The State of OT Defence – Part 4: Visibility Isn’t the Finish Line Seeing more is useful. Knowing what to do with what you’re seeing is where it starts to make a difference. I see this regularly when organisations start sending OT security data into their Security Operations Centre (SOC). On paper, it makes perfect…
The State of OT Defence – Part 2: You Don’t Need to Know Everything to Improve Something One of the easiest ways to slow down an OT cybersecurity improvement is to get stuck deciding who owns it. I saw this with a food manufacturer that needed to introduce separation between its IT and OT networks.…
OT Remote Access is a Trust-Boundary Problem. When OT teams discuss remote access, they often begin with the wrong questions. The conversation quickly turns to MFA, session recording, PAM integration, centralised management, or whether the product claims to follow Zero Trust principles. These features may matter, but they do not explain what kind of remote…
Managing Negative PR Implications After a Cyberattack on Critical Infrastructure Guidelines for Effective Crisis Response Cyberattacks on critical infrastructure can have devastating consequences, including negative PR implications for the organization responsible for maintaining the infrastructure. In addition to the immediate risks to public safety, a hack can damage the organization’s reputation, leading to loss of…
Is IT & OT Convergence Dead? IT/OT Convergence: Is it bringing two worlds together? IT / OT convergence describes the merging of information technology (IT) and operational technology (OT). In the past, IT and OT departments have been working in silos, but in the past decade, organizations have started to see the benefits of connecting…