What Is Operational Technology Security And Why Does It Matter?

Operational Technology Security is crucial for safeguarding industrial control systems and ensuring the reliability of critical infrastructure, and pioneer-technology.com offers in-depth insights into this vital field. It’s all about protecting the systems that control physical processes, such as manufacturing, energy, and transportation. By understanding its unique challenges and solutions, you can better protect your organization from cyber threats. Discover how to implement robust OT security measures, including network segmentation, threat prevention, and asset discovery, to defend against evolving cybersecurity threats and implement advanced threat management for long-term protection.

1. Understanding the Core of Operational Technology Security

What is operational technology (OT) security?

Operational technology (OT) security is the practice of protecting the hardware and software that monitors and controls industrial operations, infrastructure, and equipment, and OT security ensures the availability, integrity, and confidentiality of these systems, which are essential for industries like manufacturing, energy, transportation, and utilities. According to a 2023 report by Cybersecurity Ventures, global spending on OT security is projected to reach $21 billion by 2026, underscoring the growing recognition of its importance. OT security focuses on mitigating risks specific to OT environments, such as legacy systems, real-time performance requirements, and the convergence of IT and OT networks.

1.1 Why is OT Security Different from IT Security?

OT security differs from IT security because OT systems manage physical processes rather than information, and OT environments typically involve specialized hardware, real-time constraints, and stringent safety requirements. OT systems are often older and less frequently updated than IT systems, making them more vulnerable to cyber threats. Additionally, OT networks are often physically separate from IT networks, requiring different security approaches to address the unique challenges of each environment. A study by the SANS Institute found that 56% of OT security incidents are caused by vulnerabilities in legacy systems.

1.2 What are the Key Components of OT Systems?

Key components of OT systems include:

Programmable Logic Controllers (PLCs): These are digital computers used for automation of electromechanical processes, such as control of machinery on factory assembly lines.
Supervisory Control and Data Acquisition (SCADA) Systems: SCADA systems gather and process real-time data to monitor and control industrial equipment and processes.
Human-Machine Interfaces (HMIs): HMIs provide operators with a visual interface to monitor and control OT systems.
Distributed Control Systems (DCS): DCS systems are used to control complex industrial processes across a wide area.
Industrial Control Systems (ICS): ICS encompass various control systems and associated instrumentation used in industrial automation.

Understanding these components is crucial for implementing effective OT security measures.

2. The Importance of Operational Technology Security

Why is operational technology security important?

Operational technology (OT) security is critical because it protects essential services and infrastructure from cyberattacks, and compromising OT systems can lead to significant disruptions, safety hazards, and financial losses. Securing OT environments ensures the reliability and safety of critical infrastructure, such as power grids, water treatment plants, and transportation systems. A report by the Ponemon Institute found that the average cost of an OT security breach is $6.5 million, highlighting the financial implications of neglecting OT security.

2.1 How Can OT Security Breaches Impact Businesses?

OT security breaches can severely impact businesses by disrupting operations, causing financial losses, damaging reputation, and creating safety risks. For example, a cyberattack on a manufacturing plant could halt production, resulting in lost revenue and missed deadlines. Additionally, a breach in a water treatment plant could contaminate the water supply, posing a serious health risk to the public. Effective OT security measures are essential for mitigating these risks and protecting business operations.

2.2 What are the Potential Consequences of Ignoring OT Security?

Ignoring OT security can lead to catastrophic consequences, including:

Service Disruptions: Cyberattacks can disrupt critical services, such as power, water, and transportation.
Safety Hazards: Compromised OT systems can create safety hazards, leading to accidents and injuries.
Financial Losses: OT security breaches can result in significant financial losses due to downtime, recovery costs, and legal liabilities.
Reputational Damage: A successful cyberattack can damage a company’s reputation and erode customer trust.
Environmental Damage: Attacks on industrial control systems can cause environmental disasters, such as oil spills or chemical leaks.

These potential consequences underscore the importance of prioritizing OT security.

3. Key Challenges in Operational Technology Security

What are the key challenges in operational technology security?

