{"id":24496,"date":"2023-05-12T09:33:52","date_gmt":"2023-05-12T07:33:52","guid":{"rendered":"https:\/\/www.advens.com\/?p=24496"},"modified":"2025-06-12T17:30:36","modified_gmt":"2025-06-12T15:30:36","slug":"ot-cybersecurity-an-overview-of-the-risks","status":"publish","type":"post","link":"https:\/\/www.advens.com\/en\/media\/securite-operationnelle\/ot-cybersecurity-an-overview-of-the-risks\/","title":{"rendered":"OT Cybersecurity: An Overview of the Risks"},"content":{"rendered":"\n<p><strong>OT Systems (Operational Technologies) are now a prime target for cyber attackers.<\/strong><br>In 2021, 637 vulnerabilities affected industrial control systems in France (Claroty, 2021). This document provides a closer look at the various cybersecurity risks in industrial environments and the regulations in place to limit their spread.<\/p>\n\n\n\n<h1 class=\"wp-block-heading\">Key Cybersecurity Risks in OT Environments<\/h1>\n\n\n\n<p>OT-related risks can extend beyond the company\u2019s perimeter and potentially have broader consequences than those in IT:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Public Safety Risks<\/strong>: For example, an explosion caused by the combustion of chemical substances triggered by a cyberattack could injure an operator. Similarly, altering recipes in the food industry could impact consumer health.<\/li>\n\n\n\n<li><strong>Environmental Impact<\/strong>: A hacked OT system could cause a factory to release harmful chemicals into the environment.<\/li>\n\n\n\n<li><strong>Business Continuity Risks<\/strong>: These risks can directly affect production tools and revenue\u2014for instance, a hydrogen furnace explosion or a ransomware attack that paralyzes operations.<\/li>\n<\/ul>\n\n\n\n<h1 class=\"wp-block-heading\">Two Types of Cyberattacks in the Energy Sector<\/h1>\n\n\n\n<ol class=\"wp-block-list\">\n<li><strong>Attacks Targeting IT Systems<\/strong><br>Vulnerable IT systems are compromised, and the attack has side effects on industrial systems, leading to production shutdowns.<\/li>\n\n\n\n<li><strong>Attacks Targeting OT Systems<\/strong><br>These are often state-sponsored but can also come from criminal groups (hacktivism), as the impact is major and immediate\u2014especially if production is halted.<\/li>\n<\/ol>\n\n\n\n<h1 class=\"wp-block-heading\">Examples of Attack Paths in OT Environments<\/h1>\n\n\n\n<p>Attackers can exploit various entry points across OT systems. A comprehensive view of OT security is essential.<\/p>\n\n\n\n<h1 class=\"wp-block-heading\">Achieving 360\u00b0 OT Security with the PURDUE Model<\/h1>\n\n\n\n<p>All components of an industrial information system can be targeted. Deploying firewalls ensures optimal security across all layers of the production system\u2014from IT to OT and vice versa.<\/p>\n\n\n\n<p>Implementing a <strong>DMZ (Demilitarized Zone)<\/strong> to separate these two worlds (highlighted in orange in the diagram) creates a protective buffer zone.<\/p>\n\n\n\n<h1 class=\"wp-block-heading\">Increasingly Strict Regulations to Limit OT Cybersecurity Risks<\/h1>\n\n\n\n<p>While most companies protect their IT systems, only critical infrastructures (mainly Vital Importance Operators, or OIVs) currently protect their OT environments.<\/p>\n\n\n\n<p>To reduce the risk of attacks on vulnerable industrial systems, regulations are encouraging OT stakeholders to enhance their protection.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">The French Military Programming Law (LPM)<\/h2>\n\n\n\n<p>Under the 2014\u20132019 LPM, nearly 250 OIVs were required to meet legal cybersecurity obligations. These include 20 security rules such as security accreditation and PSSI policies.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">The NIS 2 Directive (EU Level)<\/h2>\n\n\n\n<p>The second version of the Network and Information Security directive expands the scope of the 2016 version. It now applies to ten times more industrial organizations across the EU.<\/p>\n\n\n\n<p>For example, IT service providers must now notify ANSSI within 24 hours if they suffer a cyberattack.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">The IEC 62443 Standard (International Level)<\/h2>\n\n\n\n<p>This is the global benchmark for managing cyber risks in evolving industrial systems.<\/p>\n\n\n\n<p>Its goal is to secure industrial products, systems, and solutions\u2014including their development processes.