Secure OT Network Planning and Cyber Incident Response

Happy to see that National Cyber Security Centre is also mentioning “Unidirectional Security Gateways” as an important spijtig for physical segmentation and hardening of networks. Waterfall can apply replication of databases, servers and devices based on the native (industrial) protocols for reasons of scalability, performance and data integrity. Quote from NCSC “ Enforce uni-directional traffic flows: Where possible, establish outbound only uni-directional connectivity, to minimise risks from external connections. This approach reduces the potential impact of external systems on your OT systems and ensures their independence from outside influences. At its simplest form this could be using uni-directional protocols such as UDP and network policy enforcement. For high-threat or high-risk environments you may wish to consider further hardware-based security controls.”

An asset inventory tells you what is on your network. It doesn't tell you what those assets can reach, or what can reach them, and that is where the real exposure lives. MTSA's cybersecurity requirements treat these as two separate problems for a reason. Under 33 CFR 101.650, vessels and facilities need a documented inventory of critical IT and OT systems before they can define real segmentation between them. Elan Alvey and I cover both in the latest posts of our MTSA series, using the same crawl, walk, run approach: what counts as a critical system (your vendors are in scope, too), and how to structure OT environments so a contained incident stays contained. MTSA's Asset Inventory Mandate: https://lnkd.in/gEZSXKt9 MTSA's Network Segmentation Requirement: https://lnkd.in/g_Tn5ewx #MTSA #OTCybersecurity #MaritimeCybersecurity #Dragos #SafeguardingCivilization

As organizations grow, managing security across locations can become increasingly complex. Home City Ice addressed this challenge by consolidating disconnected security tools onto the Fortinet Security Fabric, centered on FortiGate NGFWs and FortiGuard AI-Powered Security Services. Read the story to see how an integrated security approach helped support long-term protection and efficiency. @Fortinet

🚨 Exciting news from the cybersecurity realm! The US and Australia have just released guidance on Operational Technology (OT) isolation for critical infrastructure. 🌏🇺🇸 In a world where cyber threats loom larger than ever, this guidance is a game-changer. Here’s why: - **Isolation is the new fortress.** Just as medieval castles protected their inhabitants by keeping enemies at bay, operational isolation can shield vital OT systems from cyber intrusions. The steps outlined will empower organizations to operate in isolation for extended periods, ensuring their core functions remain unscathed. - **History teaches us.** Remember the Stuxnet attack on Iran’s nuclear facilities? It underscored the vulnerabilities within OT environments. Fast forward to today, and we see an urgent need to fortify these systems against increasingly sophisticated threats. - **Future predictions?** As we embrace IoT and smart technologies, the attack surface is set to expand. Organizations that adopt these isolation strategies will not only reduce risks but also pave the way for robust, resilient infrastructure. - **A broader trend?** This guidance aligns with the growing emphasis on zero-trust architecture—where every access point is scrutinized, and no one gets a free pass, not even the insiders. Let’s embrace this proactive stance and prepare for a future where our critical infrastructures are not just reactive, but resilient! Stay informed and engaged—our industry needs your expertise! #Cybersecurity #OTIsolation #CriticalInfrastructure #ainews #automatorsolutions #CyberSecurityAINews ----- Original Publish Date: 2026-07-29 04:03

As organizations grow, managing security across locations can become increasingly complex. ❄️ Home City Ice addressed this challenge by consolidating disconnected security tools onto the Fortinet Security Fabric, centered on FortiGate NGFWs and FortiGuard AI-Powered Security Services. The result: wider and deeper visibility, simplified management, less operational overhead, and the relief of not having to deal with a major security incident for more than a decade. Read the story to see how an integrated security approach helped support long-term protection and efficiency. Fortinet

As organizations grow, managing security across locations can become increasingly complex. ❄️ Home City Ice addressed this challenge by consolidating disconnected security tools onto the Fortinet Security Fabric, centered on FortiGate NGFWs and FortiGuard AI-Powered Security Services. The result: wider and deeper visibility, simplified management, less operational overhead, and the relief of not having to deal with a major security incident for more than a decade. Read the story to see how an integrated security approach helped support long-term protection and efficiency. Fortinet

As organizations grow, managing security across locations can become increasingly complex. ❄️ Home City Ice addressed this challenge by consolidating disconnected security tools onto the Fortinet Security Fabric, centered on FortiGate NGFWs and FortiGuard AI-Powered Security Services. The result: wider and deeper visibility, simplified management, less operational overhead, and the relief of not having to deal with a major security incident for more than a decade. Read the story to see how an integrated security approach helped support long-term protection and efficiency. Fortinet

As organizations grow, managing security across locations can become increasingly complex. ❄️ Home City Ice addressed this challenge by consolidating disconnected security tools onto the Fortinet Security Fabric, centered on FortiGate NGFWs and FortiGuard AI-Powered Security Services. The result: wider and deeper visibility, simplified management, less operational overhead, and the relief of not having to deal with a major security incident for more than a decade. Read the story to see how an integrated security approach helped support long-term protection and efficiency. Fortinet

As organizations grow, managing security across locations can become increasingly complex. ❄️ Home City Ice addressed this challenge by consolidating disconnected security tools onto the Fortinet Security Fabric, centered on FortiGate NGFWs and FortiGuard AI-Powered Security Services. The result: wider and deeper visibility, simplified management, less operational overhead, and the relief of not having to deal with a major security incident for more than a decade. Read the story to see how an integrated security approach helped support long-term protection and efficiency. Fortinet

As organizations grow, managing security across locations can become increasingly complex. ❄️ Home City Ice addressed this challenge by consolidating disconnected security tools onto the Fortinet Security Fabric, centered on FortiGate NGFWs and FortiGuard AI-Powered Security Services. The result: wider and deeper visibility, simplified management, less operational overhead, and the relief of not having to deal with a major security incident for more than a decade. Read the story to see how an integrated security approach helped support long-term protection and efficiency. Fortinet