OT security evolution: key takeaways from field experience
Fujitsu / April 15, 2025
Manufacturing organizations are rapidly transforming with interconnected systems leveraging advanced technologies. Traditionally, cyber security focused on Information Technology (IT), leaving Operational Technology (OT) - responsible for industrial control - unprotected. As factories and manufacturing become interconnected, OT systems are now part of integrated networks. While this integration fosters efficiency, it also exposes critical infrastructure to significant cyber risks.
Relying on existing OT security solutions
According to the Gartner OT Security Maturity Model, many sectors like utilities, healthcare, and manufacturing are still in the initial phases of their security journey, relying on basic measures like VLANs (Virtual Local Area Network). These are no longer sufficient and OT asset owners are concerned about emerging cyber threats and advanced technologies. However, many companies indicate they won’t be replacing their existing solutions anytime soon, primarily due to budget constraints from the board.

Source: Gartner Model – extract from Market Guide for Operational Technology Security – 13 January 2021
Why OT security matters?
OT security isn't just about protecting data - it safeguards critical physical operations that underpin society. For instance, a cyber attack on a water utility could lead to contamination, putting countless lives at risk. In healthcare, disrupted medical supplies could severely impact patient care. High-profile incidents like the Colonial Pipeline ransomware attack and the SolarWinds breach have revealed vulnerabilities in the supply chain, highlighting the importance of protecting OT systems. Therefore, we strongly advise to conduct regular audits of your organization’s suppliers.
Beyond regulations and compliance for a secure future
Governments and regulatory bodies, like NIS2 in Europe, are implementing guidelines to protect OT environments, with OT-specific solutions like intrusion detection systems (IDS), intrusion prevention systems (IPS), network segmentation, and anomaly detection technologies playing a crucial role. Compliance helps maintain operational integrity and safeguard public and stakeholder interests, but proactive incident response strategies are also essential. A fundamental shift in mindset is crucial. Training employees and collaborating with security providers can help organizations prioritize OT security and make risk-based decisions.














