5 Cybersecurity Myths Preventing Organizations from Managing Real Risk to Industrial Control Systems (ICS)
Summary: Dragos outlines five misconceptions it says keep organizations from reducing risk to ICS/OT environments, including the belief that air gaps still isolate these systems and that IT detection tools work equally well in OT. The article cites the Oldsmar water treatment facility breach as evidence ICS/OT environments face real risk, and notes Dragos experts have found Windows AV destroying ICS applications because heuristics engines were not tuned for how ICS functions.
What's compelling: The article states that even organizations that air gap their ICS from enterprise networks often remain connected to vendor and integrator networks set up for maintenance and support, which serve as a conduit for threats. Dragos also reports being called to incidents where IT security tools brought down or lagged critical systems, meaning the assumption that IT controls transfer cleanly to OT carries operational consequences.
Read the original at Dragos Blog ↗
- Topics
- OT / ICS & Critical Infrastructure
- Related
- Siemens RUGGEDCOM APE1808 Cyber Risks · Nov 12, 2026How to Assess OT Incident Response Preparedness Cyber Risks · Nov 10, 2026Three China-Nexus Espionage Campaigns Linked Through Sparrow Malware Ecosystem Cyber Risks · Nov 10, 2026