Spotlight on CHARLES ZACHMEYER
MEET UTSI’S OT CYBERSECURITY LEAD
How long have you been working with UTSI?
I have been involved in OT Cybersecurity for almost 30 years and computer or network security for almost my entire career.
Describe your role and area of expertise.
I was brought on to be the OT Cybersecurity Practice Lead.
What is the future of OT Cybersecurity and how do you see it evolving in 5 years?
Unfortunately, I see more government oversight and regulations. Some for the good and others as in the past just would drive up cost with little benefit.
AI will play a very large role in our future I think in almost every aspect of IT\OT, one key area would be risk and mitigation identification.
Defending the OT will become more difficult with what we have seen from the nation state actors, the overabundance of unsecured systems and lack of professionals to perform the work. That is where I hope to see AI and human creativity conquer!
How will the convergence of IT impact, and hopefully minimize, silos within IT and OT teams?
While there are many things that separate IT and OT teams there are many more that are the same. The rethinking of systems and their impact on actual OT functions vs actual OT systems has helped somewhat simplify how systems are addressed or tasks performed. Today we have started to treat systems at level 3 of the Purdue model and above as IT systems. Performing normal maintenance tasks just as we would in a business environment with just an enhanced change management process. This offloading allows us to provide the proper focus on systems in the OT that require a different security posture, stricter management of change or a stronger understanding of what those systems perform to avoid shutdowns or other catastrophic events while managing them.
What role will ML and AI play in pipeline operations?
I think it will be a cautious journey. ML would be useful for suggesting actions for a particular situation since it could recognize patterns and theoretically could predict the outcome of those actions. It could quickly tell an operator to perform an action based on what it is observing on systems. AI on the other hand has a way to go. Its unpredictable responses (different conclusions every time) doesn’t make it a useful tool yet but could be the next step to ML.
Favorite project you’ve worked on and why?
While at Chevron I was part of the Cyberwise program to enhance cybersecurity, standardize applications and network design within OT environments. This was the first major rework of those systems in many years. The collaboration with business units that lead to the creation of the solutions was very challenging, and it was exciting to see the delivery and support of the business. I saw many of the solutions put together but left before it was completely deployed.
What is your top professional aspiration and have you achieved it?
I would like to think I have achieved it many times over. Be what’s needed. Complete the task that has been assigned, be the mentor to someone new or needing advice. Be the supervisor or leader to provide direction or intent for a team. Be the inspiration to help team members light their own catalyst and move the goal forward. All while still having fun!
Who has been your biggest influence in your career?
Admiral Grace Hopper. Her inspiration that drove me and echoed in several of her quotes was basically, don’t accept things just because that’s the way it has been. You know “we’ve always done it that way” or “The difficulty lies, not in the new ideas, but in escaping from the old ones.”. I think there was rebel in her. “It is easier to get forgiveness than permission.”
What is something most people don’t know about you?
I have been collecting old pump 22 rifles. Many don’t know they were used in circus midways at the target shooting games before bb guns were used. They had a special 22 caliber round that disintegrated when it struck the target. I am hoping to find one that has a circus emblem burnt or engraved into the stock.
What is your advice to yournger professionals pursuing a career in Cybersecurity?
Don’t be afraid to try new things, just not in production! 😊 But that is the OT side of me. Never stop learning, challenge processes, especially those that don’t make sense. Figure out how to make AI your friend. Venture outside your usual scope, funny how things can be tied back together and change what you think you know.
What is your favorite quote?
Only those who risk going too far can possibly know how far one can go. T.S. Eliot