on system security

Operators demand transparent communication from equipment manufacturers to quickly patch vulnerabilities and maintain grid stability.

#8 about 5 min

Prioritizing employee awareness and business continuity planning

Organizations must prepare for successful breaches by establishing manual fallback procedures and rigorous employee awareness drives.

#9 about 15 min

Balancing regulatory hardware testing with deployment speed

Regulators face trade-offs between implementing strict state certification for infrastructure devices and avoiding lengthy deployment delays.

#10 about 3 min

Exploring career opportunities and recruitment open positions

Stadtwerke München seeks developers, security professionals, and business continuity managers to support infrastructure resilience.

#11 about 3 min

Detecting malicious code with artificial intelligence models

Security systems leverage artificial intelligence to identify anomalous system behaviors that signature-based malware detection misses.

#12 about 15 min

Adapting agile practices and remote work models

Operational technology teams implement hybrid office policies and adapt frameworks like Scrum and Kanban for infrastructure projects.

#13 about 8 min

Managing outage risks through infrastructure hardware redundancy

Planners secure critical grid functions by maintaining duplicate SCADA systems and redundant fiberglass communication rings.

#14 about 6 min

Promoting diversity and employee benefits for staff

Public utilities offer competitive benefits like secure employment, pension schemes, and a highly inclusive international workspace.

#15 about 11 min

Essential soft skills and evaluating security candidates

Hiring teams prioritize strong communication, self-motivation, and technical curiosity alongside specific programming expertise.

#16 about 11 min

Continuous learning strategies and emerging industry trends

Security professionals stay updated by executing personal programming projects and studying modern architectures like zero trust.

Matching moments

2:43 min

Balancing critical infrastructure innovation with regulatory compliance

Bernd Datler Bernd Datler +3 · WWC 2025

3:22 min

Transitioning from software engineering to security roles

Anna Oliveira · Coffee With Developers

1:33 min

Recapping vital capability shifts across security and enterprise infrastructure

Sergej Reznik Sergej Reznik · Europe 2026 Virtual

2:22 min

Leveraging unique cultural backgrounds in engineering design

Ixchel Ruiz · LIVE

3:06 min

The fragility and challenges of modern infrastructure management

Alfonso Sandoval Rosas Alfonso Sandoval Rosas · Europe 2026 Virtual

5:21 min

Protecting infrastructure with the shared responsibility model

Mustafa Toroman · WWC 2023

More from WeAreDevelopers LIVE

Aliens in Quarantine, Python Deprecates Loops, and AI Buys Old Books - Zbyszek Tenerowicz thumbnail
5:43
5 days ago

Aliens in Quarantine, Python Deprecates Loops, and AI Buys Old Books - Zbyszek Tenerowicz

Chris Heilmann, Daniel Cranney

WeAreDevelopers LIVE - Node and Package Security thumbnail
1:08:30
5 days ago

WeAreDevelopers LIVE - Node and Package Security

Chris Heilmann, Daniel Cranney, Zbyszek Tenerowicz

WeAreDevelopers LIVE - Streaming HTML thumbnail
1:10:26
12 days ago

WeAreDevelopers LIVE - Streaming HTML

Chris Heilmann, Daniel Cranney, Jad Joubran

WeAreDevelopers LIVE - CODE100 at WeAreDevelopers Europe thumbnail
1:02:34
19 days ago

WeAreDevelopers LIVE - CODE100 at WeAreDevelopers Europe

Chris Heilmann, Daniel Cranney, Justin Halsall, Werner Jeschko, Nicole Jeschko, Mirco Tomić

WeAreDevelopers LIVE - Web Performance in an AI World thumbnail
1:07:59
26 days ago

WeAreDevelopers LIVE - Web Performance in an AI World

Chris Heilmann, Daniel Cranney

FIFA Hack, Midjourney Does Ultrasounds, and Trampoline Traffic Lights - Nicole Jeschko and Werner Jeschko thumbnail
5:55
about 2 months ago

FIFA Hack, Midjourney Does Ultrasounds, and Trampoline Traffic Lights - Nicole Jeschko and Werner Jeschko

Chris Heilmann, Daniel Cranney

Upcoming sessions on this topic

Open session

World Congress 2026 North America

Secure-by-Inclusion: Preventing Accessibility Barriers from Becoming Security Vulnerabilities

Radostina (Ina) Tsvetkova

Norwegian Directorate of Labour and Welfare (NAV), Senior Advisor in Digital Accessibility and Inclusive Design

Radostina (Ina) Tsvetkova
Open session

World Congress 2026 North America

The Geometry of Incidents: What User-Impact Shapes Reveal About Platform Architecture

Bala Subrahmanyam Kambala

Staff Platform Engineer at Oracle Cloud Infrastructure

Bala Subrahmanyam Kambala
Open session

World Congress 2026 North America

On the Public Clock: Open-Source Defense When You're Not in the Club

Nicholas Muy

VP Engineering Platform and Security at Scrut.io

Nicholas Muy
Open session

World Congress 2026 North America

Culture Doesn't Scale Itself: Leading Engineering Teams Through Hypergrowth and the AI Transition

Thanos Baskous

VP of Engineering and Co-founder of Cogent Security

Thanos Baskous
Open session

World Congress 2026 North America

The Things Your AI Isn't Telling You

Desmond Lamptey

Lead Software Engineer @ Capital One

Desmond Lamptey
Open session

World Congress 2026 North America

It passed auth, then production caught fire

Alex Olivier

Co-founder & CPO @ Cerbos | OpenID AuthZEN Co-chair

Alex Olivier

Related videos

Checkmate: 5 Real Incidents That Can End a Software Company thumbnail
27:08
WWC Europe 2026 • about 1 month ago

Checkmate: 5 Real Incidents That Can End a Software Company

Jasmin Azemović

You can’t hack what you can’t see thumbnail
29:34
LIVE • almost 6 years ago

You can’t hack what you can’t see

Reto Kaeser

Unleashing the Power of Developers: Why Cybersecurity is the Missing Piece?!? thumbnail
27:36
WWC 2023 • almost 3 years ago

Unleashing the Power of Developers: Why Cybersecurity is the Missing Piece?!?

Tino Sokic

Security Pitfalls for Software Engineers thumbnail
27:32
WWC 2023 • almost 3 years ago

Security Pitfalls for Software Engineers

Jasmin Azemović

Cybersecurity for Software Defined Vehicles thumbnail
22:09
WWC 2023 • almost 3 years ago

Cybersecurity for Software Defined Vehicles

Henning Harbs

Don't Be A Naive Developer: How To Avoid Basic Cybersecurity Mistakes thumbnail
28:01
WWC 2022 • about 4 years ago

Don't Be A Naive Developer: How To Avoid Basic Cybersecurity Mistakes

Tino Sokic

Related articles

From learning to earning

Jobs that call for the skills explored in this talk.