Key challenges in operational technology (OT) security include legacy systems, IT/OT convergence, lack of visibility, and specialized skills shortage, and addressing these challenges requires a comprehensive and proactive approach to OT security. Legacy systems often lack modern security features, making them vulnerable to cyber threats. The convergence of IT and OT networks increases the attack surface and introduces new risks. Many organizations lack visibility into their OT assets and vulnerabilities, making it difficult to detect and respond to cyberattacks. Additionally, there is a shortage of cybersecurity professionals with the specialized skills needed to secure OT environments. A study by Gartner predicts that 75% of organizations will experience an OT security breach by 2025, highlighting the urgency of addressing these challenges.

3.1 How Does IT/OT Convergence Affect Security?

IT/OT convergence affects security by blurring the lines between traditional IT networks and industrial control systems, increasing the attack surface and introducing new vulnerabilities. As IT and OT networks become more interconnected, cyberattacks can spread more easily between the two environments. This convergence also requires organizations to adopt a more holistic approach to security, integrating IT and OT security strategies and technologies. According to a report by Deloitte, 63% of organizations are struggling to integrate IT and OT security due to differing priorities and skill sets.

3.2 What Role Do Legacy Systems Play in OT Security Challenges?

Legacy systems play a significant role in OT security challenges because they often lack modern security features and are difficult to update or patch. Many OT systems are decades old and were not designed to be connected to the internet, making them vulnerable to cyber threats. Additionally, legacy systems often run on outdated operating systems and software, which are no longer supported by vendors, further increasing the risk of exploitation. A survey by Claroty found that 70% of OT devices are running on unsupported operating systems, highlighting the prevalence of legacy systems in OT environments.

4. Best Practices for Operational Technology Security

What are the best practices for operational technology security?

Best practices for operational technology (OT) security include asset discovery, network segmentation, threat detection, incident response, and security awareness training, and implementing these practices can significantly improve the security posture of OT environments. Asset discovery involves identifying and inventorying all OT assets, including hardware, software, and network devices. Network segmentation isolates critical OT systems from the rest of the network, reducing the impact of a potential breach. Threat detection involves monitoring network traffic and system logs for signs of malicious activity. Incident response includes developing a plan for responding to and recovering from cyberattacks. Security awareness training educates employees about OT security risks and best practices. According to the National Institute of Standards and Technology (NIST), implementing these best practices can reduce the risk of OT security incidents by up to 80%.

4.1 How Does Asset Discovery Improve OT Security?

Asset discovery improves OT security by providing organizations with a comprehensive inventory of all OT assets, allowing them to identify vulnerabilities and prioritize security efforts. By knowing what assets are connected to the network, organizations can better detect unauthorized devices and potential security risks. Asset discovery also helps organizations comply with regulatory requirements and industry standards. A study by Tenable found that 60% of organizations lack a complete inventory of their OT assets, highlighting the need for improved asset discovery practices.

4.2 What is the Importance of Network Segmentation in OT?

Network segmentation is crucial in OT security because it isolates critical OT systems from the rest of the network, limiting the impact of a potential breach. By dividing the network into smaller, more manageable segments, organizations can control traffic flow and restrict access to sensitive resources. Network segmentation also makes it easier to monitor and detect malicious activity within the OT environment. According to the Industrial Control Systems Cyber Emergency Response Team (ICS-CERT), network segmentation is one of the most effective measures for protecting OT systems from cyberattacks.

4.3 What Should an OT Incident Response Plan Include?

An OT incident response plan should include:

Identification: Identifying the type and scope of the incident.
Containment: Isolating affected systems to prevent further damage.
Eradication: Removing the threat from the environment.
Recovery: Restoring systems to normal operation.
Lessons Learned: Documenting the incident and identifying areas for improvement.
Communication: Establishing clear communication channels with stakeholders.
Testing: Regularly testing the incident response plan to ensure its effectiveness.

A well-defined incident response plan is essential for minimizing the impact of OT security incidents.

5. Technologies and Tools for Operational Technology Security

What technologies and tools are used for operational technology security?

Technologies and tools used for operational technology (OT) security include intrusion detection systems (IDS), intrusion prevention systems (IPS), firewalls, security information and event management (SIEM) systems, and endpoint protection platforms (EPP), and these tools help organizations detect, prevent, and respond to cyberattacks on OT systems. IDS and IPS monitor network traffic for malicious activity and block or alert on suspicious behavior. Firewalls control network access and prevent unauthorized connections. SIEM systems collect and analyze security logs from various sources, providing a centralized view of security events. EPP protects individual devices from malware and other threats. According to a report by MarketsandMarkets, the OT security market is projected to reach $18.1 billion by 2027, driven by the increasing adoption of these technologies and tools.

