Why shouldn't IT and Hybrid SOCs be used to secure industrial networks?
Marcelo Branquinho's article for a special Caderno Centro de Ciberseguridad Industrial details the topic
Originating in Spain, Centro de Ciberseguridad Industrial (CCI) is a non-profit association formed by professionals and private and public bodies concerned with the growing risk in industrial automation and digitalization. The CCI works to advance and improve the level of cybersecurity in the sector, facilitating relationships, knowledge and experiences of the sectors involved in this area, mainly in Europe and Latin America. Thanks to a multidisciplinary team of coordinators and specialists, the Center develops research activities, training, events, generation of publications and tools for an ecosystem of more than 3.000 members from 45 countries.
In the sixth edition of the special notebooks produced by the CCI, Marcelo Branquinho, CEO of TI Safe and coordinator of the association in Brazil, explains in detail the various aspects of cybersecurity management of operational networks and why it is not advisable to use IT and Hybrid SOCs to protect industrial networks.
In the Paper, the executive assesses that, although there are positive relationships between IT (Information Technology) and OT (Operation Technology) networks, the operational bias of their cybersecurity is quite different. “While the main pillar of IT cybersecurity is information confidentiality, the main pillar of OT cybersecurity is availability. This means that, in order to achieve their cybersecurity objectives, such environments need to differentiate themselves in their technologies, methodologies and strategies”, explains Marcelo Branquinho, and adds: “Today, hybrid Security Operations Centers are beginning to emerge; that is, those in which cybersecurity experts in IT and OT environments work together to manage the security of OT networks. However, this type of hybrid management poses high risks to the operational continuity of OT networks”, he says.
The entirety of the document is available in Spanish, English and Portuguese and can be requested at Site.