The Production vs Security Myth | OT Security
Security researchers examine technical aspects of The Production vs Security Myth | OT Security.
Summary
The Cultural Divide
Fortinet’s Nate Dan interviews OT specialist Fabio Piam about the persistent belief that plant security and production uptime cannot coexist. Fabio says the myth comes from past IT-led projects that disrupted operations and left lasting scars with operators who measure success in availability.
Different Security Priorities
OT teams prioritize availability of cyber-physical systems, while IT emphasizes confidentiality and integrity of data. Cyber initiatives must be co-designed with plant stakeholders or they are treated as operational risk rather than protection.
Flat Networks and Risk
Fabio warns that flat OT networks let one compromised device reach every process. Mixed brownfield assets—old, unpatched, and critical—need zone-based risk assessment under IEC 62443 rather than uniform treatment.
Segmentation Without Chaos
Good OT segmentation protects manufacturing KPIs: availability, performance, and quality. IT teams assisting segmentation must understand that changes which cause unplanned downtime or scrap undermine the business case for security.
Related talks
Fortinet·4 min
Emergency Connectivity Kit (ECK)
Industry experts analyze emerging threats surrounding Emergency Connectivity Kit (ECK) | OT Security.
Fortinet·3 min
Analysts investigate attack surfaces and defenses concerning Protecting Critical Infrastructure in a Connected World | OT Security Solutions.
Fortinet·16 min
Engineers explore architecture and security mechanisms for From ‘Not My Problem’ to Critical Priority: How Cities Are Taking Control of OT | OT Security.