The Panel & Blog
• When the Perimeter Disappears Breakfast Briefing Recap Blog
• Aaron Bishop, CISO, Department of War
• Dr. Justin Ubert, CISO, Department of Transportation
• Matthew Shelbetter, Director of Civilian Strategy, Armis
Policy & Frameworks Referenced
• OMB M-26-14 and the CISA Logging Reference Architecture : https://www.whitehouse.gov/omb/memoranda/
• DoD OT Zero Trust Reference Architecture
• CISA Zero Trust Maturity Model
• GSA “Eliminate, Automate, and Optimize” playbook for AI/agents
• NIST SP 800-82 — Guide to Operational Technology Security
The Threat Backdrop
• CISA advisory on Iranian-affiliated actors targeting water and critical infrastructure
• CISA Industrial Control Systems resources
• EPA Water and Wastewater cybersecurity resources
The Three Monday-Morning Takeaways
• Dr. Justin Ubert: Get the disparate teams — red, blue, OT, leadership — in the same room
• Matthew Shelbetter: Talk to the operators; educate leadership and frontline managers, then get the right platforms and partners
• Aaron Bishop: Start with asset discovery — know what you have, where it is, and who owns it
Related Episodes
• Episode 14: A Pause, Not a Pass on CMMC
• Episode 13: Fed Christmas in July? The OMB M-26-14 Holiday Rush Begins!
• Episode 7: Iran Came for the Dams and We Got Lucky: Frontline Insights into the OT Fight
Upcoming Events
• Upcoming GIST 360 webinars and fall breakfast briefings
The Hosts & Show
• Swish
• GIST 360