Cyber Risks · Dragos Blog

5 Tips for a Happy Marriage Between IT Cybersecurity and Operational Technology Teams

Summary: CrowdStrike's Kris Krewson and Dragos' Lesley Carhart describe consulting in industrial environments where IT cybersecurity and OT teams are often segregated with little interaction, and where OT staff may have built their own disaster recovery plans because no relationship existed with corporate information security. They note that industrial systems can stay in service for one to three decades, that some devices fall out of vendor support yet remain integral to operations, and that some OT personnel did not know they had a corporate IT cybersecurity team until a tabletop exercise revealed it.

What's compelling: If the first time your IT security team hears about a plant incident is when it spreads to the corporate network, the response window is already gone - and the OT staff who could have flagged it may not know your team exists.

Read the original at Dragos Blog ↗

Topics
OT / ICS & Critical Infrastructure
Related
Siemens RUGGEDCOM APE1808 Cyber Risks · Nov 12, 2026