The Convergence of

OT and IT

OT

Once considered separate business domains employing their own unique

protection systems, operational technology (OT) and information technology (IT)
functions have begun to converge because of shared cybersecurity concerns.
Enterprises facing this important management issue must take proactive
measures (see new White Paper: The Merging of Cybersecurity and Operational
Technology, co-produced by ISACA and ISA at www.isaca.org/CSX-merging-OT).

Business function using hardware

and software in real-time to
monitor, automate changes, and
control various devices, processes
and events in an enterprise.

Business function using hardware,

software, communications or
other facilities used to input,
store, process, transmit and
output data in whatever form.

IT

Mission centered on automation of

machines, processes and systems
within a planttraditionally used
isolated point-to-point networks

Mission centered on the business,

operations and enterprise
information systemstraditionally
used Ethernet or Internet Protocols

Team priorities have strong focus

on availability with emphasis on
integrity and confidentiality

T eam priorities have strong focus

on confidentiality with emphasis on
integrity and availability

As OT systems replace proprietary tools and adopt more IT-like open protocols and
operational practices, well-known IT threats are emerging as new concerns for OT threats

Previous OT security
by obscurity lost to
more open protocols now
securing network

OT system now vulnerable

to access from remote
users, removable media, and
email spear phishing

Physical plant security

controlled by IP-enabled
devicesanother threat
entry point for OT

To reduce the potential enterprise risk and adequately protect both sides of enterprise systems, it is imperative to leverage a
holistic program that brings together OT and IT. For more information, go to www.isaca.org/CSX-merging-OT.

SOURCE: The Merging of Cybersecurity and Operational Technology (http://www/isaca.org/CSX-merging-OT)

2016 ISACA. All rights reserved.