Cross-domain security in converged IT/OT

The industry is experiencing a shift away from isolated operational technology (OT) systems towards a model where those systems are integrated into the enterprise information technology (IT) environment. While this model has many advantages, bridging IT and OT domains also invites new threats that challenge our existing security methods. Specifically, the convergence of IT and OT challenges how we perform and secure cross-domain communications. Many organisations lack the knowledge, expertise and technical rigour required to do cross-domain security effectively. This presentation explores the problem of cross-domain security in converged IT/OT by first defining the problem, then describing the requirements and components of a cross-domain solution (CDS) for converged IT/OT, and finally, providing a CDS reference architecture for converged IT/OT based on best practice from industry and government.