Cesar Tascon with EY

Industrial Talk/BCC is talking to Cesar Tascon, Cybersecurity Partner with EY about "OT / ICS - cyber physical and critical infrastructure security".

Overview

The discussion focused on adapting cybersecurity to connected operational technology while protecting safe, continuous operations. OT Risk and Approach

OT security prioritizes availability and safety; outages can disrupt essential services or cause physical harm. Security must fit each organization’s assets, structure, and risk tolerance. Prioritize critical scenarios, contain incidents, and scale controls to asset criticality. Treat cybersecurity as an ongoing business process, with asset inventories, consistent practices, and rapid detection and response.

People and Emerging Risks

Introduce changes incrementally with operators, integrating security into existing workflows rather than imposing disruptive processes. OT security ownership depends on the organization; IT and OT responsibilities should align with its operating model. Regulations can overlap and differ in terminology. AI may strengthen attacks but also help analysts review alerts and respond faster. How should each organization assign OT security responsibilities? The transcript identifies no universal model.

Outline

OT Cybersecurity Context

Connected devices and remote operations create significant business benefits, but expand cyber exposure. OT security differs...