<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<p><strong>Advens supports you in protecting your industrial systems, ensuring production continuity, and complying with regulations.<\/strong><br>Now is the time to assess your industrial cybersecurity posture and guard against all types of attacks. <\/p>\n\n\n\n<div class=\"wp-block-buttons is-layout-flex wp-block-buttons-is-layout-flex\">\n<div class=\"wp-block-button\"><a class=\"wp-block-button__link wp-element-button\" href=\"https:\/\/www.advens.com\/en\/industrie\/industry-4-0\/\">Discover our dedicated OT security offering.<\/a><\/div>\n<\/div>\n","protected":false},"excerpt":{"rendered":"<p>OT Systems (Operational Technologies) are now a prime target for cyber attackers.In 2021, 637 vulnerabilities affected industrial control systems in France (Claroty, 2021). This document provides a closer look at the various cybersecurity risks in industrial environments and the regulations in place to limit their spread. Key Cybersecurity Risks in OT Environments OT-related risks can [&hellip;]<\/p>\n","protected":false},"author":3,"featured_media":28710,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"content-type":"","footnotes":""},"categories":[411,470],"tags":[],"custom_format":[471],"class_list":["post-24496","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-securite-operationnelle","category-security-operations"],"acf":[],"contentshake_article_id":"","yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v26.6 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>OT Cybersecurity: An Overview of the Risks - Advens<\/title>\n<meta name=\"description\" content=\"OT Systems (Operational Technologies) are now a prime target for cyber attackers.In 2021, 637 vulnerabilities affected industrial control systems in\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.advens.com\/media\/securite-operationnelle\/ot-cybersecurity-an-overview-of-the-risks\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"OT Cybersecurity: An Overview of the Risks - Advens\" \/>\n<meta property=\"og:description\" content=\"OT Systems (Operational Technologies) are now a prime target for cyber attackers.In 2021, 637 vulnerabilities affected industrial control systems in\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.advens.com\/media\/securite-operationnelle\/ot-cybersecurity-an-overview-of-the-risks\/\" \/>\n<meta property=\"og:site_name\" content=\"Advens\" \/>\n<meta property=\"article:published_time\" content=\"2023-05-12T07:33:52+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2025-06-12T15:30:36+00:00\" \/>\n<meta name=\"author\" content=\"Benjamin Leroux\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/www.advens.com\/media\/securite-operationnelle\/ot-cybersecurity-an-overview-of-the-risks\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/www.advens.com\/media\/securite-operationnelle\/ot-cybersecurity-an-overview-of-the-risks\/\"},\"author\":{\"name\":\"Benjamin Leroux\",\"@id\":\"https:\/\/www.advens.com\/#\/schema\/person\/0a0cf6bfbcf86fdef2602cefe9b941c7\"},\"headline\":\"OT Cybersecurity: An Overview of the Risks\",\"datePublished\":\"2023-05-12T07:33:52+00:00\",\"dateModified\":\"2025-06-12T15:30:36+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/www.advens.com\/media\/securite-operationnelle\/ot-cybersecurity-an-overview-of-the-risks\/\"},\"wordCount\":487,\"publisher\":{\"@id\":\"https:\/\/www.advens.com\/#organization\"},\"image\":{\"@id\":\"https:\/\/www.advens.com\/media\/securite-operationnelle\/ot-cybersecurity-an-overview-of-the-risks\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.advens.com\/app\/uploads\/2023\/05\/risques-environnement-industriel-1240x830-1-2.webp\",\"articleSection\":[\"S\u00e9curit\u00e9 Op\u00e9rationnelle\",\"Security Operations\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.advens.com\/media\/securite-operationnelle\/ot-cybersecurity-an-overview-of-the-risks\/\",\"url\":\"https:\/\/www.advens.com\/media\/securite-operationnelle\/ot-cybersecurity-an-overview-of-the-risks\/\",\"name\":\"OT Cybersecurity: An Overview of the Risks - Advens\",\"isPartOf\":{\"@id\":\"https:\/\/www.advens.com\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/www.advens.com\/media\/securite-operationnelle\/ot-cybersecurity-an-overview-of-the-risks\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/www.advens.com\/media\/securite-operationnelle\/ot-cybersecurity-an-overview-of-the-risks\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.advens.com\/app\/uploads\/2023\/05\/risques-environnement-industriel-1240x830-1-2.webp\",\"datePublished\":\"2023-05-12T07:33:52+00:00\",\"dateModified\":\"2025-06-12T15:30:36+00:00\",\"description\":\"OT