War of the worlds – exploring the juxtaposition between IT and OT security and the impact on supply chain risk

Do you know what’s in your airplane or brand new ‘smart’ manufacturing line? I’ll bet you know more about your traditional IT environment than you do about your newly installed and commissioned OT environment.

When we architect, build and deploy a system we tend to understand the components which make it work, and how to adequately secure them. Traditionally, we have been in a position to breakdown a system into its corresponding components and identify rouge components, but how do you effectively manage this risk in the evolving OT and IoT space?

From rouge 4G/5G remote access solutions through to EOL software in your brand-new system, this talk will examine the differences and similarities between managing an IT and OT environment, including how supply chain security is playing an even bigger role today than ever before. I will discuss some of my own lessons when it comes to assessing and reviewing OT networks and how our traditionally IT focused approach to security doesn’t always work.