Hydrocarbon Processing - August 2022 - 12

Business Trends
tion approaches are insufficient.
Zero trust takes traditional separation
approaches to a much more granular level.
Rather than building a wall around the
OT network, it assumes that every user,
device, system or connection is already
compromised (by default) whether they
are inside or outside of the network. The
goal of zero trust is to reduce the attack
surface and prevent lateral movement with
segmentation or micro-segmentation. If a
breach occurs, then an intruder cannot
easily access other systems or sensitive
data by moving laterally.
Data management. One of the greatest
benefits of IT/OT convergence is the
generation of previously untapped data.
These data can be used to enhance the
efficiency of an operation, increase security
or conduct predictive maintenance.
However, without effective data management
practices, much of these data's value
is unrealized.
While many organizations manage
their data by sending it to the cloud for
storage or processing, this method does
not allow organizations to tap into the
full potential of industrial IoT capabilities.
Processing a large amount of data directly
in the could requires lengthy response
times and a large amount of bandwidth.
An alternative solution is edge computing.
Edge computing brings data storage
and processing closer to the sources of
data. Edge computing processes happen
on the floor of an industrial facility, meaning
only some data must be sent to the
cloud for long-term storage or distribution
to a different network. Bringing analysis
closer to home improves response time
and bandwidth consumption. It also decreases
data distribution and the inherent
risk of that data being stolen or damaged
during data transfer.
Data management should also encompass
security. In addition to data storage
and processing methods like edge computing,
practicing selective sharing ensures
that data is accessed only as it should
be. Specific data might flow one way, back
and forth, or not at all. Limiting the flow
of data makes it less vulnerable to threats.
Evolving cybersecurity risk factors.
OT systems-rather than IT systems-
are usually carrying an organization's most
critical business processes. Therefore, OT
system downtime can be more costly for
an organization than IT system downtime.
12 AUGUST 2022 | HydrocarbonProcessing.com
Logic suggests that OT system security
should be more important for a business
than IT system security.
However, the paradox is that most
companies invest a lot more money into
securing their IT systems than into securing
their OT systems. This investment
paradigm does not necessarily need to be
flipped, but a more balanced approach to
cybersecurity planning and investment
must be taken during IT/OT convergence.
IT/OT convergence improves cybersecurity.
IT/OT convergence allows for
broader monitoring and threat detection.
Prior to convergence, organizations will
likely have a limited view into the architecture
and services running on their OT
system. Convergence with IT allows for
passive monitoring and vast data gathering.
In analyzing these data, profiling techniques
can be used to learn more about the
tendencies of a system. Once data patterns
are better understood, abnormal behaviors
can be quickly detected with no interruption
to the industrial process.
Broader data gathering has benefits beyond
threat detection. New datasets can
be fused with data sets from other systems
across the OT system (e.g., closed-circuit
television or building management systems)
to allow for more holistic monitoring
and better utilization of data.
Factory maintenance can also be improved
through IT/OT convergence.
Most organizations rely on preventive
maintenance to decrease the likelihood
of system downtime and costly repairs.
IT/OT convergence allows organizations
to shift from preventive maintenance to
predictive maintenance. Predictive maintenance
technologies gather real-time data
from OT systems and can spot situations
that might lead to equipment failure. In
doing so, targeted repairs can be made
prior to failures-this method is often
less-costly than preventive maintenance,
which takes a broader approach to repairs.
Organizations must bear in mind that
the cybersecurity advantages of IT/OT
convergence are limited by the type and
age of an organization's OT system. Older
supervisory control and data acquisition
(SCADA) systems often do not allow for
the broader monitoring, threat detection
or data gathering that is necessary to build
a more secure ecosystem. OT systems that
employ more IoT and connected devices
have the access points for monitoring
and data gathering and are more suited
for the cybersecurity benefits of IT/
OT convergence.
IT/OT convergence can open cybersecurity
vulnerabilities. While IT/
OT convergence can allow for more robust
cybersecurity, it also exposes industrial
control systems (ICS), process control systems
and other operational technology to
malware attacks, hacktivism, employee
sabotage and other security risks that previously
affected only corporate IT systems.
IT/OT convergence involves integrating
IP-connected devices to an OT
system. These additional access points
make an OT system more vulnerable to
internet-based threats. Many of these connected
devices use consumer-grade technology
and are from multiple vendors-
both qualities that make them susceptible
to cyberattacks.
Often, the trickiest management aspect
of IT/OT convergence is organizational
change. Systems do not have opinions,
people do. The knowledge and cultural
differences between IT and OT employees
can result in vulnerabilities that can
be exploited by cyber attackers. One of
the key differences between the IT mindset
and OT mindset is the reluctance to
or acceptance of system upgrades. While
IT administrators constantly update their
systems for optimization and security, OT
admins are more likely to stick with legacy
systems because of their reliability.
A mindset clash between IT and OT
administrators can lead to poor system integration.
This results not only in sub-par
IT/OT convergence outcomes, but also in
system vulnerabilities.
Vulnerabilities created by hosting
different OEMs in a single environment.
Managing multiple original equipment
manufacturers (OEMs) in a single
environment is difficult from an operational
perspective since most OEMs' systems
were not designed to work optimally
with systems from different vendors. Such
system idiosyncrasies can also impact the
safety of an environment. As a result, system
administrators must identify vulnerabilities
and patch where necessary.
In a system containing devices and subsystems
from multiple OEMs, it is crucial
for an organization to define and limit the
paths for data transfer. Data transfer is crucial
for successful IT/OT convergence;
without it, systems will be poorly integrated,
and convergence will not yield the desired
system optimization. However, data
http://www.HydrocarbonProcessing.com
Hydrocarbon Processing - August 2022

Table of Contents for the Digital Edition of Hydrocarbon Processing - August 2022
