Executive Edge: Peer Insights - Complexity at the intersection of IT and OT

Operational technology (OT) systems have traditionally been a fertile environment for cyberattackers. Today, digital transformation is tightly integrating OT systems with traditional information technology (IT) systems and frameworks, creating a hairball of complexity and increasing vulnerability to cyberattacks.

This brand new Peer Insights guide captures key insights and perspectives from industry experts in technology, utilities, manufacturing, and more, on their IT/OT cybersecurity journeys. Each chapter, authored by a senior security leader, shares their actionable advice and real-world examples that will help you apply these learnings to your own IT/OT infrastructure and drive change within your organisation.

The guide comes at a critical time for security leaders seeking new solutions to streamline security, reduce complexity, and keep pace with present and future threats across the IT/OT environment.

Overview & Authors

Thierry Karsenti VP, EMEA Technical Solutions Palo Alto Networks	Introduction - The strategic imperative for OT/IT convergence Securing OT represents an entirely new set of challenges and threats as it becomes tightly integrated with traditional IT systems. New mindsets and strategies are crucial for securing mission-critical OT systems in key vertical markets, such as manufacturing and utilities.
Anirudha Dambal Head of Services for Process Automation Siemens	1. The new operational technology mindset OT teams have traditionally prioritised safety, availability, and reliability, but digital transformation, growing data volumes, and increasingly sophisticated cyberattacks are putting new emphasis on security-focused requirements. Ensuring cybersecurity readiness in OT/IT convergence requires a new OT mindset that considers financial, operational, regulatory, and technological implications, and delivers defense in depth.
Laurent Guerin VP - CISO CMA CGM	2. Modern technology matters when securing OT systems Most OT systems were designed in an era when the architecture was engineered without cybersecurity expertise and OT/IT connectivity. Today’s systems – and those in the future – must be built with modern security risks in mind from the start. How can organisations ensure that OT systems can evolve with new and emerging technologies, while remaining secure against growing cyberthreats?
Jean-Charles Hardouin CIO Arkema	3. Compliance can be complex when OT and IT converge: Try a simpler approach Compliance in manufacturing usually centres on ensuring a safe working environment for employees. With increasing data volumes and connected devices, and the adoption of AI and other technologies, manufacturers must be hyper-vigilant in protecting data, user identities, and credentials. All these requirements have stringent regulatory demands, made even more challenging by the intersection of OT and IT, but there are ways to simplify approaches to compliance.
Philippe Netzer-Joly Group Chief Cybersecurity Officer Arkema
Edwin Erckens Chief Digital Technology Officer UCB	4. Managing divergent OT and IT teams for cybersecurity excellence In many organisations, the mindsets and experiences of OT and IT professionals are miles apart. This is especially true for cybersecurity, where different priorities and approaches can create friction. Bridging that gap is crucial to protecting OT/IT systems. How can organisations create the right environment for these teams to collaborate and thrive?
Mark Cunningham IT/OT Evangelist A leading energy company	5. Leveraging the cloud to overcome and manage OT/IT cybersecurity complexity OT systems are following the path blazed by IT in developing, deploying, and running workloads in the cloud. This opens up myriad cybersecurity risks—especially considering the massive proliferation of devices and data resulting from converged workloads in the cloud. To tackle complexity in converging OT/IT environments, organisations need to embrace the inevitable shift to the cloud and implement stronger, more resilient cyber defences.
Alfonso Álvarez Global IT/OT Lead Exolum	6. Now what? Steps organisations can take today to secure OT/IT environments for the future This guide has covered OT/IT cybersecurity from a variety of perspectives. Now, it’s time to take action. Organisations need new defensive strategies that can keep pace with new, hyper-intelligent threats across the OT/IT environment. What are the most important steps that you should take to position your organisation for success – both now and in the future – when securing OT/IT systems?