Glossary · OT cybersecurity
Cybersecurity
Also known as: Cyber security, IT security
German: Cybersicherheit
Cybersecurity is the protection of networks, computer systems, software and data against unauthorized access, manipulation, disruption and theft. In industrial automation it focuses on keeping control systems available, correct and trustworthy, so that attacks cannot disturb production or compromise safety functions.
- OT security
In one sentence
Cybersecurity protects networks, systems, software and data against unauthorized access, manipulation and disruption, including industrial control systems.
Example
The cybersecurity concept for a new assembly line covers network segmentation, user accounts, secure remote maintenance and a process for firmware updates.
How it applies
- Engineering: In OT, cybersecurity usually ranks availability and integrity above confidentiality: a manipulated setpoint or a stopped controller matters more than a leaked file. IEC 62443 is the main standard family for industrial automation and control systems.
- Compliance: EU law increasingly requires cybersecurity: the Cyber Resilience Act (CRA) for products with digital elements, NIS 2 Directive for many operators, and the Machinery Regulation (EU) 2023/1230 with its requirement on protection against corruption.
- Operation: Cybersecurity is a continuous process of monitoring, patching, access review and incident handling, not a state reached at delivery.
- Documentation: Products need security information for integrators and operators: intended network environment, required measures, hardening options, update process and contact for reporting vulnerabilities. Keep security and safety information clearly separated but cross-referenced.
Cybersecurity vs. functional safety
Functional safety protects people against hazards from malfunction. Cybersecurity protects systems against intentional or unintentional compromise. Attacks can defeat safety functions, which is why the Safety-security interface must be analyzed.