Flat Networks, Big Risks: The Cybersecurity Gap in OT

Episode Description

In this episode of Decrypting IT, Ashley Wallace and Rich Springer discuss the critical importance of network segmentation in operational technology (OT) environments. They explore the differences between IT and OT networks, common misconceptions about OT security, and the risks of flat networks, with a focus on manufacturing, a sector increasingly targeted by ransomware and nation-state actors.

Takeaways

• IT networks focus on business processes, while OT networks prioritize safety
• Many assume OT networks are air-gapped and don't need cybersecurity; that's a misconception
• Segmentation is crucial for connecting IT and OT networks securely
• 63% of organizations still operate with flat networks, posing significant risk
• Ransomware attacks increasingly target OT infrastructure for its operational impact
• Manufacturing is a primary target due to the value of uninterrupted production
• OT risk is now a top priority for organizational risk management
• Organizations need a strategic approach to OT cybersecurity, not a reactive one
• Patching in OT environments is often neglected due to operational constraints
• Visibility and threat intelligence are essential for effective OT cybersecurity

Guest

Rich Springer

Senior Director of Product Marketing, OT Solutions at Fortinet

Host

Ashley Wallace

Host of Decrypting IT and Client Success Team Lead at Katalyst