IT/OT convergence creates new security challenges.
OT vs IT Security
IT: Confidentiality first
OT: Availability first
IT: Regular patching
OT: Change averse
IT: 3-5 year lifecycle
OT: 15-25 year lifecycleCommon ICS Threats
- Nation-state attacks
- Ransomware (Colonial Pipeline)
- Insider threats
- Supply chain compromiseSecurity Frameworks
- NIST SP 800-82
- IEC 62443
- NERC CIP (energy)
- Purdue Model