Operational technology environments

Operational technology cyber security – Defend everyday services

Operational technology (OT) is predominantly used to describe industrial control systems (ICS), including supervisory control and data acquisition systems (SCADA), as well as distributed control systems. OT environments - centred on safety, and operational time (uptime) and continuity - are now more interconnected than ever. Interconnection offers significant operational benefits but also introduces risks. Insecure OT connectivity is known to be targeted by malicious actors intending to cause disruption and harm to critical services. These resources help OT organisations to make decisions when designing, putting in place, and managing secure OT environments.

Understand and manage operational technology

Build an understanding of OT environments, maintain visibility of assets and architecture, and apply foundational cyber security principles.

Principles of operational technology cyber security

Learn how to make ‘cyber-smart’ decisions for OT environments when introducing new, or maintaining old, systems, services or processes, selecting vendors or products, and developing business continuity and security plans.

Creating and maintaining a definitive view of your operational technology architecture

Learn the best ways to build and keep an accurate record of your operational technology (OT) systems that will help to identify cyber security risks.

Foundations for OT cybersecurity: Asset inventory guidance for owners and operators

Learn a process to create, maintain, improve and use an operational technology asset list to protect key assets.

Protecting industrial control systems

Industrial control systems are essential to our daily life. They control the water we drink, the electricity we rely on and the transport that moves us all. It is critical that cyber threats to industrial control systems are understood and mitigated appropriately to ensure essential services continue to provide for everyone.

Secure access, connectivity and procurement

Learn how to manage remote access and connectivity, and incorporate security into the procurement of operational technology products and systems.

Industrial control systems: Remote access protocol

Use strong design, configuration and monitoring to control remote access to industrial control systems and reduce cyber risk.

Remote access to operational technology environments

Many critical infrastructure providers are moving to support remote working arrangements. In doing so, modifying cyber security defences for operational technology environments (OTE) is not a decision that should be taken lightly.

Secure connectivity principles for Operational Technology (OT)

Learn key principles to design, implement and manage secure operational technology connectivity.

Secure by Demand

Choose secure operational technology products that help reduce cyber security risks and improve resilience.

Strengthen resilience and adopt emerging technologies

Access guidance to improve service continuity and securely integrate smart technologies and artificial intelligence into operational environments.

CI Fortify

Learn how CI Fortify guidance helps organisations reduce cyber risk, improve resilience, and maintain critical services during crisis or service distruption.

An introduction to securing smart places

Learn about what defines a ‘smart place’, and how to keep connected devices and systems secure within a smart place environment.

Cyber security best practices for smart cities

Learn how to build secure by design smart city infrastructure and apply best practices to protect interconnected systems.

Principles for the secure integration of Artificial Intelligence in Operational Technology

Learn how to securely integrate artificial intelligence into operational technology environments using governance, oversight and risk management principles.

What are you looking for?

Stay secure

Guidance

Resources

Access publications and alerts

Publications

Alerts, advisories and reports

Recover from a cyber incident

How to recover

Where to get help

Submit a report

Report an issue

Regulatory reporting

What we do

About us

News and programs