Defence / Insights / Cyber & CIP
Cyber & CIP

Securing operational technology in critical sites

The systems that run plant and infrastructure were built for reliability, not security. Protecting them needs a different approach from IT.

Operational technology, the systems that control plant, infrastructure and industrial processes, was built to run reliably for decades, often before cyber security was a concern. As these systems become connected, they inherit cyber risk, but they cannot be secured in the same way as ordinary IT.

Why OT is different

  • Availability and safety often outweigh all else
  • Systems may run old software that cannot be easily patched
  • Downtime for updates can be costly or impossible
  • The consequences of disruption can be physical and severe

A tailored approach

Securing OT means working within these constraints: segmenting it from IT and the internet, controlling and monitoring access tightly, and managing change carefully rather than aggressively patching. The goal is protection without compromising the availability and safety the systems exist to provide.

IT and OT, designed together

As IT and OT converge, their security must be coordinated across both. That is far easier when one accountable team designs the networks, the operational systems and the security as a coherent whole.

Defence & Specialised Technologies

Capabilities are shared confidentially, with authorised organisations only.