Blog
Insights & Resources
Guidance on CMMC compliance, industrial cybersecurity, and OT network protection.
191 articles
NIS2OT Security
France's NIS2 Bill Returns to the Assemblée: What OT Sites Should Do Now
France's NIS2 transposition bill is back on the Assemblée nationale agenda from 9 November 2026. It is not law yet, and ANSSI's ReCyF already says what to prepare. This is what OT and SCADA sites can start now.
IT/OT convergenceBoundary security
Securing the IT/OT Boundary: Technical Architecture Patterns
Secure the IT/OT boundary with three layered patterns: an industrial DMZ between IT and OT, secure remote access for outside connections, and zero trust segmentation inside OT.
SOCOT security operations
Building a SOC for OT: Tools and Tips
An OT SOC monitors the Modbus commands, PLC changes and SCADA traffic that an IT SOC does not see. Here are the tools it needs and how to start one.
SCADA
Failure Modes in SCADA Networks
SCADA networks fail in four common ways: communication failures, hardware malfunctions, software bugs and cyberattacks. This post explains each one and how to mitigate it.
OT Security
How to Build an OT Cybersecurity Roadmap for Your Factory
Build an OT cybersecurity roadmap in six steps: assess risk, set governance, segment the network, add monitoring, secure remote access, and plan incident response.
Compliance
How to Perform a Risk Assessment on Your OT Environment
To assess OT risk, define the scope, identify threats and vulnerabilities, rate each risk by impact and likelihood, then plan, document and track the fixes.
Network DesignPerformance
Layer 2 vs Layer 3: Why Large Broadcast Domains Slow Your Network
Layer 2 forwards frames by MAC address inside one broadcast domain. Layer 3 routes packets by IP address between subnets, and each router interface ends a broadcast domain.
TRITON malwareLessons learned
Lessons Learned from the TRITON Malware Attack
The main lessons from TRITON are to segment OT networks, monitor them for anomalies and keep a tested incident response plan, because attackers now target safety systems.
Authentication
Can You Use MFA for Service Accounts and Industrial Devices?
Yes, MFA is possible for service accounts and industrial devices. It relies on machine credentials and secure gateways instead of a person entering a code.
Network Visibility
Network Traffic Baselines: Why They Matter in Industrial Security
A traffic baseline matters in industrial security because it records what normal traffic looks like, so any new or unusual connection stands out.
NIS2Asset Management
NIS2 Asset Inventory Requirements: What to Track and How to Do It On-Premise
NIS2 Article 21 requires essential and important entities to keep an accurate inventory of their network and information system assets. This post lists what the inventory must contain and how to build it on-premise.
NIST CSFManufacturing cybersecurity
NIST Cybersecurity Framework for Manufacturing Systems
NIST CSF 2.0 gives a manufacturer six functions to organize OT security, from Govern to Recover. This post maps each one to concrete actions on the plant floor.
›Browse all posts (191)
- France's NIS2 Bill Returns to the Assemblée: What OT Sites Should Do Now
- Securing the IT/OT Boundary: Technical Architecture Patterns
- Building a SOC for OT: Tools and Tips
- Failure Modes in SCADA Networks
- How to Build an OT Cybersecurity Roadmap for Your Factory
- How to Perform a Risk Assessment on Your OT Environment
- Layer 2 vs Layer 3: Why Large Broadcast Domains Slow Your Network
- Lessons Learned from the TRITON Malware Attack
- Can You Use MFA for Service Accounts and Industrial Devices?
- Network Traffic Baselines: Why They Matter in Industrial Security
- NIS2 Asset Inventory Requirements: What to Track and How to Do It On-Premise
- NIST Cybersecurity Framework for Manufacturing Systems
- Patch Management in Operational Environments
- PLC Explained: What Every Manufacturing Professional Should Know
- PLC vs SCADA vs DCS: How Industrial Control Systems Fit Together
- Securing UAV Ground Stations: MAVLink Vulnerabilities
- OT Cybersecurity Frameworks: IEC 62443, NIST CSF and More
- Zero Trust vs Traditional Firewalling: What's More Effective in OT?
