Lessons From 34 Years in OT Cybersecurity: Growth, Challenges, and Leading Change with Scott Rosenberger

In this episode, host Aaron Crow sits down with longtime friend and colleague Scott Rosenberger, the cybersecurity leader for Vistra Corporation’s generation fleet. Together, they take a deep dive into Scott’s fascinating journey from an engineering background in nuclear power to overseeing cybersecurity across a sprawling, nationwide utility portfolio.

You’ll hear insightful stories from the early days of OT cybersecurity - before most of today’s tools even existed - and how foundational principles like alignment, engagement, and standardization have driven years of progress. 

Scott and Aaron reflect on the importance of building cross-disciplinary teams, developing strong communication strategies, and embracing the reality that real security is about continuous improvement, collaboration, and sometimes learning from mistakes.

From tales of rolling out firewalls at power plants and negotiating with skeptical vendors, to lessons in leadership, trust-building, and the ever-evolving challenges of protecting critical infrastructure, this episode is packed with practical wisdom, industry anecdotes, and a look at what’s coming over the cybersecurity horizon. Whether you’re just entering the field or a seasoned pro, grab your headphones - you won’t want to miss this candid, insightful conversation.

Key Moments: 

04:37 Bridging IT and Cybersecurity

08:40 Revolutionizing Program Development Together

10:08 Building Consensus Through Communication

12:33 "Business Insights and NERC SIP Evolution"

17:18 Utility's Major Implementation Challenge

20:08 Corporate Cybersecurity Challenges Uncovered

21:58 "Automated Inventory and Cybersecurity Insight"

27:21 Optimizing Cybersecurity and Metrics

30:56 Essential Infrastructure Basics Lacking

34:17 "Identifying and Resolving Hidden Issues"

37:21 Encouraging Change in Industrial Practices

42:11 "Finding the Right Team Mindset"

46:11 "Importance of Pre-Job Briefs"

About the guest: 

Scott Rosenberger is currently the manager of Operational Technology for Luminant.  He developed the Luminant program to address the reliability, security and ongoing maintenance of Operational Technology for Luminant’s Fossil Generation Fleet.  He has a Bachelor of Engineering from Stevens Institute of Technology and is a registered professional Engineer in Texas.  In his 23+ years with Luminant he has worked in nuclear and fossil plants, many corporate roles and for 3 years as Director of IT Security and Compliance.  Scott also spent 3 years as a member of the NERC CIP drafting team.

Links to connect Scott: 

https://www.linkedin.com/in/scottrosenberger/

Connect With Aaron Crow:

• Website: www.corvosec.com