By the end of 2023, 83% of enterprises expect to connect operational technology (OT) and IoT devices to their enterprise networks, according to Enterprise Management Associates (EMA) research. IT and OT are converging so that enterprises can analyze OT data, innovate, and optimize industrial systems. A new approach to OT security is required. Enterprises need to modernize network architecture to protect these critical assets, especially by updating their network security and modernizing their approach to network segmentation. These slides explore how enterprises can use OT-dedicated firewalls and zero trust network access to protect OT systems from malicious actors.

1. | @ema_research
Challenges and Best
Practices for Securing
Modern Operational
Technology Networks
Tim Roddy
Vice President of Marketing
Open Systems
Shamus McGillicuddy
Vice President of Research, Network Infrastructure
and Operations
Enterprise Management Associates (EMA)

2. | @ema_research 2
Watch the On-Demand Webinar
• Challenges and Best Practices for Securing Modern Operational
Technology Networks On-Demand Webinar:
https://info.enterprisemanagement.com/securing-modern-
operational-techn-networks-webinar-ss
• Check out upcoming webinars from EMA here:
https://www.enterprisemanagement.com/freeResearch
© 2023 Enterprise Management Associates, Inc.

3. | @ema_research
| @ema_research
Featured Speakers
Shamus is a Vice President of Research at Enterprise
Management Associates (EMA), where he leads the
network infrastructure and operations practice. He
has nearly two decades of experience in the IT
industry. His research focuses on all aspects of
managing enterprise networks, including network
automation, AIOps-driven network operations, multi-
cloud networking, and WAN transformation.
Tim brings over 25 years of go-to-market strategy,
marketing, and partner expertise in cybersecurity,
software, cloud, and SaaS, including 15 years of
executive and leadership positions at iboss, Fidelis
Cybersecurity, McAfee, and Secure Computing. As
Vice President of Marketing for Open Systems, Tim is
responsible for global marketing strategy, branding,
messaging, communications, demand generation,
analyst relations, and partner marketing.
© 2023 Enterprise Management Associates, Inc. 3
Shamus McGillicuddy
Vice President of Research
EMA
Tim Roddy
Vice President of Marketing
Open Systems

4. | @ema_research
| @ema_research
OT/IT Convergence Goes Mainstream
© 2023 Enterprise Management Associates, Inc. 4
Industries especially impacted:
43% of network I&O teams:
IoT and OT are major drivers of our
network strategy
Construction/Civil
engineering
Health care
Logistics/Wholesale/
Distribution
Manufacturing
Retail
Transportation
83% IT organizations:
OT and IoT technology are connecting to enterprise networks

5. | @ema_research
| @ema_research
Why is Convergence Happening?
© 2023 Enterprise Management Associates, Inc.
Fundamental benefits of IT/OT convergence:
Unlock data from the OT edge
Integrate OT and business systems to drive innovation
Outcomes of convergence:
Smart, better automation
Better, responsive customer service
Data-driven decision-making
Efficiencies that reduce costs, environmental impact, etc.
5

6. | @ema_research
| @ema_research
Attacks on OT systems are highly
targeted
OT Security is Not Ready for IT Convergence
© 2023 Enterprise Management Associates, Inc. 6
Top intrusion alert by industry**
Water treatment: generic network scan
Industrial machinery/manufacturing:
program transfers and weak passwords
Building materials: cleartext passwords
Energy: OT protocol packet injection
* Microsoft, “Cyber Signals,” December 2022.
** Nozomi Networks, “Unpacking the Threat Landscape with Unique Telemetry Insight,” August 2023
Physical isolation was the
default approach
Physical access control
was the ultimate
protection
Convergence breaks air
gap model
75% of industrial controllers
in Microsoft customers’ OT
networks have unpatched,
high-severity vulnerabilities
One million internet-
connected IoT devices are
running Boa OS (open-
source web server
discontinued in 2005)*
OT security relies on
air gaps
OT groups aren’t
hardening systems

7. | @ema_research
| @ema_research
Securing OT Convergence
© 2023 Enterprise Management Associates, Inc. 7
Investments in response to OT convergence:
“We have a dedicated team for [OT connectivity]. We’re investing in security to support it. There are
discussions on how to segment the network to isolate these devices.”
Network team manager
Fortune 100 pharmaceutical company
55% buy new
network security
• Firewalls
46 buy new network
access controls
• ZTNA
50% buy network
automation solutions
• Provisioning
connectivity
• Segmenting
networks
• Managing firewall
policy

8. | @ema_research
| @ema_research
Organizations with formal
zero trust initiatives pursue
tailored policies
Air gaps are history. Granular controls are preferred.
IT Organizations are Building Zero Trust Controls and Policies for OT
© 2023 Enterprise Management Associates, Inc. 8
Preferences for granting OT devices network access:
36% Tailored policies based on business function, device type, etc.
28% IoT VLAN
23% Untrusted, limited access
12% Banned, no network access
Only 42% who enforce tailored
OT/IoT policies have been
completely successful
Weak collaboration between NetOps
and SecOps undermines success

9. | @ema_research
| @ema_research
NetOps and SecOps Must Partner on OT Convergence
© 2023 Enterprise Management Associates, Inc. 9
79% of organizations report:
IoT drives network and
security teams to
collaborate more
43% see NetOps and
SecOps influence over
IoT strategy improve
when they partner
Key areas of collaboration:
Technology evaluation/procurement
Planning and design
Technology implementation
Operational monitoring/logging

10. | @ema_research
| @ema_research
Final Thoughts From EMA
© 2023 Enterprise Management Associates, Inc. 10
IT/OT convergence is
mainstream
OT platforms and systems are
fundamentally insecure & highly targeted
NetOps teams must invest in network
security, access controls, automation
Zero trust should drive OT
convergence strategy
NetOps and SecOps
must partner closely

11. © 2023 Open Systems. All rights reserved. Proprietary & Confidential.
Securing Modern OT with
Open Systems
Tim Roddy
Vice President, Marketing

12. © 2023 Open Systems. All rights reserved. Proprietary & Confidential.
Securing OT with IT: SASE and The Purdue Model
12

13. © 2023 Open Systems. All rights reserved. Proprietary & Confidential.
Challenges with the Purdue Model: Connected OT
13
The advent of smart devices and use of wireless connectivity by OT breaks Purdue Model
Sources: https://www.cvedetails.com/ and https://hub.dragos.com/hubfs/312-Year-in-Review/2022/Dragos_Year-In-Review-Report-2022.pdf?hsLang=en

14. © 2023 Open Systems. All rights reserved. Proprietary & Confidential.
Securing OT with IT: leverage Secure Access Service Edge
14

15. © 2023 Open Systems. All rights reserved. Proprietary & Confidential.
Implementing SASE to Secure Modern OT in the Purdue Model
15

16. © 2023 Open Systems. All rights reserved. Proprietary & Confidential.
Open Systems Secure Access Experience™
SD-WAN Networking
Firewall
Connectivity Management
ZTNA
SWG
CASB
SASE Platform as a Service
SD-WAN-aaS SSE-aaS
Unified Management Portal
Experience Delivery as a Service
Mission Control
and Support
Integration
Management
Implementation and
Change Management
24 x 7
Global Ops
Service
Experience
Promise
Assigned
Experts
Proactive and
Pre-emptive
Level 3
engineers
Commitment
To innovation

17. © 2023 Open Systems. All rights reserved. Proprietary & Confidential. 17
Summary
Securing OT with IT: leverage Secure Access Service Edge
For more information about securing modern OT environments, read
our white paper:
https://go.open-systems.com/Modern-OT-Environments.html