- ICONICS GENESIS64 and MC Works64: One Unlock Code for Every User (ICSA-26-300-02)
- Are Manufacturing Machines in Scope for CMMC? CUI Assets vs Specialized Assets
- CMMC Phase II Suspended: What Actually Changes for Defense Manufacturers
- What a C3PAO Looks for in an OT Environment
- Choosing Between Star and Ring Topologies in ICS
- Common Attack Vectors in Legacy ICS
- How to Connect CNC Machines to Monitoring Software Without Exposing Them
- The Last Hop: Carrying CUI From a Cloud Enclave to the Machine That Uses It
- EPA Cybersecurity Requirements for Water and Wastewater Systems
- From Door to Data How Badge Access Enhances Cybersecurity in Industrial Environments
- How to Use MITRE ATT&CK for ICS Threat Detection
- ICS vs SCADA Security What You Need to Know
- Industrial Network Topology Discovery and Mapping
- MFA for Remote Access: VPNs, RDP, and Cloud Portals
- Real-Time PLC Data Streaming OPC-UA Modbus and Modern Integration Patterns
- Secomea Alternatives: When Remote Access Is Not the Whole Problem
- Siemens SINEMA and Scalance: What Sits Between Remote Access and Segmentation
- The Difference Between Technical and Administrative Controls in OT
- What Is Badge Access for Digital Systems A Beginner's Guide for IT and OT Teams
- What Is Network Traffic Analysis A Guide for OT Engineers
- Zero Trust Readiness Checklist for Industrial Environments
- Hitachi Energy RTU500 and MicroSCADA X SYS600: Two Advisories, One Substation (ICSA-26-293-05 and -04)
- WAGO PFC200 and CC100 Flaws: Close the Management Interface Before the Maintenance Window (ICSA-26-293-02)
- What the New CISA Zero Trust OT Guide Means for On-Premise Deployments
- Eclipse Milo OPC UA Flaws: Find Where It Is Embedded, Then Limit Who Reaches It (ICSA-26-288-01)
- Inductive Automation Ignition: A Vision Login Can Become Designer Access (ICSA-26-286-01)
- How to manage OT firewall rules at scale with your LLM and Access Gate
- openPDC and openHistorian Flaws: Patch, Then Gate the Historian (ICSA-26-281-02)
- Red Lion N-Tron 700 Switches: Patch, Then Lock the Admin Interface (ICSA-26-281-01)
- Serial-to-IP Device Servers: Four CISA Advisories in Three Days
- New York DOH Part 5: The Water Cybersecurity Requirements, Explained
- NIS2 Directive Explained: Requirements, Scope, and Who Must Comply in 2026
- OT vs IT CMMC Controls: Where the 110 Controls Diverge
- Protect a SCADAPack x70 RTU With No Patch (ICSA-26-258-04)
- Siemens Reyrolle 7SR5 Relays: What to Do Before You Patch
- How to Evaluate OT Security Vendors: A Buyer's Checklist for 2026
- How to Segment a Flat OT Network Without VLANs or Downtime
- Overlay Networking vs VLANs: A Practical Comparison for OT Segmentation
- Zero Trust for Legacy PLCs: The Lollipop Architecture Explained
- Agent-Free Zero Trust: Why OT Environments Can't Use Endpoint Software
- Automating Compliance Monitoring in ICS
- The SCADA You Cannot Patch on Tuesday: AVEVA Enterprise SCADA (ICSA-26-225-01)
- A Key You Cannot Rotate: AVEVA Pipeline Integrity Monitor (ICSA-26-253-01)
- Badge vs Password Why Physical Identity Matters for OT Cybersecurity
- Best Tools for Monitoring Industrial Protocol Security
- Beyond the Acronym How PLCs Became the Backbone of Modern Industrial Automation
- Building Fault-Tolerant Network Paths in OT
- Building for Scalability in Industrial Networks
- Centralized Audit Logging for Multi-Site Operations
- Change Management in ICS Environments
- What the CISA and FBI Fact Sheet on Third-Party ICS Integrators Recommends
- Common MFA Mistakes and How to Avoid Them
- Common Root Causes of OT Downtime
