Topic

ICS (Page 4)

All articles on ICS.

Map between IEC 62443 requirements and the capabilities of an OT monitoring platform across a segmented industrial network

Compliance

Which OT Monitoring Tools Help with IEC 62443 Compliance

IEC 62443 does not mandate a product, but many of its requirements can only be met with serious OT monitoring: asset inventory, anomaly detection, logging and verified segmentation. Which requirements map to which monitoring capabilities.

4 min read

OT network segmentation with zones, conduits and an IT-OT DMZ

Cybersecurity

OT Network Segmentation: from the Purdue Model to IEC 62443 Zones in Production

Network segmentation is the OT security control with the best cost/effectiveness ratio. From the Purdue model to IEC 62443 zones, how to implement it in production without stopping the plant.

4 min read

Reconstructing an industrial OT network topology from passive traffic monitoring with a PLC SCADA HMI dependency map

Cybersecurity

OT Network Topology: How to Reconstruct It When No Documentation Exists

OT network topology often lives only in a technician's head, or in a 2014 diagram that was never updated. Rebuilding it from scratch with passive traffic monitoring: why it is necessary and how it is done in practice.

6 min read

Four-level chart representing OT security maturity, from blind to operational, with icons for assets, vulnerabilities and detection

Cybersecurity

OT Security Maturity Model: From Zero Visibility to Advanced Detection

A practical four-level framework to assess OT security maturity and build a concrete roadmap. Each level has clear prerequisites, measurable goals and a defined next step.

6 min read

Integration diagram between OT monitoring sensors and a SIEM platform with a SOC, showing normalized data flows and correlation of IT and OT events

Cybersecurity

Integrating OT Monitoring with Existing SIEM and SOC: Data, Formats and Added Value

Many companies already run a SIEM or a managed SOC, but these systems are blind to OT. How to feed OT monitoring events into the SOC, which formats to use and which alerts to escalate.

6 min read

SOC with OT network monitoring sensors and industrial analysis dashboard

Cybersecurity

Building a SOC for OT Environments: Requirements, Tools, and Operational Metrics

An IT SOC cannot see OT environments. Building monitoring capabilities for industrial networks requires different sensors, different skills, and playbooks specific to OT protocols and threats.

4 min read

Vulnerability management dashboard for OT systems with contextualized scoring

Cybersecurity

Vulnerability Management in OT: Why Traditional Patching Does Not Work

In OT environments, traditional patch management is often impossible. Legacy systems, certifications to maintain, very rare maintenance windows: how to build a VM program that actually works.

4 min read

Railway network architecture with SCADA and signalling systems

Cybersecurity

Railway Cybersecurity: Specific Challenges and a Regulatory Approach

Railway networks are becoming more connected and more exposed. An analysis of systems at risk, the regulatory framework and defence strategies for an often overlooked critical infrastructure.

3 min read

Pharmaceutical production line with OT control systems and GMP validation

Compliance

Cybersecurity in Pharmaceutical Manufacturing: OT, GMP and Converging FDA Regulations

Pharma faces strict quality regulations that now overlap with OT cybersecurity needs. How to integrate GMP, FDA 21 CFR Part 11 and IEC 62443 into one coherent program.

3 min read

Industrial network map with indicators of compromise and lateral movement from IT to OT

Cybersecurity

Sandworm and Manufacturing: State APTs Do Not Target Only Large Infrastructure

Sandworm is known for shutting off the lights in Ukraine and launching NotPetya. But its techniques are being replicated against European manufacturing, often as collateral damage. How an APT attack on an industrial OT network works and why SMEs are within range too.

5 min read

SCADA historian server in an industrial server room with connections between the corporate IT network and the OT process network

Cybersecurity

The SCADA Historian as a Lateral Attack Vector from IT to OT

Industrial process historians collect data from PLCs and expose it to business systems. This makes them a natural bridge between IT and OT, and a prime vector for lateral movement.

6 min read

Secure remote access in OT environments: attack vectors and defensive controls

Cybersecurity

Secure remote access in OT environments: the most underestimated attack vector

Remote access to OT environments exploded after the pandemic, but security practices never caught up. Here is why it became the attackers' favorite entry vector.

4 min read