11/02/2026
When everything is a top priority, nothing is.
That old line came up in a Federal News Network interview with Greg Touhill, director of the CERT Division at Carnegie Mellon's Software Engineering Institute. Working with colleagues across industry and academia, his team narrowed the field to seven cybersecurity research areas they believe deserve sustained attention.
Two of them stood out. One is cyber-physical system security, keeping legacy operational technology and industrial control systems secure as automated threats increase. The other is modeling and simulation. Touhill spent more than 30 years in the Air Force, and he doesn't want anyone in a security operations center facing an event they haven't already practiced in a simulator.
He was also clear that the list isn't one-size-fits-all and every area is worth investing in, but each organization's mission decides which one matters most to them.
That's how we approach software for industrial and public-sector clients. The systems that connect field equipment to the cloud can't be secured as an afterthought. Secure by design starts with the architecture, and it has to fit the mission the system supports.
If you're connecting legacy systems and want to do it without opening new holes, let's talk:
https://contentactive.com/