Detects threats on plant control networks
- Who we serve
- Private Sector
- Category
- Energy, utilities & resources
- Value
- Risk management
- Human role
- Human monitors, can halt
- Maturity
The problem
Without OT/ICS cyber-security monitoring, teams in corporate & joint ventures rely on sampling and after-the-fact review, while the signals in OT network logs sit unread, so problems surface only after the loss, incident or complaint.
How it works
OT/ICS cyber-security monitoring detects threats on plant control networks. The approach relies on ML anomaly detection. It draws on OT network logs and is typically owned by teams in corporate & joint ventures. The main constraint is critical-infrastructure rules. Where the human comes in: analysts adjudicate; no automated changes to control systems. It is scaled at leading organisations and piloted elsewhere; examples include Operators' OT security programmes.
Where the human comes in
Analysts adjudicate; no automated changes to control systems
What it needs
OT network logs
What to plan for
Critical-infrastructure rules
In the field
Operators' OT security programmes
Public deployments by other organizations, listed for context. Not Sphere projects.