When cyber meets physical: A roller coaster ride through risk management

• Cyber-physical systems require a dual focus: engineering and cybersecurity
• Assessing cyber-physical risks is a continuous process, evolving alongside technology and emerging threats

In the world of cybersecurity, it seems like experts can’t agree on anything — especially when it comes to the terms surrounding IT/OT convergence. One might think that the term “convergence” refers to a delightful fusion of Information Technology (IT) and Operational Technology (OT), like a perfect cup of teh tarik. However, the reality is more akin to a Malaysian family gathering, where everyone is debating whether the rendang was made right. Some say IT and OT should work together seamlessly, while others insist, they’re better off in their own corners, throwing passive-aggressive comments about who made the best sambal. These disagreements set the stage for the challenges we face in understanding cyber-physical systems.

Let’s break down the difference between information systems and physical systems. Think of an information system as your favorite online shopping platform. If something goes wrong — like a glitch that prevents you from checking out your cart — you…