OT/ICS Security: Protecting Critical Infrastructure

IT/OT convergence creates new security challenges.

OT vs IT Security

IT: Confidentiality first
OT: Availability first
IT: Regular patching
OT: Change averse
IT: 3-5 year lifecycle
OT: 15-25 year lifecycle

Common ICS Threats

- Nation-state attacks
- Ransomware (Colonial Pipeline)
- Insider threats
- Supply chain compromise

Security Frameworks

- NIST SP 800-82
- IEC 62443
- NERC CIP (energy)
- Purdue Model