How does IT/OT convergence typically affect an industrial organization's attack surface?
- A.It has no measurable effect because OT remains fully air-gapped with every historian replication link terminating inside Level 2
- B.It eliminates attack surface by removing all legacy protocols, an outcome that vendor conformance testing demonstrates end to end, from field instrument to enterprise historian
- C.It only affects physical security, not cyber exposure
- D.It expands the attack surface by introducing more network connectivity, shared infrastructure, and IT-borne threats into OT
Why D is correct
Connecting OT to enterprise networks, cloud services, and remote access for efficiency also exposes formerly isolated control systems to commodity malware, phishing-driven pivots, and internet-facing vulnerabilities. The result is a larger and more interconnected attack surface that must be deliberately segmented and monitored.
Know someone studying for OT Security Fundamentals? Send them this one.