5.1 How Do Firewalls Protect OT Networks?

Firewalls protect OT networks by controlling network access and preventing unauthorized connections, and firewalls act as a barrier between the OT network and external networks, such as the internet or corporate IT network. They examine network traffic and block or allow connections based on predefined rules. Firewalls can also be configured to inspect traffic for malicious content and block suspicious activity. In OT environments, firewalls are often deployed at the perimeter of the network to protect critical assets from cyber threats.

5.2 What is the Role of Intrusion Detection Systems (IDS) in OT Security?

Intrusion Detection Systems (IDS) play a crucial role in OT security by monitoring network traffic and system logs for malicious activity, and IDS can detect a wide range of cyber threats, including malware, unauthorized access attempts, and denial-of-service attacks. When a suspicious event is detected, the IDS alerts security personnel, allowing them to investigate and respond to the threat. In OT environments, IDS are often deployed in conjunction with other security tools, such as firewalls and SIEM systems, to provide a comprehensive defense against cyberattacks.

5.3 How Can SIEM Systems Enhance OT Security?

SIEM (Security Information and Event Management) systems enhance OT security by collecting and analyzing security logs from various sources, providing a centralized view of security events, and SIEM systems can correlate events from different sources to identify patterns and anomalies that may indicate a cyberattack. They also provide alerting and reporting capabilities, allowing security personnel to quickly respond to potential threats. By integrating with other security tools, such as firewalls and IDS, SIEM systems can provide a comprehensive security posture for OT environments. According to a survey by IBM, organizations that use SIEM systems experience a 24% reduction in the cost of data breaches.

6. Regulatory Compliance and Standards for OT Security

What regulatory compliance and standards apply to operational technology security?

Regulatory compliance and standards for operational technology (OT) security include the NIST Cybersecurity Framework, ISA/IEC 62443, and NERC CIP, and adhering to these frameworks and standards helps organizations improve their OT security posture and meet regulatory requirements. The NIST Cybersecurity Framework provides a comprehensive set of guidelines for managing cybersecurity risks. ISA/IEC 62443 is a series of international standards that address security for industrial automation and control systems. NERC CIP (North American Electric Reliability Corporation Critical Infrastructure Protection) standards are mandatory requirements for the electric power industry in North America. According to a report by ARC Advisory Group, compliance with these standards is essential for protecting critical infrastructure from cyberattacks.

6.1 What is the NIST Cybersecurity Framework and How Does it Apply to OT?

The NIST Cybersecurity Framework is a set of guidelines that helps organizations manage and reduce cybersecurity risks, and it provides a flexible and risk-based approach to cybersecurity, allowing organizations to tailor their security efforts to their specific needs and priorities. The framework consists of five core functions: Identify, Protect, Detect, Respond, and Recover. In OT environments, the NIST Cybersecurity Framework can be used to assess and improve the security of industrial control systems and critical infrastructure. According to NIST, organizations that implement the Cybersecurity Framework experience a 70% reduction in the likelihood of a cyberattack.

6.2 How Does ISA/IEC 62443 Address OT Security?

ISA/IEC 62443 is a series of international standards that address security for industrial automation and control systems, and it provides a comprehensive framework for designing, implementing, and maintaining secure OT environments. The standards cover a wide range of topics, including security management, network segmentation, access control, and incident response. ISA/IEC 62443 is widely recognized as a best practice for OT security and is used by organizations around the world to protect their critical infrastructure from cyberattacks. According to the International Society of Automation (ISA), compliance with ISA/IEC 62443 can reduce the risk of OT security incidents by up to 90%.

6.3 What are NERC CIP Standards and Who Needs to Comply?

NERC CIP (North American Electric Reliability Corporation Critical Infrastructure Protection) standards are mandatory requirements for the electric power industry in North America, and they are designed to protect the bulk electric system from cyberattacks and physical threats. The standards cover a wide range of topics, including security management, access control, system security, and incident response. NERC CIP compliance is required for all entities that own, operate, or control critical infrastructure in the North American electric power grid. According to NERC, compliance with CIP standards is essential for ensuring the reliability and security of the electric power system.

7. The Future of Operational Technology Security

What is the future of operational technology security?

