How to get started safely
We recommend that manufacturers go about IT/OT integration in a controlled way, building-in cyber security right from the start. Our approach at Fujitsu is to separate IT and OT in the cybersecurity context but combine them when it comes to dataflows.
The first step on that path is all about visibility. Initiate an assessment to understand your current OT security posture and how it relates to business risk. Not every risk is the same. If you are a ceramics company, then a vulnerability in a coffee machine does not have the same priority as one in a furnace.
People are often overlooked in security risk. Any assessment should cover people’s roles, responsibilities, and training. Processes are vital too. They are standard in IT but do incident response processes also exist for your OT? What if something goes wrong at 2am on a Sunday? Is there a phone call? And who gets it? Assess your technology too, to reveal the networked assets in use in OT, before starting to conduct any necessary improvements. For example, nearly all manufacturers give key equipment suppliers remote access to their networks so they can monitor when maintenance is needed. But few, in our experience, know exactly how many of their suppliers have network access.
Knowing what and where your assets are – and what state they are in – is the first step to extracting valuable data and actively managing their availability. Asset discovery, typically part of a security assessment, enables the creation of a configuration management database (CMDB).
With core visibility now in place, move on to introduce continuous visibility via a managed monitoring security service that picks up abnormal behaviors in the network, such as an unscheduled installation that might be the precursor to a cyberattack.
The reward for this work is the ability to extract data from your OT equipment and put it to work in technologies like digital twins, data lakes, and Fujitsu’s Digital Annealer – with immense potential to drive manufacturers towards net-zero targets. Secure access to accurate production data is the foundation of a successful sustainability strategy.