Share these talks and lectures with your colleagues
Invite colleaguesPractice paper
Bridging the gap between IT and OT to improve industrial cyber security
Cyber Security: A Peer-Reviewed Journal,
7
(4),
333-341
(2024)
Abstract
Understanding cyber security risks is important for everyone. In this paper you will gain perspective on the cyber security challenges facing organisations today that operate within manufacturing and critical infrastructure industries, across their information technology (IT) and operational technology (OT) teams. You will also gain insight into potential solutions. IT teams have evolved distinctly, prioritising data security, access controls and system hardening in networked computing environments. OT teams manage and operate industrial control system (ICS) equipment with specific requirements around reliability and uptime for the purpose of ensuring physical outcomes in manufacturing or critical infrastructure production environments. IT and OT have traditionally operated separately within organisations because they serve different functions. The lack of interaction and understanding between IT and OT has led to cyber security vulnerabilities and frustration between organisations. IT may want to patch OT systems but get pushback because downtime halts production. OT may distrust IT recommendations because they have historically caused operational disruptions. This tension has caused many organisations to avoid trying to connect these two worlds; however, as digital transformation and Industry 4.0 initiatives bring IT and OT systems together, new cyber risks emerge. Industrial Internet of Things (IIoT) devices, legacy equipment, unpatched programmable logic controllers (PLCs) and obscured asset inventories create vulnerabilities. Despite their differing perspectives and priorities, however, collaboration between IT and OT is essential to secure today’s converged environments. Discover proven steps that can be taken to bridge the gaps between organisations to provide greater security across the enterprise, while strengthening internal teams and improving business outcomes.
Keywords: ICS OT cyber security; OT security; IT OT convergence; cyber security; critical infrastructure protection; NIST cyber security
The full article is available to subscribers to the journal.
Author's Biography
Dino Busalachi is Chief Technology Officer (CTO) and Co-Founder of Velta Technology. Dino has spent his career at the forefront of technology. With close to four decades of global experience across information technology (IT), engineering and industrial control system (ICS) with multiple globally recognised brands including Rockwell Automation, Anheuser Busch, American Standard and General Motors, Dino has been at the cutting edge of technology evolution. He has implemented global infrastructure technologies and industrial control system platforms with the world’s top networking, security and technology automation companies. His deep knowledge and understanding of the inner workings of ICS, OT, Internet of Things (IoT) and technology solutions across almost every major vertical has allowed him to recognise the technical vulnerabilities inherent in today’s critical infrastructure from outside cyberattacks. As a result, he has co-founded a global industrial cyber security company, Velta Technology. Their leading industrial cyber security solutions support businesses in improving overall business outcomes by leveraging the latest digital safety and cyber security solutions, services, processes and policies.
