The Security Detail

The episode covers foundational concepts (OT/IT convergence, ransomware trends, IP theft, supply chain attacks) that operators in food & ag should know, but rarely pushes beyond established security frameworks. Most insights are standard industry knowledge: MFA matters, phishing is a problem, LockBit was dominant. The supply chain interdependencies angle (water, transport, energy) is useful but not deeply explored.

“China and Russia threat actors, they're pretty high on that list, especially those that are known to target operational technology”

“Now we're starting to see this marriage between information technology and operational technology”

The episode rehashes established security guidance without novel frameworks or contrarian takes. The predictive adversary scoring system is mentioned but not detailed enough to constitute original thinking. Most recommendations (MFA, least privilege, segmentation, incident response planning) are standard CISO playbooks recycled across industries.

“Implementing multi-factor authentication best practices is really important”

“having the principle of least privilege where your provision users only have access to the things they need”

Jonathan Braley holds a relevant director role at the official Food & Ag ISAC and has direct experience from IT ISAC (2017+), giving him legitimate sector authority. However, he is primarily an information-sharing infrastructure operator, not a practitioner who has built/defended large-scale ag tech systems or managed recovery from major incidents. His insights are institutional rather than hands-on.

“I joined the IT ISAC back in 2017”

“I became responsible for the ITI SAC's Food and Agriculture Special Interest Group”

The episode provides some concrete numbers (JBS attack caused multi-week delays, LockBit ~25% of ransomware events in 2023, tracking 170-200 threat actors narrowed to 20-30 highest-risk) but relies heavily on vague assertions. No named examples of IP theft, zero-day exploits, or insider threats. Chinese drone risk is mentioned without specific attack data. Most tactical guidance (patching, MFA, segmentation) lacks implementation examples or cost/timeline details.

“LockBit, they were responsible for probably a quarter of all ransomware events that we saw. So I think we saw almost 3000 last year, ransomware events, and a quarter of those were LockBit”

“We're currently tracking 170 to 200 different actors in there”

The hosts (Madeline Tauber and Audra Streetman) ask competent follow-ups on LockBit takedowns, ransomware evolution, and drone risks, but rarely push back or demand deeper evidence. Questions are linear and rarely challenge claims - e.g., no pressure on how the predictive adversary scoring actually works, why staffing is a bigger blocker than investment, or whether voluntary incident sharing truly protects small farms. The closing segment feels reflective rather than investigative.

“I'm curious what your thoughts are on the recent takedown of the LockBit infrastructure”

“Going back to talking about disruption in the supply chain, if there are any interesting incidents that you know of”