OT Security

OT Security is the protection of operational technology – i.e. the control and automation technology in manufacturing, energy, water, transport and buildings, including industrial control systems (ICS) and SCADA systems.

OT follows different rules than classic IT: availability and the safety of physical processes take precedence over confidentiality, plants often run for decades, patches are only possible during planned shutdowns, and many protocols date from a time without security requirements. Basic measures are therefore complete transparency about all assets and communication relationships, consistent network segmentation between IT and OT, controlled remote access and passive monitoring that does not disturb running processes. With increasing IT/OT convergence, the two worlds are growing together – and with them the attack surface.

In terms of terminology, OT security is the established core of a larger field: XIoT Security additionally brings IoT and IoMT environments under one roof. Organizationally, the protection of operational technology is now a firm part of IT Security – with its own methods and its own risk profile.