- Creating Standard Operating Procedures for OT Security
- Cybersecurity for Naval Shipboard Systems
- Deep Packet Inspection vs Flow-Based Monitoring What's Best for OT
- Deploying Firewalls Without Breaking ICS Traffic
- Designing Redundant Communication Paths in OT
- Detecting and Responding to ICS Attacks in Real Time
- Detecting Anomalies in Industrial Protocols
- Dragos 2026 Report: What the 3 New OT Threat Groups Mean for Your Factory
- Cybersecurity in the EPA Sanitary Survey: What to Expect
- Firewall Placement Strategies for Industrial Networks
- Flat Network vs Segmented Network in Industrial Environments
- HMI Network Isolation Strategies
- How Compliance Can Drive Better OT Security
- How Ewon Remote Access and Talk2M Work
- How Network Changes Affect PLC Performance
- How to Audit Industrial Protocol Traffic Effectively
- How to Benchmark ICS Network Performance
- How to Build a Resilient OT Backbone
- How to Build an Incident Response Plan for ICS
- How to Conduct a Post-Incident Analysis in OT
- How to Configure YubiKey with Trout Access Gate
- How to Correlate Network Traffic and Device Behavior in OT
- How to Detect Anomalies in Modbus and DNP3 Traffic
- How to Enforce East-West Traffic Isolation in OT
- How to Manage Passwords on Hundreds of ICS Devices
- How to Monitor SCADA Network Traffic Without Disrupting Operations
- How to Spot Malicious Lateral Movement in OT Environments
- Implementing Network Traffic Analysis Without Slowing Down Production
- Industrial Malware: Network-Based Detection Strategies
- Insider Threat Detection in Manufacturing Environments
- Integrating Sysmon and OT Logging: A Unified View
- Latency Requirements in Industrial Control Systems
- Lateral Movement Detection in Industrial Networks
- Lateral Movement in OT Networks: What It Is and How to Stop It
- What to Do About the lwIP Vulnerabilities in ICSA-26-265-01 and -02
- Maintenance Window Planning for Security Updates
- Mapping OT Controls to NIST SP 800-53
- Multi-Site OT Security: How to Scale Zero Trust Across 50+ Locations
- Network Security Impact on Real-Time Control Loops
- NIS2 Operational Technology: What Manufacturers Need to Know
- Nozomi Networks vs Access Gate: When Visibility Alone Isn't Enough
- SCADA Security for Oil and Gas Pipelines: Distributed Sites, One Control per Site
- OT-Specific IDS: What to Look For
- Port & Maritime OT Security: Protecting Crane Control and Terminal Systems
- Power Grid Substation Security: Zero Trust for Distributed Energy OT
- Protocol Gateways: The Good, the Bad, and the Ugly
- Protocol Whitelisting: How to Reduce Attack Surface in OT
- Proxy-Based Security for OT: Why Proxies Succeed Where Agents Fail
- Rail Signaling Cybersecurity: Protecting Safety-Certified Infrastructure
- Ransomware Targeting Manufacturing in 2026: A 49% Increase and What to Do About It
- Red Team vs Blue Team Exercises for Industrial Networks
- Redundant Link Design for OT Systems
- Remote Site Deployment Best Practices
- Retrofitting Security Controls in Brownfield Installations
- Routed vs Switched Networks
- Scheduling Maintenance Windows in 24/7 Plants
- Secure Commissioning of New ICS Equipment
- How to Secure Remote Access to an HMI
- How to Give Secure Remote Access to a PLC
- How to Secure Remote Access to a SCADA System
- Securing Airport Baggage Handling Systems Without Requalification
- Securing Industrial Ethernet/IP: A Practical Guide
- Security Implications of Using PROFINET in Manufacturing
- Siemens Industrial Edge Management Password Reset Flaw (ICSA-26-265-06)
