Information technology (IT) and operational technology (OT) convergence is essential for modern manufacturing. It enables real-time equipment monitoring and predictive maintenance. However, connecting the shop floor to business networks introduces risks of unauthorized access due to legacy industrial protocols. Secure integration requires a combination of standardized interoperability, network segmentation, and controlled risk management.
Standardization and industrial data security
To reduce integration complexity, industries rely on the OPC UA standard—a platform-independent architecture for industrial system interoperability. Instead of connecting controllers directly to the corporate network, companies deploy industrial gateways that normalize data and transmit it via a secure interface. However, OPC UA is only one security component and does not eliminate the need for network segmentation and access control.
To build a comprehensive cybersecurity system, organizations apply the ISA/IEC 62443 series of standards. This methodology spans over 20 industries and helps transition from point solutions to a managed security program that includes asset inventory, risk assessment, and data exchange channel control.
Market implications
The convergence of IT and OT networks means that industrial vulnerabilities are no longer isolated. A security breach on the shop floor can disrupt entire supply chains, lead to costly production downtime, and expose proprietary business data. Conversely, successful secure integration enables manufacturers to leverage real-time analytics and AI safely, gaining a significant competitive advantage.
Emerging technologies and business integration
The evolution of IIoT increases connectivity requirements. According to the Ericsson Mobility Report, 5G Standalone (SA) networks are increasingly deployed for reliable connectivity. At the same time, the use of Edge AI (artificial intelligence at the network edge) requires assessing system reliability and security in accordance with the NIST AI RMF 1.0 guidelines.
Once a secure technical perimeter is established, industrial data is integrated with business processes. At this level, enterprise document management and automation systems are used (for example, solutions built on the UnityBase low-code platform by Intecracy Group). To develop custom analytical and AI modules, organizations engage specialized engineering partners certified in AI governance (such as Softengi), ensuring the resilience of the industrial environment.
How to respond
- Do not connect critical OT assets directly to the corporate network without an intermediate secure layer.
- Determine which data is required for analytics and which must remain within the local OT perimeter.
- Use OPC UA for standardized exchange combined with network segmentation.
- Ensure there are no reverse access channels from IT systems to critical controllers.
Prepared by a Software Ukraine member. Original publication.