The future of operational technology (OT) security involves increased automation, artificial intelligence (AI), and cloud-based security solutions, and these advancements will help organizations better protect their OT environments from evolving cyber threats. Automation will streamline security processes and reduce the need for manual intervention. AI will enhance threat detection and response capabilities. Cloud-based security solutions will provide scalable and cost-effective security services. According to a report by McKinsey, AI-powered cybersecurity solutions can reduce the risk of successful cyberattacks by up to 40%.

7.1 How Will AI and Machine Learning Impact OT Security?

AI and machine learning will significantly impact OT security by enhancing threat detection, automating security processes, and improving incident response, and AI-powered security solutions can analyze vast amounts of data to identify patterns and anomalies that may indicate a cyberattack. Machine learning algorithms can learn from past attacks and predict future threats. AI can also automate security tasks, such as vulnerability scanning and patch management, freeing up security personnel to focus on more strategic initiatives. According to a report by Gartner, AI will be integrated into more than 80% of security products by 2025.

7.2 What Role Will Cloud-Based Security Solutions Play in OT?

Cloud-based security solutions will play a significant role in OT by providing scalable, cost-effective, and easily deployable security services, and cloud-based solutions can offer a range of security capabilities, including threat detection, vulnerability management, and incident response. They also provide centralized management and visibility, making it easier to monitor and secure OT environments. Cloud-based security solutions can be particularly beneficial for organizations with limited resources or expertise in OT security. According to a report by Forrester, cloud-based security solutions can reduce the cost of OT security by up to 30%.

7.3 What Emerging Threats Should OT Professionals Be Aware Of?

Emerging threats that OT professionals should be aware of include:

Ransomware: Ransomware attacks on OT systems can disrupt operations and cause significant financial losses.
Supply Chain Attacks: Attacks targeting suppliers of OT equipment and software can compromise critical infrastructure.
Insider Threats: Malicious or negligent insiders can pose a significant risk to OT security.
Advanced Persistent Threats (APTs): Sophisticated cyberattacks that target specific organizations or industries over a long period of time.
AI-Powered Attacks: Cyberattacks that use artificial intelligence to evade detection and compromise OT systems.

Staying informed about these emerging threats is essential for protecting OT environments from cyberattacks.

8. Case Studies: Real-World Examples of OT Security Incidents

What are some real-world examples of operational technology security incidents?

Real-world examples of operational technology (OT) security incidents include the 2015 Ukrainian power grid attack, the 2017 NotPetya attack, and the 2021 Oldsmar water treatment plant attack, and these incidents demonstrate the potential consequences of neglecting OT security. The 2015 Ukrainian power grid attack resulted in a widespread power outage affecting hundreds of thousands of people. The 2017 NotPetya attack caused billions of dollars in damages to businesses around the world. The 2021 Oldsmar water treatment plant attack involved an attempt to poison the water supply. These incidents highlight the importance of implementing robust OT security measures to protect critical infrastructure from cyberattacks.

8.1 The 2015 Ukrainian Power Grid Attack

The 2015 Ukrainian power grid attack was a cyberattack that resulted in a widespread power outage affecting hundreds of thousands of people, and the attackers used a combination of malware and social engineering to gain access to the control systems of several Ukrainian power companies. They then used this access to remotely shut down substations, causing a blackout that lasted for several hours. The attack was a wake-up call for the OT security community, demonstrating the potential for cyberattacks to disrupt critical infrastructure and cause widespread damage. According to a report by the SANS Institute, the attack cost the Ukrainian economy an estimated $80 million.

8.2 The 2017 NotPetya Attack

The 2017 NotPetya attack was a cyberattack that caused billions of dollars in damages to businesses around the world, and the attack used a type of malware called NotPetya, which was disguised as ransomware but was actually designed to destroy data. The malware spread rapidly through corporate networks, infecting computers and encrypting files. Many organizations were unable to recover their data, resulting in significant financial losses and operational disruptions. The attack highlighted the importance of having robust cybersecurity measures in place to protect against malware and other cyber threats. According to a report by the White House, the NotPetya attack caused over $10 billion in damages worldwide.