Systems (Operational Technologies) are now a prime target for cyber attackers.In 2021, 637 vulnerabilities affected industrial control systems in\",\"breadcrumb\":{\"@id\":\"https:\/\/www.advens.com\/media\/securite-operationnelle\/ot-cybersecurity-an-overview-of-the-risks\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.advens.com\/media\/securite-operationnelle\/ot-cybersecurity-an-overview-of-the-risks\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.advens.com\/media\/securite-operationnelle\/ot-cybersecurity-an-overview-of-the-risks\/#primaryimage\",\"url\":\"https:\/\/www.advens.com\/app\/uploads\/2023\/05\/risques-environnement-industriel-1240x830-1-2.webp\",\"contentUrl\":\"https:\/\/www.advens.com\/app\/uploads\/2023\/05\/risques-environnement-industriel-1240x830-1-2.webp\",\"width\":1240,\"height\":830,\"caption\":\"Outils de cybers\u00e9curit\u00e9 OT\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.advens.com\/media\/securite-operationnelle\/ot-cybersecurity-an-overview-of-the-risks\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/www.advens.com\/en\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"S\u00e9curit\u00e9 Op\u00e9rationnelle\",\"item\":\"https:\/\/www.advens.com\/media\/securite-operationnelle\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"OT Cybersecurity: An Overview of the Risks\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.advens.com\/#website\",\"url\":\"https:\/\/www.advens.com\/\",\"name\":\"Advens\",\"description\":\"For Cyber, People &amp; Planet\",\"publisher\":{\"@id\":\"https:\/\/www.advens.com\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.advens.com\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/www.advens.com\/#organization\",\"name\":\"Advens\",\"url\":\"https:\/\/www.advens.com\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.advens.com\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/www.advens.com\/app\/uploads\/2025\/07\/Logotype-aDvens-Cybersecurity.png\",\"contentUrl\":\"https:\/\/www.advens.com\/app\/uploads\/2025\/07\/Logotype-aDvens-Cybersecurity.png\",\"width\":1501,\"height\":1501,\"caption\":\"Advens\"},\"image\":{\"@id\":\"https:\/\/www.advens.com\/#\/schema\/logo\/image\/\"},\"sameAs\":[\"https:\/\/www.linkedin.com\/company\/advens\/\"]},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.advens.com\/#\/schema\/person\/0a0cf6bfbcf86fdef2602cefe9b941c7\",\"name\":\"Benjamin Leroux\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.advens.com\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/6130a303ba5e9000db1d968b9c41bf9e?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/6130a303ba5e9000db1d968b9c41bf9e?s=96&d=mm&r=g\",\"caption\":\"Benjamin Leroux\"},\"sameAs\":[\"https:\/\/www.linkedin.com\/in\/benjamin-leroux-1688a4\/\"]}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"OT Cybersecurity: An Overview of the Risks - Advens","description":"OT Systems (Operational Technologies) are now a prime target for cyber attackers.In 2021, 637 vulnerabilities affected industrial control systems in","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.advens.com\/media\/securite-operationnelle\/ot-cybersecurity-an-overview-of-the-risks\/","og_locale":"en_US","og_type":"article","og_title":"OT Cybersecurity: An Overview of the Risks - Advens","og_description":"OT Systems (Operational Technologies) are now a prime target for cyber attackers.In 2021, 637 vulnerabilities affected industrial control systems in","og_url":"https:\/\/www.advens.com\/media\/securite-operationnelle\/ot-cybersecurity-an-overview-of-the-risks\/","og_site_name":"Advens","article_published_time":"2023-05-12T07:33:52+00:00","article_modified_time":"2025-06-12T15:30:36+00:00","author":"Benjamin Leroux","twitter_card":"summary_large_image","schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.advens.com\/media\/securite-operationnelle\/ot-cybersecurity-an-overview-of-the-risks\/#article","isPartOf":{"@id":"https:\/\/www.advens.com\/media\/securite-operationnelle\/ot-cybersecurity-an-overview-of-the-risks\/"},"author":{"name":"Benjamin Leroux","@id":"https:\/\/www.advens.com\/#\/schema\/person\/0a0cf6bfbcf86fdef2602cefe9b941c7"},"headline":"OT Cybersecurity: An Overview of the