Operational Technology (OT)

In practice

In practice, OT systems in the energy sector have very different security and change management requirements than IT systems - a SCADASupervisory Control and Data Acquisition - system for real-time monitoring and control of industrial processes. system controlling a substation cannot be patched or restarted the same way as a web server. IT/OT convergence creates both opportunities (better data integration, remote monitoring) and risks (increased attack surface). The Purdue modelHierarchical reference model for segmenting industrial control systems into security zones. is the reference framework for segmenting OT from IT networks. NIS2EU directive on network and information security - imposes strict security requirements on critical infrastructure. and the CER DirectiveEU directive on resilience of critical entities - sets requirements for protecting critical infrastructure against physical threats. are increasing regulatory pressure on OT security across the energy sector.

RUNATvimenning's component register for electrical installations - providing structure and traceability for the components installations are built from. supports OT through NIS linkage and asset records, with the option to hold components and documentation belonging to the OT side where desired.