Common Mistakes IT Security Staff Make in an OT Environment 1 ) Our ICS network is absolutely air-gapped. Throughout the years, we have heard this statement over and over again, specifically from IT department, but in practice and during our assessments, we discovered some sort of connectivity to internet either through the network or some…
10 Most Common OT Attack Vectors An attack vector is the method or path that an attacker uses to access the active target of the attack, that is, the steps that the attacker follows to materialise the threat, it is known that each attacker follows his own “strategy” to be able to consummate Its objective,…
Vulnerability Assessment : Active Scanning vs. Passive Scanning For quite some time, OT engineers and asset owners were horrified by the sound of the “active scan” and quite frankly, they were partially right. No one would dare to scan an OT network the way IT network scans were performed. An active scan could shut down…
How to Build a Defensible OT Network 1. Assessment Although vulnerability assessment and risk assessment are commonly used interchangeably, but they are two different approaches, and both are needed as part of a comprehensive security assessment. Another misconception is that security assessment is a network anomaly detection tool like Nozomi Networks, Claroty or Tenable. Any…
How to Secure Industrial Networks Against Ransomware in 2023 Since the outbreaks of Wannacry & NotPetya ransomware attacks in 2017, we’ve been witnessing daily occurrences of attacks affecting OT networks that originated on the IT side. The U.S. National Security Agency (NSA) also highlighted this issue for this very simple reason. It works. Ransomware in…
IT and OT Cultural Differences Why It’s Imperative to Bridge the IT & OT Cultural Divide We hear it all the time from security marketers and evangelists alike. “Information technology and operational technology are converging!” It’s a simplistic way of characterizing what is a highly complex web of digital transformations affecting a broad range of…
Is IT & OT Convergence Dead? IT/OT Convergence: Is it bringing two worlds together? IT / OT convergence describes the merging of information technology (IT) and operational technology (OT). In the past, IT and OT departments have been working in silos, but in the past decade, organizations have started to see the benefits of connecting…
Why OT Incident Response is really different? It’s not a secret. There are thousands of companies providing IT incident response, but handful of companies capable of handling OT incident response. Some IT folks believe it’s mission impossible and they are not far from the truth, but the first step is to admit that OT incident…
Bridging the IT & OT Divide Why is it important to bridge the gap between IT and OT department? In the past decade, though IT and operations technology (OT) appear to be working together more frequently than in the past, they’re still far from being a united team, according to Automation World’s latest reader survey…