The Cyber Defense eMagazine November Edition for 2023

Unlike IT cybersecurity attacks, which primarily jeopardize data, OT cybersecurity breaches threaten not
only the integrity of information but also the functionality and safety of the spaces we inhabit.
The number of cyberattacks involving OT systems has steadily increased in recent years. Several factors
contribute to this trend, including inadequately protected cybersecurity environments, the influx of new
Internet of Things (IoT) devices and connected systems, and the escalating complexity of securing OT
systems. These challenges highlight the need for organizations to prioritize the security of these critical
systems.
In tandem with the surge in attack incidents, the global cost of cybercrime is also increasing, with a portion
of the multi-trillion dollar cybercrime industry cost being attributed to attacks on operational technology
environments. This emphasizes the escalating threat to OT environments and highlights the urgency for
organizations to bolster their cybersecurity measures to protect against attacks, especially given the
critical role OT systems play in the safe and effective operation of industrial processes. As the
cybersecurity threat landscape continues to expand within both OT and IT, it is paramount for
organizations to proactively stay ahead of the curve.
When speaking about OT cybersecurity attacks in buildings, it is imperative to understand that buildings
are not just physical structures but instead, they serve as the vital hubs of modern life, encompassing
offices, entertainment facilities, factories, hospitals and more. However, this centrality makes them an
attractive target for cyberattacks. Equipped with various smart systems like access control, heating,
ventilation, and air conditioning (HVAC) and lighting, buildings have become increasingly digital, but this
digitalization also exposes them to vulnerabilities. As the lines blur between the physical and digital
worlds, attackers exploit new avenues to infiltrate these spaces.
To enhance a building’s resilience against OT attacks, cybersecurity governance stakeholders, from
facility managers, operators to CISOs should adopt a layered security approach. This method begins with
a comprehensive security assessment to understand assets and how they communicate with each other.
Once an assessment has been completed, key stakeholders can identify vulnerabilities, create a secure
configuration and design plan that prioritizes critical assets while also selecting additive cybersecurity
appliances and software to bolster defenses. From there, operators can begin to implement holistic
cybersecurity monitoring and importantly create an incident readiness plan to be prepared in case of any
future incidents. This convergence provides real-time threat detection and response capabilities,
bolstering a building's defense against cyberattacks. However, while these are just a few of the steps
building owners and operators can take to reduce vulnerabilities, each plan will vary based on the
building's security risk requirements and budget.
The intersection of OT and IT cybersecurity in the built environment requires a comprehensive approach.
It necessitates a collective understanding that buildings are not just physical spaces but also digital
ecosystems. The future demands a holistic approach to OT security, aligning IT and building
management to safeguard the spaces we rely on.
Cyber Defense eMagazine – November 2023 Edition 67
Copyright © 2023, Cyber Defense Magazine. All rights reserved worldwide.