Operational Technology (OT) and Industrial Control Systems (ICS) cybersecurity is one of the fastest-growing and most critical fields in the security industry. Protecting power grids, water treatment plants, oil pipelines, and manufacturing systems requires specialised knowledge that can be hard to find.
Fortunately, a growing community of practitioners, researchers, and organisations has made excellent educational content freely available on YouTube. This curated list covers 25 channels — from solo practitioners to global conferences — so you can build real-world OT/ICS security skills without spending a cent.
1. Individual Contributors
These solo practitioners are in the trenches of OT/ICS security every day. Their channels offer unfiltered, practical insight you won’t find in textbooks.
- @UtilSec
The go-to starting point for anyone entering OT/ICS cybersecurity. Covers career pathways, foundational concepts, and practical guidance for newcomers — run by the original curator of this list.
- @RickCenOT
Deep dives into OT/ICS hardware hacking and penetration testing. Perfect for security professionals who want hands-on technical content.
- @ZakharBernhardt
Home of Labshock — a virtual OT/ICS lab environment. Learn how to build and use simulated industrial environments for safe security research and pentesting practice.
- @icsotsecurity
Manjunath’s channel focused on ISA/IEC 62443 standards — the internationally recognised framework for industrial cybersecurity. Essential viewing for compliance professionals.
2. Conferences
Conference recordings are a goldmine — full talks from the world’s leading OT/ICS security researchers, archived and free to watch at any time.
- @S4Events
The premier ICS/SCADA security conference. Annual talks from the world’s top researchers on the most critical threats to industrial systems.
- @ICSVillage
Everything from the ICS Village including the popular ‘Hack the Planet’ podcast. A hub for hands-on ICS security education and community events.
- @HoustonSecurityConference
Features OT.SEC.CON presentations alongside broader cybersecurity content. A great resource for regional and energy-sector focused OT security talks.
3. Associations
Professional associations curate and record some of the most valuable knowledge-sharing in the OT security community.
- @CS2AI
Official channel of the Control System Cyber Security Association International. Access recorded webinars, panel discussions, and community knowledge sessions.
- @OTSecurityProfessionals
Community-generated content from OT security practitioners worldwide. A peer-to-peer learning resource that reflects real-world challenges and solutions.
4. Training Companies
These organisations provide structured, instructor-led content that can fast-track your OT/ICS security skills development.
- @SANSICSSecurity
Free content from SANS’ world-renowned ICS instructors. Covers everything from beginner concepts to advanced threat hunting in industrial environments.
- @OPSWATAcademy
Structured learning content covering critical infrastructure protection, secure remote access, and OT cybersecurity certification pathways.
5. Podcasts
Prefer audio-visual learning? These podcast channels bring guest interviews, case studies, and industry analysis to your screen.
- @PrOTectITAll
Aaron Crow hosts expert guests for deep conversations on OT cybersecurity strategy, incidents, and emerging threats across critical infrastructure sectors.
- @ICSArabiaPodcast
Sulamain Alhasawi’s bilingual podcast (English and Arabic) brings ICS security education to a global and Middle Eastern audience.
- @BitesandBytesPodcast
Kristin Demoranville tackles cybersecurity in food and agriculture — an often-overlooked but critical area of OT security and supply chain risk.
- @LMTX
Lukasz Malinowski covers the convergence of IoT, IIoT, and OT security — ideal for those navigating the blurring lines between IT and operational technology.
6. Vendors
These vendor channels go beyond marketing — offering genuine research, threat intelligence, and expert analysis from teams embedded in the OT security industry.
- @DragosInc
Industry-leading OT/ICS threat research and intelligence. Dragos researchers regularly publish findings on nation-state actors targeting industrial systems.
- @WaterfallSecuritySolutions
Great educational content plus Andrew Ginter’s well-regarded podcast on industrial security architecture, risk management, and air-gap strategies.
- @Claroty20
Claroty’s research-driven content and podcast episodes covering OT/IoT asset visibility, vulnerability management, and extended IoT security.
- @xIoTSecurity
Content and podcast episodes from Phosphorus covering the security of extended IoT — including OT, IoT, and medical devices at scale.
- @NozomiNetworks
Nozomi content plus contributions from Marty R. — covering OT/IoT visibility, threat detection, and real-world industrial network monitoring.
- @InsaneCyberInc
Dan Gunter and the Insane Cyber team share practical, no-nonsense OT/ICS cyber content tailored to defenders working in operational environments.
7. Other Essential Channels
A diverse set of channels that round out your OT/ICS security education — from government agencies to community-run events.
- @CISAgov
The US Cybersecurity & Infrastructure Security Agency. Free training resources, advisories, and guidance on protecting critical infrastructure sectors.
- @SimplyCyber
Recently expanded into OT/ICS content with contributions from Don W. and Tom V. A great entry point for IT security professionals crossing into OT.
- @PancakesCon
Lesley Carhart’s unique annual cyber conference. Approachable, community-focused, and genuinely memorable — cybersecurity education with a welcome twist.
- @USCSB
Detailed investigative videos on industrial accidents and process safety failures. Crucial for understanding the real consequences when OT security and process safety break down.
8. Frequently Asked Questions
What is OT/ICS cybersecurity?
Operational Technology (OT) security focuses on protecting systems that control physical processes — such as SCADA systems, PLCs, and industrial control systems (ICS) found in power plants, water utilities, oil refineries, and factories. Unlike traditional IT security, OT security must account for legacy systems, 24/7 uptime requirements, and the physical consequences of a breach.
Do I need IT security experience to learn OT/ICS cybersecurity?
Not necessarily. Channels like @UtilSec are specifically designed for newcomers. However, a background in networking fundamentals or IT security can accelerate your learning. Many successful OT security professionals come from engineering or operations backgrounds rather than IT.
What is the ISA/IEC 62443 standard?
ISA/IEC 62443 is the internationally recognised standard for industrial automation and control system (IACS) cybersecurity. It defines requirements for asset owners, system integrators, and product vendors. The @icsotsecurity channel is one of the best free resources for understanding this framework.
What is Labshock and why does it matter?
Labshock, featured on @ZakharBernhardt’s channel, is a virtual OT/ICS lab environment that lets you safely practise industrial security techniques without needing physical hardware. It is an invaluable tool for hands-on learning and penetration testing practice.
Which channel should I start with as a complete beginner?
Start with @UtilSec for foundational guidance on getting into OT/ICS security. Then add @CISAgov for official resources and @S4Events for exposure to advanced research. The @SimplyCyber channel is also excellent if you are transitioning from an IT security background.
9. Conclusion
OT/ICS cybersecurity has never had more free, high-quality learning resources than it does today. Whether you are a SCADA engineer wanting to understand threats, an IT security professional transitioning to OT, or a student exploring a specialisation, these 25 YouTube channels give you a structured, comprehensive, and completely free pathway into one of the most important fields in modern security.
Start with @UtilSec for the foundations, dive into @S4Events for advanced research, and bookmark @CISAgov for official guidance. The community is generous — take advantage of it.
