How does IT/OT convergence typically affect an industrial organization's attack surface?
- A.It eliminates attack surface by removing all legacy protocols
- B.It only affects physical security, not cyber exposure
- C.It has no measurable effect because OT remains fully air-gapped
- D.It expands the attack surface by introducing more network connectivity, shared infrastructure, and IT-borne threats into OT
Why D is correct
Connecting OT to enterprise networks, cloud services, and remote access for efficiency also exposes formerly isolated control systems to commodity malware, phishing-driven pivots, and internet-facing vulnerabilities. The result is a larger and more interconnected attack surface that must be deliberately segmented and monitored.
Know someone studying for OT Security Fundamentals? Send them this one.