Protecting Critical Infrastructure in Engineering – Ep 117

What are the key priorities for protecting critical infrastructure in engineering?

The key priorities include governance of SaaS and AI applications, a strong data strategy to understand and leverage data value, and focusing on human capital to manage the changing nature of work in technology-driven environments.

• Govern AI and SaaS applications carefully
• Develop comprehensive data strategies
• Invest in workforce skills and human capital

Why is cybersecurity considered a business and engineering issue?

Cybersecurity extends beyond technical concerns to include management systems, governance, and human factors. Without integrating cybersecurity into business and human capital strategies, organizations face increased risks from uncoordinated processes and lack of awareness.

• Cybersecurity is largely about governance and processes
• Human behavior impacts cybersecurity risk significantly
• Integrating cyber into business strategy reduces vulnerabilities

How can organizations develop effective technology roadmaps in engineering?

Effective technology roadmaps should balance digital and technical strategies, emphasizing governance, data management, and human capital development. Roadmaps must align technology investments with customer value and long-term business goals.

• Separate digital strategy from technical strategy
• Prioritize governance of emerging tech and SaaS
• Include workforce development in planning

What strategies help engineering firms adopt new technology and AI successfully?

Firms should focus on people by providing training, sharing use cases, and fostering collaborative learning. Leadership must engage teams to build comfort and understanding around technology changes to avoid leaving anyone behind.

• Provide hands-on tool training and use cases
• Encourage collaborative learning and problem solving
• Prioritize inclusion and support for all employees

How does human behavior affect cybersecurity in engineering?

Human behavior introduces variability and risk, as people may unknowingly create vulnerabilities. Effective cybersecurity requires addressing human performance through training, communication, and governance to mitigate this risk.

• Humans are less predictable than technical systems
• Training and awareness reduce risk exposure
• Governance must integrate human factors

What role does customer focus play in technology adoption for infrastructure engineering?

Customer needs should drive technology adoption by focusing on solving real problems and delivering value. This approach prevents distraction by new technologies’ novelty and ensures investments support business objectives.

• Align technology with customer challenges
• Avoid technology adoption for its own sake
• Map technology impact to customer value

How is data strategy important in critical infrastructure engineering?

Data strategy helps organizations understand the location, value, and potential monetization of data assets. Proper data management supports long-term business goals and informs technology investments.

• Identify and catalog data assets
• Plan for data value realization
• Integrate data strategy with digital initiatives

In what ways has digitalization impacted infrastructure engineering?

Digitalization introduces smart components such as sensors and automation into infrastructure, enhancing safety and efficiency. However, it also requires upfront cybersecurity and supply chain risk considerations to avoid reactive challenges later.

• Infrastructure includes smart digital components
• Requires proactive cybersecurity integration
• Supply chain risk must be managed early

What does effective governance mean in the context of engineering technology?

Effective governance means setting policies and controls around technology usage, especially for SaaS and AI, balancing innovation with risk management. It ensures technology supports business goals without causing unmanaged complexity or vulnerabilities.

• Set clear policies for technology adoption
• Monitor and control SaaS and AI application use
• Balance innovation with security and compliance