Efficient OT Security Monitoring: The Splunk-Rhebo Fusion SOC

Much is written about the vulnerability of operational technology (OT) and industrial control networks. However, there is seldom any concrete information about the vulnerabilities and risks that can really be found in OT networks.

With the NIS2 Directive, the intensification of cyber security requirements for critical infrastructures and important organizations is going into the next round. In the future, companies will be required to address and verify implementation of 10 categories in their cyber risk management.

From Pipedream to GhostSec to a never-ending stream of CISA advisories on newly found vulnerabilities in industrial components: It is an open secret that operational technology (OT) networks are historically insecure.

Not only the daily news but also extensive studies reveal that over the past two years globally, ransomware and cybercrime attacks have become increasingly frequent and sophisticated. This is posing a major problem for industrial companies and critical infrastructures.

The notorious insecurity of OT and especially (I)IoT devices has a long history of fearmongering.

May 1 marks the end of the legal deadline for implementing an attack detection system in accordance with the IT Security Act. In addition to IT, network management, telecontrol and control technology (OT for short) must also be explicitly included in the attack detection system for the first time.