________________________________________________________________________________________________________________________
Group . As you can probably tell , a common thread for me is a love of being at the forefront of new and emerging technology . OT is about protecting not only critical infrastructure , but also prioritizing safety , reliability and availability . It ’ s been a different path , but combining all those different experiences has been a critical factor for my current role .”
Changing landscape
Today , Bramson leads the commercialization and operations for global industrial cybersecurity across Black & Veatch ’ s vertical and geographic markets . He heads the OT cybersecurity practice , developing and delivering solutions across critical infrastructure . As a thought leader in the industrial cybersecurity space , he works with the public and private sectors to drive innovation and awareness for industrial cybersecurity .
While Black & Veatch has provided cybersecurity services for more than 15 years from within different functions of the company , Bramson was hired to formally establish a cybersecurity team in February 2024 .
“ The company made this important move because the industrial space , more than ever , needs to pay more attention to OT security ,” he said . “ What distinguishes Black & Veatch in this sector is that we are a global expert in critical infrastructure , having designed and built it for more than a century . The company understands the sector ’ s idiosyncrasies , so we know best how to better secure it .
“ In OT cyberspace , things are getting much more connected with the increased use of automation , enhanced digitalization and remote delivery ,” he added .
Alongside these enhanced capabilities however , threats have also been evolving . The Colonial Pipeline Company ransomware attack , for example , was a seminal event , afflicting computerized equipment managing the pipeline and halting operations to contain the attack . While it was an IT-originated attack , it had disproportionate OT consequences . It was the largest cyberattack on an oil infrastructure target in U . S . history , serving as not only as a warning bell for the good guys but also a dinner bell for the bad guys , jumpstarting an increase in attacks on critical infrastructure .
“ While ransomware attacks are still prevalent , I always warn our customers to be vigilant concerning the next thing , whether that ’ s supply chain attacks , thirdparty attacks or malware from third parties infiltrating systems ,” Bramson said . “ As connectivity increases , the cybersecurity landscape changes , and new technologies often have inherent vulnerabilities . While smart technology brings greater visibility , connection and control , from an adversary ’ s perspective it ’ s a question of how that technology can be manipulated . Cybersecurity tools incorporate AI to detect anomalies . Similarly , adversaries are using AI to scan complex networks and establish weak security as well as generate deepfakes .”
Cyber challenges
Cyberattacks on industrial operations are raising the stakes and reshaping how companies are managing risk . Today , critical infrastructure organizations face a new reality : cybersecurity impacts operations ’ safety , continuity , liability and national security . With rapidly evolving cyber threats to industrial systems , bolted-on solutions and reactive measures aren ’ t enough . Embedding cybersecurity into every stage - from planning , design , build and operations through to decommissioning - helps enable long-term success .
It ’ s crucial to keep operations secure , maximize efficiencies and control costs with comprehensive support throughout the OT asset lifecycle with cyber asset lifecycle
10