In this lesson,
we will learn about operational technology or OT.
Operational technology is the hardware
and software systems that are often part
of a critical infrastructure.
OT or operational technology monitors and controls
the physical processes within the infrastructure
and requires robust security measures
to protect against disruptions and unauthorized access
because of the critical processing
that they monitor and control.
Operational technology examples include heating,
ventilation, and air conditioning or HVAC systems,
industrial control systems or ICS,
and Supervisory Control and Data Acquisition
or SCADA systems.
HVAC systems must be secure to prevent tampering
that could lead to unsafe environmental conditions
for persons or equipment.
Next, industrial control systems or ICS
manage industrial processes
and are highly vulnerable to cyber threat
if not properly secured.
ICS's control essential functions
in manufacturing and utilities.
Finally, SCADA or Supervisory Control
and Data Acquisition systems
are a subset of ICS used for remote monitoring
and control of infrastructure
like power plants and water treatment facilities.
Let's learn more about operational technology
such as heating, ventilation, air conditioning or HVAC,
industrial control systems or ICS,
and the Supervisory Control and Data Acquisition or SCADA.
First, we have HVAC.
HVAC is a type of operational technology
used to control the climate in buildings.
Unlike regular computers or IT systems,
HVAC systems focus on managing the temperature, airflow,
and air quality in commercial environments.
These systems are important
not only for the comfort and safety of people,
but also for the protection
of sensitive computer network infrastructure
such as servers in the data center.
HVAC systems use embedded devices
like sensors and controllers
to automatically adjust heating, cooling, and ventilation.
For example, a sensor can detect the temperature in a room,
and based on this data, the HVAC system
can turn on the air conditioning to cool the space.
In a data center,
these systems are vital for preventing overheating,
which could damage servers and other sensitive equipment.
This automated process ensures
that the building stays at the correct temperature,
protecting both people and technology
without constant manual intervention.
A key part of an HVAC system
is a Programmable Logic Controller or PLC,
which is programmed to control the system
based on inputs from sensors.
For example, the PLC can receive information
that a data center room is too hot
and then activate the air conditioning
to bring the temperature back
to a safe level for the servers.
Similarly, it can adjust airflow in an office or hospital
to maintain a comfortable environment for occupants.
Operators monitor and control the HVAC system
using a Human Machine Interface or HMI,
which could be a digital control panel or touchscreen.
Through the HMI, operators can adjust settings,
view current conditions,
and ensure the system is functioning correctly.
In large facilities, multiple HVAC systems
might be connected to form a larger network,
ensuring that every part of the building
or even multiple buildings
are properly heated, cooled, and ventilated.
For instance, in a hospital,
HVAC systems help maintain clean air
and the right temperature to protect patient health.
While in a data center,
they safeguard equipment from overheating.
Like other OT systems, HVAC prioritizes availability,
meaning it is essential that these systems work continuously
to maintain a safe and stable environment
for both people and equipment.
Second, we have industrial control systems or ICS.
ICS is used for automating and managing machinery
through embedded devices.
Unlike typical IT systems,
ICS focuses on controlling physical processes
such as opening valves in manufacturing plants
or generating electricity in power plants.
ICS is widely used in areas like power supply,
water distribution, healthcare, and telecommunications,
where these systems prioritize availability and integrity
over confidentiality because the main goal
is to keep industrial processes running smoothly.
When multiple ICS systems are interconnected,
they form a Distributed Control System or DCS,
enabling more efficient control
over large-scale operations.
A key feature of ICS
is its ability to control machinery through embedded devices
like programmable logic controllers or PLCs,
which automate tasks based on input from sensors.
These controllers are programmed using Ladder Logic,
a language designed for industrial automation.
PLCs are then connected through fieldbus communication,
linking them with sensors and input/output devices
to monitor and control the industrial processes.
Human operators interact with these systems
via a Human Machine Interface or HMI,
which is a control panel
that provides a visual representation of the process
and allows for manual input when necessary.
Overall, ICS can be found in various industries
such as manufacturing, utilities,
and even military operations.
For example, on a US Navy warship,
ICS manages everything
from power generation to water treatment,
enabling the ship to function
as a self-contained city at sea.
To ensure smooth operations,
ICS networks use a data historian,
which collects and catalogs data from various devices,
providing valuable information
for monitoring and troubleshooting.
This data is important for security professionals
to track incidents and maintain the security
of OT or operational technology networks.
Third, we have Supervisory Control
and Data Acquisition or SCADA.
SCADA is a subset of ICS used for remote monitoring
and control of infrastructure
like power plants and water treatment facilities.
Unlike standard ICS,
which typically controls processes in a single location,
SCADA systems manage multiple industrial control systems
across wide geographical areas.
They are commonly used in industries
like energy, water management, and telecommunications
where centralized monitoring and control are important.
SCADA networks use communication methods
such as cellular, satellite, or virtual private networks
to connect remote field devices
with a central control center.
SCADA systems rely on embedded PLCs and sensors
to monitor industrial processes at different locations.
They gather data and send it to a host computer
for analysis and control.
This centralized setup allows operators
to efficiently manage multiple sites,
quickly detecting and responding to issues.
SCADA is often used in large-scale operations
like power grid monitoring or water treatment management,
where remote control is key
to maintaining efficiency and safety.
A common example of SCADA in action
is the smart meter system used by many electric companies.
These smart meters connect to a central SCADA system
via cellular networks,
allowing utilities to monitor energy usage,
detect outages, and manage billing remotely.
Data from these meters is processed to make decisions
about resource allocation, maintenance,
and customer billing.
So by integrating multiple sites into one system,
SCADA helps industrial operations
stay efficient and responsive
to real-time conditions.
So remember, operational technology or OT
includes systems that control and monitor
physical processes in critical infrastructure.
These systems such as heating, ventilation,
and air conditioning or HVAC,
industrial control systems or ICS,
and the supervisory control and data acquisition or SCADA,
are important for managing environments
and ensuring smooth operations in industries
like power, water management, and healthcare.
HVAC systems regulate temperature and air quality,
protecting both people and sensitive equipment
such as servers in data centers.
Next, ICS is focused on automating industrial processes
and is often vulnerable to cyber threat
due to outdated security measures.
Finally, SCADA, a type of ICS
is used for remote monitoring
and control of infrastructure across wide areas.
So ensuring the security of these OT systems is important
because disruptions can have serious consequences
for both people and essential services.