Historically, the majority of OT systems were proprietary, analog, vendor supported, and were not internet protocol (IP) enabled.

Within the controls systems industry, ICS systems are often referred to as Operational Technology (OT) systems. With the increasing interconnectivity of ICS to the internet, the ICS can be an entry point into the organization's other IT systems. ICSs range from building environmental controls (HVAC, lighting), to systems such as the electrical power grid. These types of specialized systems are pervasive throughout the infrastructure and are required to meet numerous and often conflicting safety, performance, security, reliability, and operational requirements. Our goal is to surface risks and foster dialogue to avoid the emergence of an Internet of Insecure Industrial Things.Industrial Control Systems (ICS) are physical equipment oriented technologies and systems that deal with the actual running of plants and equipment, include devices that ensure physical system integrity and meet technical constraints, and are event-driven and frequently real-time software applications or devices with embedded software. We argue the industrial IoT brings four security concerns to the fore, namely: appreciating the shift from offline to online infrastructure managing temporal dimensions of security addressing the implementation gap for best practice and engaging with infrastructural complexity. We use the case study of the emergent smart energy supply chain to frame, scope out and consolidate the breadth of security concerns at play, and the regulatory responses.

Legal changes are being ushered by the European Union (EU) Network and Information Security (NIS) Directive 2016 and the General Data Protection Regulation 2016 (GDPR) (both to be enforced from May 2018). This paper unpacks where emerging security risks lie for the industrial internet of things, drawing on both technical and regulatory perspectives. Security incidents such as targeted distributed denial of service (DDoS) attacks on power grids and hacking of factory industrial control systems (ICS) are on the increase.

NIST Global Cities Team Challenge 2017