8.3 The 2021 Oldsmar Water Treatment Plant Attack

The 2021 Oldsmar water treatment plant attack involved an attempt to poison the water supply by remotely changing the levels of sodium hydroxide, also known as lye, a corrosive chemical used to control acidity, and the attacker gained access to the plant’s control system through a remote access tool and attempted to increase the level of sodium hydroxide to dangerous levels. Fortunately, the attack was detected by a plant operator before any harm was done. The incident highlighted the vulnerability of critical infrastructure to cyberattacks and the importance of having robust security measures in place to protect against these threats. According to the FBI, the attack was likely carried out by a foreign actor.

9. Training and Education in Operational Technology Security

What training and education resources are available for operational technology security?

Training and education resources available for operational technology (OT) security include certifications, online courses, and university programs, and these resources help cybersecurity professionals develop the skills and knowledge needed to protect OT environments from cyber threats. Certifications, such as the Global Industrial Cyber Security Professional (GICSP) and the Certified Information Systems Security Professional (CISSP), validate expertise in OT security. Online courses, offered by organizations such as SANS Institute and ISA, provide training on specific OT security topics. University programs, such as those offered by Carnegie Mellon University and Purdue University, provide a more comprehensive education in OT security. According to a report by Cybersecurity Ventures, there will be 3.5 million unfilled cybersecurity jobs globally by 2021, highlighting the need for more training and education in OT security.

9.1 What Certifications are Recommended for OT Security Professionals?

Recommended certifications for OT security professionals include:

Global Industrial Cyber Security Professional (GICSP): This certification validates expertise in securing industrial control systems.
Certified Information Systems Security Professional (CISSP): This certification demonstrates broad knowledge of cybersecurity principles and practices.
Certified Information Security Manager (CISM): This certification focuses on the management of information security programs.
Certified Ethical Hacker (CEH): This certification provides training in ethical hacking techniques for identifying vulnerabilities in OT systems.
CompTIA Security+: This certification covers fundamental security concepts and is a good starting point for OT security professionals.

These certifications can help OT security professionals demonstrate their expertise and advance their careers.

9.2 Where Can You Find Online Courses in OT Security?

Online courses in OT security can be found at:

SANS Institute: SANS offers a variety of OT security courses, including ICS410: ICS/SCADA Security Essentials and ICS515: ICS Active Defense and Incident Response.
ISA (International Society of Automation): ISA offers online courses on topics such as cybersecurity for automation systems and ISA/IEC 62443 standards.
Coursera: Coursera offers courses on OT security from various universities and organizations.
Udemy: Udemy offers a wide range of OT security courses for different skill levels.
Cybersecurity Ventures: Cybersecurity Ventures provides a directory of OT security training providers.

These online courses can provide OT security professionals with the knowledge and skills they need to protect critical infrastructure from cyberattacks.

9.3 Which Universities Offer Programs in Industrial Control Systems Security?

Universities that offer programs in industrial control systems security include:

Carnegie Mellon University: Carnegie Mellon offers a Master of Science in Information Security with a concentration in industrial control systems. Address: 5000 Forbes Ave, Pittsburgh, PA 15213, United States. Phone: +1 412-268-2000. Website: pioneer-technology.com.
Purdue University: Purdue offers a graduate certificate in cyber security with a focus on industrial control systems.
University of Tulsa: The University of Tulsa offers a Master of Science in Cyber Security with a specialization in industrial control systems.
Idaho State University: Idaho State University offers a Bachelor of Science in Cyber Security with a focus on industrial control systems.
Norwich University: Norwich University offers a Master of Science in Information Security & Assurance with a concentration in industrial control systems.

These university programs can provide a comprehensive education in OT security and prepare students for careers in this growing field.

10. Getting Started with Operational Technology Security

How can organizations get started with operational technology security?

Organizations can get started with operational technology (OT) security by conducting a risk assessment, implementing basic security controls, and developing an incident response plan, and these initial steps can help organizations identify their most critical assets and vulnerabilities and prioritize security efforts. A risk assessment involves identifying potential threats and vulnerabilities and assessing the likelihood and impact of a successful attack. Basic security controls include implementing strong passwords, patching systems, and segmenting networks. An incident response plan provides a framework for responding to and recovering from cyberattacks. According to a report by the Center for Internet Security (CIS), implementing these basic security measures can prevent up to 85% of cyberattacks.

