Description
The talk sheds light on the unique challenges and security imperatives of operational technology (OT) environments, focusing on industrial control systems. Using the Stuxnet malware incident as a case study, the discussion shows how targeted cyberattacks can exploit critical infrastructure vulnerabilities, leading to cyber and physical consequences. The analysis differentiates OT from traditional IT systems, emphasising that the former prioritises system availability and physical safety over data confidentiality. Key cybersecurity threats are identified, and defence-in-depth strategies are critically evaluated. It further discusses the gaps in the security landscape for mitigating risks in legacy and modern OT systems, drawing on lessons learned from the Stuxnet attack to propose a proactive framework for enhancing resilience in industrial cybersecurity.