Glossary · Industrial cybersecurity
IT/OT convergence
Also known as: IT-OT integration
German: IT/OT-Konvergenz
In industrial automation, IT/OT convergence is the growing integration of information technology (business IT systems, networks, cloud) with operational technology (control systems, field devices, production networks), so that data and services flow between both domains.
- Cybersecurity
In one sentence
IT/OT convergence is the integration of business IT with operational technology in production, so data and services flow between both domains.
Example
Machine data flows via an OPC UA gateway into a cloud analytics platform, which requires a DMZ, defined conduits and coordinated patching between IT and OT teams.
How it applies
- Engineering: Convergence enables MES integration, remote service, analytics and AI, but connects formerly isolated control networks.
- Security: OT priorities (availability, safety, deterministic timing) differ from IT priorities; segmentation with Zones and conduits per IEC 62443 and a clear Safety-security interface are essential.
- Organization: Responsibilities between IT and OT teams (patching, accounts, monitoring) must be defined explicitly.
- Documentation: The documentation team should document network interfaces, required ports, update procedures and security assumptions so operators can integrate machines securely.
Converged systems need agreed information models and data ownership, otherwise data from production arrives in IT systems without context, units or quality information. OT components often stay in service far longer than IT components; plan for older devices that cannot be patched.