Andrew Rose (UK)

We've seen other organizations do that when they had ransomware. There was Norsk Hydro, an aluminum or aluminum, sorry, smelting factory. And they again had to go back to manual processes because their computer systems wiped out by ransomware. So we do need to think all the way through how could we keep our services going when everything is gone and certain industries really need to do that.

We've seen other organizations do that when they had ransomware. There was Norsk Hydro, an aluminum or aluminum, sorry, smelting factory. And they again had to go back to manual processes because their computer systems wiped out by ransomware. So we do need to think all the way through how could we keep our services going when everything is gone and certain industries really need to do that.

I think agri-foods is one of them.

I think agri-foods is one of them.

I think on that one, I think a lot of the cybersecurity people out there, most of them are very focused on that CIA triad and confidentiality is everything. And integrity and availability is probably IT operations problem. So they come at this from the wrong angle straight away. And I also had to retrain people who joined my team to sort of refocus them on the key things.

I think on that one, I think a lot of the cybersecurity people out there, most of them are very focused on that CIA triad and confidentiality is everything. And integrity and availability is probably IT operations problem. So they come at this from the wrong angle straight away. And I also had to retrain people who joined my team to sort of refocus them on the key things.

So I think they come at it from the wrong place. And I think there's a perception across society that agriculture is not technology based. You know, it's probably the one thing that's not technical. They see it as, oh, there's wheat in the field. Okay, that's not going to get, you know, malware. It's not going to get ransomware.

So I think they come at it from the wrong place. And I think there's a perception across society that agriculture is not technology based. You know, it's probably the one thing that's not technical. They see it as, oh, there's wheat in the field. Okay, that's not going to get, you know, malware. It's not going to get ransomware.

But actually, it's all the process of the technology that puts the wheat in the field, brings the wheat out of the field, and gets it to your store. Absolutely, that's technology-based. So I think there's just a perception that this is different, that this isn't at risk from those cybersecurity issues.

But actually, it's all the process of the technology that puts the wheat in the field, brings the wheat out of the field, and gets it to your store. Absolutely, that's technology-based. So I think there's just a perception that this is different, that this isn't at risk from those cybersecurity issues.

And with the lack of cybersecurity people focusing on the right aspects of it, I think that puts us into this really poor position, which is, again, why I got involved, because I... perceive this is the most critical national infrastructure. And yet it just gets so underserved in terms of commentary and governance and oversight and support generally.

And with the lack of cybersecurity people focusing on the right aspects of it, I think that puts us into this really poor position, which is, again, why I got involved, because I... perceive this is the most critical national infrastructure. And yet it just gets so underserved in terms of commentary and governance and oversight and support generally.

Andrew? Probably about 48 hours due to food poisoning. I just couldn't keep anything down.

Andrew? Probably about 48 hours due to food poisoning. I just couldn't keep anything down.

I absolutely learned it on the job. So I came from a legal sector, which was entirely different, entirely, couldn't be more different. And then I was an analyst for five years. So this opportunity just came along. And it's the sort of thing you just can't say no to because it's a security world that means something. You know, working in the legal sector is fine. You know, you're keeping one

I absolutely learned it on the job. So I came from a legal sector, which was entirely different, entirely, couldn't be more different. And then I was an analyst for five years. So this opportunity just came along. And it's the sort of thing you just can't say no to because it's a security world that means something. You know, working in the legal sector is fine. You know, you're keeping one

very rich company, you know, rich and helping them make a merger and acquisition to make them a little bit richer the next day. And that's fine, but it doesn't really mean anything. But air traffic control and those critical infrastructure things really does make a difference to you keeping people safe. It's all about safety. And so for air traffic controllers, I had to learn that on the job.

very rich company, you know, rich and helping them make a merger and acquisition to make them a little bit richer the next day. And that's fine, but it doesn't really mean anything. But air traffic control and those critical infrastructure things really does make a difference to you keeping people safe. It's all about safety. And so for air traffic controllers, I had to learn that on the job.

It was very much about sort of transferring my knowledge into the operational technology environment, creating a culture within those operational technology engineers to make sure that they understood that cybersecurity applied to them in their context.

It was very much about sort of transferring my knowledge into the operational technology environment, creating a culture within those operational technology engineers to make sure that they understood that cybersecurity applied to them in their context.