By Matt Ehrlich
From the February 2020 Issue
Cyberattacks are increasing, and threat actors are continually evolving and looking for easy access. As IT boundaries strengthen, building control systems often offer a path of least resistance for these cyberthreats. In traditional IT, the focus is mitigating risk and solving problems, but in operational technology, organizations often don’t know what risks and problems exist. It’s critical to determine what you know, and recognize where your operational technology (OT) vulnerabilities still exist. Fortunately, there are ways to protect your facility and your organization.
Basics of IT, OT, and IoT. With varying cycles of innovation, keeping up with the landscape of IT, OT, and IoT (Internet of Things) can be complicated. IoT and OT are not the same thing but are related. IoT includes connected devices, while OT involves building controls—things like commercial HVAC, lighting, elevators, access control, water treatment, and power monitoring. This type of OT is commonly referred to as building automation or building management systems. (Critical infrastructure, such as oil and gas, power grid, water control is also considered OT,…
