Articles
Deep-dive analysis on IT/OT cybersecurity, industrial technology, and engineering practice.
Subscribe via RSSRole of AD in IT/OT Segregation
Active Directory is the backbone of enterprise identity — but extending it carelessly into operational technology erases the very boundary that keeps industrial systems safe. This article explains how AD should be designed, trusted, and administered to reinforce IT/OT segregation rather than undermine it.
Cyber Data Services · 2026-08-02
Read articlePurdue Model Approach to ICS Network Infrastructure Design
The Purdue Enterprise Reference Architecture remains the most widely used blueprint for structuring industrial control system networks. This article walks through the model level by level, explains the pivotal role of the industrial DMZ, and shows how to translate the reference model into a secure, resilient, standards-aligned network design.
Cyber Data Services · 2026-08-02
Read articleSecuring OT Systems in Mine, Rail and Port Integration
Bulk commodities move through a tightly coupled chain of mine, rail, and port operational technology. Integrating these three OT domains unlocks efficiency — and creates new attack surface at every seam. This article outlines the risks and the controls that keep an integrated mine-to-port operation secure and running.
Cyber Data Services · 2026-08-02
Read articleSafeguarding a Vendor-Owned PCS Application on Company-Owned Virtualized Infrastructure
Under a Build-Own-Operate-Transfer (BOOT) arrangement, a vendor deploys and runs its own Process Control System (PCS) application on the customer’s virtualized server and storage — inside an OT mine domain shared with other PCS applications. This article covers how that works and what to control: tenant isolation, the domain-join decision, credentials, data interactions, interfaces, wired and OT-wireless connectivity, and the eventual transfer.
Cyber Data Services · 2026-08-02
Read article