Operational Technology

Operational technology (OT) is the hardware and software used to monitor or control physical equipment and processes. It interacts with the physical world by collecting measurements or directing actions, such as opening a valve, regulating temperature or stopping a machine. Unlike systems concerned primarily with processing information, OT can directly affect physical operations and safety.

How operational technology works

An OT system connects measurements, control decisions and physical actions so that equipment operates within specified conditions.

• Sensors measure physical conditions such as pressure, temperature or speed, while actuators carry out actions such as moving a valve or switching a motor.
• Programmable logic controllers (PLCs) execute programmed control instructions using inputs from equipment and sensors.
• Supervisory control and data acquisition (SCADA) systems enable operators to monitor and supervise processes, including equipment distributed across distant locations.
• Distributed control systems (DCS) coordinate multiple controllers within industrial processes, such as those in manufacturing plants.

How OT differs from information technology

Information technology (IT) primarily stores, processes and communicates information; OT monitors or changes physical processes. The distinction concerns their main purpose, not whether they use computers or networks.

• OT places particular emphasis on safety, reliability and availability, because interruption or incorrect operation can damage equipment or endanger people.
• Many OT processes require predictable response times, so security measures must not disrupt essential control functions.
• OT does not require an internet connection, but links with enterprise networks and remote-access services can create additional routes for cyber intrusion.

Why OT security matters

A cyberattack on OT can extend beyond information theft to service disruption, equipment damage or unsafe physical conditions. This makes OT security important for critical infrastructure, including electricity, water and transport systems.

• Protection includes separating control networks from other networks, restricting remote access, authenticating users and monitoring for abnormal activity.
• Updates and security testing should account for operational constraints and safety requirements rather than being applied without assessing their effects.
• Under Section 70 of the Information Technology Act, 2000, critical information infrastructure concerns computer resources whose incapacitation or destruction would have a debilitating impact on national security, the economy, public health or safety.
• The National Critical Information Infrastructure Protection Centre (NCIIPC) is the national nodal agency for protecting critical information infrastructure under Section 70A.