# Derek Boxdell

Derek Boxdell shares practical perspectives on cybersecurity, including protecting manufacturing operations, responding to AI-driven threats, and using breach data to guide security decisions.

- Profile: https://b2binfluencer.marketing/creators/derek-boxdell/
- LinkedIn: https://www.linkedin.com/in/dboxdell
- LinkedIn followers: 2,202
- Topics: artificial-intelligence, cybersecurity
- Based on 12 dated posts, latest 2026-10-07

## Summary

Derek Boxdell is most useful for linking manufacturing cybersecurity risks to production, breach trends, and business decisions.

- Best for: A manufacturing technology brand needing industrial cybersecurity positioning, keynote, or advisory work.
- Not for: Consumer identity, VPN, or broad-reach short-form video campaigns needing direct-response app installs.
- Check first: Confirm audience composition, engagement data, and council session attendance before contacting them.

### Takeaways

- In manufacturing, cybersecurity is production assurance, not IT compliance.
- AI speeds operations and attackers, so shift from detect-and-respond to predict-and-prevent.
- Third-party breaches doubled and vulnerability exploitation rose 34%, requiring asset visibility and patch prioritization.

## Main ideas

- **In manufacturing, cybersecurity is production assurance, not IT compliance**: Derek Boxdell argues that when production stops, revenue stops, so a plant’s security team must increasingly assure production, not just satisfy an IT checklist. OT resilience should get the same priority as uptime. Security must be designed into automation from the start, not added later: increasingly automated “dark factories” lower labor risk while raising cyber and system-dependence risk.
- **AI speeds up operations and attackers, so shift from detect-and-respond to predict-and-prevent**: Derek Boxdell treats AI as two-sided, neither a pure tool nor a pure threat. It powers predictive maintenance and faster operational decisions, while also shortening attackers’ breakout time. The recommended posture: predict and prevent rather than detect and respond.
- **Breach reports are playbooks, and their value lies in the operating decisions they force**: Derek Boxdell describes the Verizon Data Breach Investigations Report as a playbook, not just a report: a way to cut through noise and ground conversations in facts, tying security spending to outcomes. The point is not to read the numbers but to act on the practices they imply. In a second post, they apply the report to partner conversations, using its findings to connect threat trends with customer engagement, business priorities, and investments that actually reduce risk.
- **The human factor is the wildcard, and inattention beats sophistication**: Derek Boxdell argues that attackers often do not need advanced exploits when they can target behavior instead—a mistimed click, a rushed approval, a spoofed invoice. Awareness and human risk reduction are therefore breach-prevention activities, not training formalities; the human element remains the unpredictable variable in breach data.
- **A breach is a reputational event, not only an operational one**: Derek Boxdell argues that when customer data is auctioned off, the fallout reaches beyond operations to customer trust, making trust a battleground rather than a byproduct of good security. Incident response and communication therefore carry commercial as well as technical weight.
- **Compliance is turning into a competitive edge**: Derek Boxdell argues that companies can use compliance to differentiate themselves in the market rather than treating regulation as a cost to absorb. The winners, in this framing, go beyond checking the box.

## Work to read

- [Manufacturing cybersecurity: downtime, AI, and dark factories](https://www.linkedin.com/posts/dboxdell_manufacturingcybersecurity-otsecurity-activity-7396262289420693504-q2ad)
- [DBIR reaction: third-party breaches and vulnerability exploitation](https://www.linkedin.com/posts/dboxdell_2026-data-breach-investigations-report-dbir-activity-7320937487252520961-zjnS)
- [Using the DBIR as a partner playbook](https://www.linkedin.com/posts/dboxdell_dbir-cybersecurity-partnerships-activity-7385030679279001600-KM85)
- [Monthly field notes: human distraction, trust, and compliance as a competitive edge](https://www.linkedin.com/posts/dboxdell_cybersecurity-riskmanagement-leadership-activity-7366464811456483328-dsVF)

## Brand relationships

- **Manufacturers Alliance** (mention)
- **Verizon Business** (mention)

## Partnerships

The posts do not publish a sponsorship policy, package list, rate card, or partnership inquiry route. Derek Boxdell spoke to the Manufacturers Alliance Information & Cybersecurity and IS Management Councils on cybersecurity, industrial operations, and AI, and ran a session with a partner on using the Verizon Data Breach Investigations Report to shape customer conversations. These posts show speaking and partner-enablement work, not documented paid formats. For a manufacturing technology company considering a keynote or advisory engagement, contact Boxdell directly to confirm price, lead time, deliverables, exclusivity, and booking. Resolve those details before budgeting if the campaign depends on a defined sponsorship format.

## Alternatives

- John Ellingson: Choose John Ellingson for a forward-looking, quantified threat-landscape keynote rather than a plant-floor session on OT resilience. The posts show a close reading of the CrowdStrike 2026 Global Threat Report, followed by a ten-year extrapolation: attack volume up 89 percent year over year, breakout time down to 29 minutes, and 82 percent of intrusions using no malware and moving through valid credentials across identity, cloud, and edge. The argument then turns architectural: if 68 to 82 percent of breaches involve a human element, per the Verizon report cited in the post, the durable fix is to remove humans as an access path rather than improve training or detection. A manufacturing technology company whose audience needs a long-range strategic frame, an AI-driven-attack thesis, and a deliberately provocative conclusion will get more from this than from a session built around production uptime.
- Frank Policastro: Choose Frank Policastro for sessions aimed at executives, risk owners, or the CFO, especially when the audience asks about recovery rather than prevention. The posts frame security as a leadership and board-level issue in plain terms: attackers moving faster, AI accelerating both vulnerability discovery and exploitation, and a shrinking window to detect, contain, and respond. The second post makes the commercial case: Pondurance managed detection and response offerings now carry up to $250,000 in warranty coverage for eligible expenses after a covered breach through the HSB Hartford Steam Boiler partnership, alongside immediate access to incident response specialists. A manufacturing technology company selling resilience services, or one whose industrial buyers want to know how an incident gets paid for, gets a sharper, more concrete commercial frame here than from a pure practitioner talk.
- Bradley Richards: Choose Bradley Richards when a campaign focuses more on managed security, vulnerability management, or identity risk than on industrial operations. The posts draw on items from Aida Keehner's TechDecanter newsletter and turn them into practical questions for buyers: ransomware groups exploiting known Fortinet VPN vulnerabilities, why MFA alone is not enough, and how the PAYLOAD group used compromised domain credentials and Active Directory Group Policy to disable controls without dropping malware. The perspective is customer success at a managed security provider, and the recurring claim is that the fastest recoveries go to organizations with disciplined patch prioritization and operational accountability, not the largest budgets. A manufacturing technology company whose buyers are already discussing patches and privileged accounts will find the material familiar and close to their day-to-day.

---
AI-assisted summary of public posts. Audience demographics are not available. Engagement appears only where we checked recent posts. Method: https://b2binfluencer.marketing/methodology/