Ali Siddiqui, Director of Product Cybersecurity at Johnson Controls, joins Raj on the pod to share his journey from industrial control systems to cybersecurity leadership. Ali discusses the unique challenges of securing software for critical infrastructure across industries like automotive, energy, and industrial controls. Through the lenses of people, process, and technology he highlights the importance of shifting the mindset of engineers, adapting security processes to fit control systems, and utilizing the right tools for effective product security. Ali also explores the evolving role of AI in automating security tasks and how platforms like ArmorCode are helping manage the complexity of securing hundreds of products with thousands of components.