IT in Manufacturing

Improving the state of OT cybersecurity by sharing experiences

June 2021 IT in Manufacturing

The need for significant improvement in the state of OT cybersecurity in critical infrastructure has been broadly acknowledged for almost two decades. Although the subject started to receive significant attention in the early 2000s, the reality is that the protection of operations systems from threats to their integrity and availability has been a concern of asset owners for much longer than that. While the threats and vulnerability components of the risk equation were traditionally physical and safety-related, increased network connectivity and the broader use of commercial off-the-shelf (COTS) computer and communications technology inevitably led to increased scrutiny of cybersecurity risks.

Industrial cybersecurity as a recognised discipline

In the first several years, much of the focus was on increasing awareness of the potential risk and providing general guidance on how to formulate a suitable response. This in turn led to increased efforts to develop standards based on broadly accepted engineering practices. Although it may not have been the primary intent, over the past decade industrial cybersecurity has become a recognised discipline.

It is clear that a great deal has been accomplished, but just as is the case with areas such as safety and quality, it is more of a journey than a task with a defined beginning and a defined end. It is essential that we view improvements in cybersecurity as requiring improvements in multiple areas, including people and skills development, governance and process development and improved technology.

Has the state of products and technology reached a point where we have what are clearly the best solutions for all expected situations? Of course not. These capabilities must and will improve. Have we reached the stage where we can implement the organisation and governance that meets all requirements? Again, the answer is no. Clearly, there is more to be done in both these areas.

What about awareness and appreciation of the seriousness of the risk on the part of those making investment decisions. This has been a major area of activity since the earliest days of the critical infrastructure cybersecurity response and it will no doubt continue to be so, almost indefinitely. Some seem to have taken on the role of a modern-day Cassandra, cursed to utter true prophecies, but never to be believed. We have now reached a point where sounding the alarm and raising awareness is simply no longer enough. We can no longer be content with ‘cursing the darkness’ and must spend more time and give more attention to lighting the proverbial candles.

Specifically, anyone involved in addressing this imperative must look for every opportunity to turn their experiences – positive and negative – into useful and practical examples that others can learn from and use. We must see this as nothing less than an imperative, or call to action, so that all can contribute to the meeting. Many may struggle with how we can best accomplish this. It really does not have to be complicated.

The value of sharing information

It can begin with simple things like sharing specific experiences and lessons learned in social media or forums dedicated to the subject of industrial cybersecurity. What has worked? What has not? What might you do differently if you were to do it again? Currently, much of this sharing is often filtered through product and service suppliers and commentators. Again, this is good but not sufficient. There must be more direct peer-to-peer sharing such as what happens at industry events like the ARC Forum. This information should be readily available to everyone and not just those able to attend such events.

There have been several attempts to establish searchable repositories of incidents that people can learn from. Why not extend this model to include case studies at various levels of detail? They can be anonymous to protect confidentiality. Some of this is already being done, but shared information is often limited to those in a specific community, such as an industry group or information sharing and analysis centre (ISAC). Standards committees such as ISA99 are also investigating ways to complement their formal standards with simpler and more practical examples. Clearly, this is not a new or revolutionary idea; we simply must engage more people. There are opportunities for you to contribute.

For more information contact Larry O’Brien, ARC Advisory Group, +1 339 793 3317,,

Share this article:
Share via emailShare via LinkedInPrint this page

Further reading:

Mitigate industrial network vulnerabilities
July 2021, RJ Connect , IT in Manufacturing
It must not be forgotten that ignoring common system vulnerabilities in today’s world could put your entire network at risk.

Digital transformation in mining
July 2021 , IT in Manufacturing
Rapid advances in technology have disrupted industries and businesses around the world, which are now being forced to accept this new reality rather quickly because the new technologies have tremendous potential to deliver value for those who adopt them.

Digital twins require accurate and reliable data to be effective
July 2021 , IT in Manufacturing
At the 25th ARC Industry Forum, hosted virtually, many industry experts gave their perspectives on accelerating digital transformation in the post-Covid world.

Frequency analysis without programming requirements
July 2021, Beckhoff Automation , IT in Manufacturing
Beckhoff expands TwinCAT Analytics with easy-to-configure condition monitoring functions.

Siemens adds AI to Simcenter
July 2021, Siemens Digital Industries , IT in Manufacturing
Siemens Digital Industries Software has announced the latest release of Simcenter Studio software, a web application dedicated to discovering better system architectures, faster. Simcenter Studio offers ...

ABB technology can help make SA steel industry competitive
June 2021, ABB South Africa , IT in Manufacturing
South Africa’s steel industry needs to invest in technology like automation and data analytics if it is to improve its productivity to the point where it is globally competitive.

Siemens expands CFD simulations
June 2021, Siemens Digital Industries , IT in Manufacturing
Siemens’ Simcenter portfolio expands capabilities for frontloading computational fluid dynamics (CFD) simulation and increased productivity.

Digital twin for refinery production
June 2021, Yokogawa South Africa , IT in Manufacturing
Within Repsol’s Industrial Business, the development of a refinery digital twin leads the digitalisation program. The digital twin maximises production while optimising energy consumption.

Building secure networks
June 2021, RJ Connect , IT in Manufacturing
This article explores how to build resilient industrial networks and deploy cybersecurity defences in order to sustain continuous industrial operations.

Machine learning optimizes real-time inspection of instant noodle packaging
April 2021, Beckhoff Automation , IT in Manufacturing
The basis for an inspection of products is classifiers, the use of which enables flawless products to be distinguished from faulty ones.