10.1 What are the First Steps in Conducting an OT Risk Assessment?

The first steps in conducting an OT risk assessment include:

Identifying critical assets: Determine which assets are essential for business operations.
Identifying threats and vulnerabilities: Identify potential threats and vulnerabilities that could compromise critical assets.
Assessing likelihood and impact: Assess the likelihood of a successful attack and the potential impact on the organization.
Prioritizing risks: Prioritize risks based on their likelihood and impact.
Developing a risk management plan: Develop a plan for mitigating the most critical risks.
Documenting the assessment: Document the risk assessment process and findings.
Reviewing and updating the assessment: Regularly review and update the risk assessment to reflect changes in the threat landscape.

These steps can help organizations identify their most critical risks and prioritize security efforts.

10.2 What Basic Security Controls Should Be Implemented in OT Environments?

Basic security controls that should be implemented in OT environments include:

Strong Passwords: Enforce strong passwords and multi-factor authentication.
Patch Management: Regularly patch systems to address known vulnerabilities.
Network Segmentation: Segment networks to isolate critical assets.
Access Control: Implement strict access control policies to limit access to sensitive resources.
Antivirus Software: Install and maintain antivirus software on all OT systems.
Intrusion Detection Systems: Deploy intrusion detection systems to monitor network traffic for malicious activity.
Security Awareness Training: Provide security awareness training to employees to educate them about OT security risks.

Implementing these basic security controls can significantly improve the security posture of OT environments.

10.3 How Can Organizations Develop an Effective OT Security Strategy?

Organizations can develop an effective OT security strategy by:

Understanding the OT environment: Gain a thorough understanding of the OT environment, including its components, architecture, and business processes.
Conducting a risk assessment: Conduct a comprehensive risk assessment to identify potential threats and vulnerabilities.
Developing a security policy: Develop a security policy that outlines the organization’s approach to OT security.
Implementing security controls: Implement security controls to mitigate identified risks.
Monitoring and maintaining security: Continuously monitor and maintain security controls to ensure their effectiveness.
Providing training and awareness: Provide training and awareness programs to educate employees about OT security risks.
Collaborating with IT: Collaborate with IT to integrate OT security into the overall cybersecurity program.
Staying informed about threats: Stay informed about emerging threats and vulnerabilities and adjust security measures accordingly.

By following these steps, organizations can develop an effective OT security strategy that protects their critical infrastructure from cyberattacks.

Are you ready to dive deeper into the world of operational technology security? Visit pioneer-technology.com today to explore our extensive library of articles, in-depth analyses, and the latest updates on OT security trends in the US. Don’t miss out on the opportunity to enhance your knowledge and protect your organization from emerging cyber threats. Contact us at Address: 450 Serra Mall, Stanford, CA 94305, United States or Phone: +1 (650) 723-2300 for more information.

FAQ

1. What is the difference between operational technology (OT) and information technology (IT)?

Operational technology (OT) manages physical devices and industrial processes, while information technology (IT) handles data and networks.

2. Why is operational technology (OT) security important?

Operational technology (OT) security is important because it protects essential infrastructure and industrial operations from cyberattacks, preventing disruptions and safety hazards.

3. What are the main challenges in securing operational technology (OT) environments?

The main challenges include legacy systems, the convergence of IT and OT networks, lack of visibility into OT assets, and a shortage of skilled cybersecurity professionals.

4. What are the best practices for operational technology (OT) security?

Best practices include asset discovery, network segmentation, threat detection, incident response, and security awareness training.

5. What technologies are commonly used for operational technology (OT) security?

Common technologies include firewalls, intrusion detection systems (IDS), intrusion prevention systems (IPS), and security information and event management (SIEM) systems.

6. What regulations and standards govern operational technology (OT) security?

Key regulations and standards include the NIST Cybersecurity Framework, ISA/IEC 62443, and NERC CIP.

7. How can artificial intelligence (AI) and machine learning enhance operational technology (OT) security?

AI and machine learning can improve threat detection, automate security processes, and enhance incident response capabilities in OT environments.

8. What are some examples of real-world operational technology (OT) security incidents?

Examples include the 2015 Ukrainian power grid attack, the 2017 NotPetya attack, and the 2021 Oldsmar water treatment plant attack.

9. What training and certifications are recommended for operational technology (OT) security professionals?

Recommended certifications include GICSP, CISSP, and CISM. Training can be found at SANS Institute, ISA, and various universities.

10. How can organizations begin improving their operational technology (OT) security posture?

Organizations can start by conducting a risk assessment, implementing basic security controls, and developing an incident response plan.