- Simulating Cyberattacks on PLCs: Safe Testing Techniques
- Strategies for Enabling Logging in Old ICS Devices
- Talk2M Alternatives: Industrial Remote Access Without a Vendor Cloud
- The Case for Out-of-Band Management in OT
- The Difference Between IT and OT Cybersecurity Explained
- The Role of SIEMs in OT/IT Environments
- Tips for Upgrading Factory Network Infrastructure
- Top 10 Audit-Ready Controls for OT Networks
- Top 5 Benefits of Using Badge Access for ICS and SCADA Terminals
- Top 5 Metrics to Monitor in Industrial Network Traffic
- Top 5 MFA Methods Compared: SMS, TOTP, Biometrics, Hardware Keys & Push Notifications
- Top OT Cyber Threats in 2026: What to Watch
- Understanding the Costs of MFA in OT and On-Premise Environments
- User Identity and Access in Air-Gapped Environments
- Using NetFlow and Logs for ICS Threat Hunting
- Using SNMP Effectively in OT Environments
- Using Software-Defined Networking (SDN) in OT
- Vendor Access Risks in OT and How to Control Them
- SCADA Security for Water Systems: What a Small Utility Can Do This Year
- Why Early Detection is Key in OT Security
- Why IT/OT Convergence Fails Without Governance
- Why Jitter Matters in Real Time OT Traffic
- Why Legacy Protocols Pose a Risk in Modern OT Networks
- Windows XP in Industrial Networks: Containment Strategies
- Zero Trust Principles Applied to PLC Communications
- Zone and Conduit Architecture with Modern NAC Solutions
- Zone-Based Firewalling for ICS: Best Practices
- A 9.9 in the Grid's Power-Flow Controllers: Hitachi Energy FACTS (ICSA-26-260-03)
- One FTP Packet Stops the PLC: Schneider Modicon M340 (ICSA-26-260-04)
- The Difference Between Secure Modbus and Modbus TCP
- Why On-Premise OT Security Beats Cloud-Routed Solutions
- A Water Utility Caught CISA's Red Team in Two Minutes. The OT Jump Server Still Fell.
- CMMC vs NIS2: One Compliance Architecture for Both Frameworks
- The True Cost of OT Security: TCO Comparison of Appliance vs Cloud Solutions
- Introducing Open-CMMC: An Open-Source CUI Enclave for CMMC Level 2
- IXON VPN Client RCE: When the Remote Access Client Is the Attack Surface
- The ASE2000 Test Set: When IEC 60870-5-104 TLS Does Not Check the Certificate
- Credentials Sitting in Memory: Johnson Controls Simplex Incident Manager (ICSA-26-232-01)
- A CVSS 10 on the Box That Faces the Internet: Haiwell IoT Cloud HMI Gateway (ICSA-26-225-02)
- The Firewall in the OT Rack Is Also Just Software: Siemens RUGGEDCOM APE1808 (ICSA-26-225-06)
- The Access-Control System That Needs Access Control: Johnson Controls C-CURE 9000 (ICSA-26-204-01)
- ABB Ability Zenon's Bundled MongoDB Flaws: What ICSA-26-218-01 Teaches OT Teams
- US Water Utility Cyberattacks in 2026: What Happened and How to Secure OT
- The Affirming Official's False Claims Act Risk in CMMC
- AWIA Risk and Resilience Certification: The Cybersecurity Part
- MFA for PLCs: Meeting CMMC 3.5.3 with a Compensating Control
- What's New in Access Gate v26.6
- How to Write an SSP Section for a Network with Legacy PLCs
- Cybersecurity for Police Evidence Systems: Sovereign, Auditable, On-Premise
- AI-Powered Attacks on Industrial Networks: What OT Teams Should Prepare For
- NIS2 Management Liability: Why Executives Are Personally on the Hook
- NIS2 Enforcement Is Live: What Changed and What to Do First
- GDPR and OT: What Data Privacy Means for Industrial Control Systems
- ICS Honeypots: Revealing Real-World Attacks on Industrial Protocols
- ICS Protocol Deep Packet Inspection: Tools and Techniques
- Zero Downtime Deployment Techniques for Industrial Networks