Operational Technology controls physical processes, so cyber risks can disrupt safety, reliability, and availability across connected industrial systems.
Search across headline titles and summaries.
Background for this topic.
Operational technology (OT) comprises hardware and software that monitor and control physical processes—such as PLCs, RTUs, HMIs, SCADA, and DCS—in manufacturing, utilities, transport, and buildings. Its assets include controllers, sensors, actuators, engineering workstations, and the networks linking them. OT depends on precise timing, reliable communications, and safe states; outages or incorrect commands can stop production or affect physical safety, even when little sensitive data is involved.
Security concerns arise where OT connects to enterprise networks, vendor remote-access paths, or internet-facing services. Legacy protocols and long-lived devices may lack authentication, encryption, logging, or practical patching options. A compromise could alter setpoints, inhibit alarms, or disrupt availability, but impact depends on process design and safeguards. Defenders typically segment control networks, restrict and monitor remote access, maintain asset and dependency inventories, use passive monitoring where active scanning is risky, and test recovery and safe manual operation. Vulnerability management must account for maintenance windows, vendor support, and safety validation rather than treating every patch like IT.
ServiceNow is set to acquire Armis for $7.75bn in a cash-only deal expected to close in the second half of 2026
Acquisition Streamlines Security Operations From Asset Discovery to RemediationAI software company ServiceNow has entered into an agreement to buy cyber exposure management and security company Armis for $7.75 billion in cash. The deal will bolster ServiceNow's cybersecurity offerings at a time when many larger technology vendors are choosing to expand their security portfolios.
International Coalition Highlights Security Risks in OT’s Rush to AIHurriedly integrating AI into industrial systems isn't the wisest idea, the U.S. Cybersecurity and Infrastructure Security Agency and its domestic and international partners warned earlier this month. "We don't want [operators] treating AI like a magical black box," explained a CISA official.