Risks","datePublished":"2023-05-12T07:33:52+00:00","dateModified":"2025-06-12T15:30:36+00:00","mainEntityOfPage":{"@id":"https:\/\/www.advens.com\/media\/securite-operationnelle\/ot-cybersecurity-an-overview-of-the-risks\/"},"wordCount":487,"publisher":{"@id":"https:\/\/www.advens.com\/#organization"},"image":{"@id":"https:\/\/www.advens.com\/media\/securite-operationnelle\/ot-cybersecurity-an-overview-of-the-risks\/#primaryimage"},"thumbnailUrl":"https:\/\/www.advens.com\/app\/uploads\/2023\/05\/risques-environnement-industriel-1240x830-1-2.webp","articleSection":["S\u00e9curit\u00e9 Op\u00e9rationnelle","Security Operations"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/www.advens.com\/media\/securite-operationnelle\/ot-cybersecurity-an-overview-of-the-risks\/","url":"https:\/\/www.advens.com\/media\/securite-operationnelle\/ot-cybersecurity-an-overview-of-the-risks\/","name":"OT Cybersecurity: An Overview of the Risks - Advens","isPartOf":{"@id":"https:\/\/www.advens.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.advens.com\/media\/securite-operationnelle\/ot-cybersecurity-an-overview-of-the-risks\/#primaryimage"},"image":{"@id":"https:\/\/www.advens.com\/media\/securite-operationnelle\/ot-cybersecurity-an-overview-of-the-risks\/#primaryimage"},"thumbnailUrl":"https:\/\/www.advens.com\/app\/uploads\/2023\/05\/risques-environnement-industriel-1240x830-1-2.webp","datePublished":"2023-05-12T07:33:52+00:00","dateModified":"2025-06-12T15:30:36+00:00","description":"OT Systems (Operational Technologies) are now a prime target for cyber attackers.In 2021, 637 vulnerabilities affected industrial control systems in","breadcrumb":{"@id":"https:\/\/www.advens.com\/media\/securite-operationnelle\/ot-cybersecurity-an-overview-of-the-risks\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.advens.com\/media\/securite-operationnelle\/ot-cybersecurity-an-overview-of-the-risks\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.advens.com\/media\/securite-operationnelle\/ot-cybersecurity-an-overview-of-the-risks\/#primaryimage","url":"https:\/\/www.advens.com\/app\/uploads\/2023\/05\/risques-environnement-industriel-1240x830-1-2.webp","contentUrl":"https:\/\/www.advens.com\/app\/uploads\/2023\/05\/risques-environnement-industriel-1240x830-1-2.webp","width":1240,"height":830,"caption":"Outils de cybers\u00e9curit\u00e9 OT"},{"@type":"BreadcrumbList","@id":"https:\/\/www.advens.com\/media\/securite-operationnelle\/ot-cybersecurity-an-overview-of-the-risks\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.advens.com\/en\/"},{"@type":"ListItem","position":2,"name":"S\u00e9curit\u00e9 Op\u00e9rationnelle","item":"https:\/\/www.advens.com\/media\/securite-operationnelle\/"},{"@type":"ListItem","position":3,"name":"OT Cybersecurity: An Overview of the Risks"}]},{"@type":"WebSite","@id":"https:\/\/www.advens.com\/#website","url":"https:\/\/www.advens.com\/","name":"Advens","description":"For Cyber, People &amp; Planet","publisher":{"@id":"https:\/\/www.advens.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.advens.com\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.advens.com\/#organization","name":"Advens","url":"https:\/\/www.advens.com\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.advens.com\/#\/schema\/logo\/image\/","url":"https:\/\/www.advens.com\/app\/uploads\/2025\/07\/Logotype-aDvens-Cybersecurity.png","contentUrl":"https:\/\/www.advens.com\/app\/uploads\/2025\/07\/Logotype-aDvens-Cybersecurity.png","width":1501,"height":1501,"caption":"Advens"},"image":{"@id":"https:\/\/www.advens.com\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.linkedin.com\/company\/advens\/"]},{"@type":"Person","@id":"https:\/\/www.advens.com\/#\/schema\/person\/0a0cf6bfbcf86fdef2602cefe9b941c7","name":"Benjamin Leroux","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.advens.com\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/6130a303ba5e9000db1d968b9c41bf9e?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/6130a303ba5e9000db1d968b9c41bf9e?s=96&d=mm&r=g","caption":"Benjamin Leroux"},"sameAs":["https:\/\/www.linkedin.com\/in\/benjamin-leroux-1688a4\/"]}]}},"featured_url":"https:\/\/www.advens.com\/app\/uploads\/2023\/05\/risques-environnement-industriel-1240x830-1-2.webp","_links":{"self":[{"href":"https:\/\/www.advens.com\/en\/wp-json\/wp\/v2\/posts\/24496","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.advens.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.advens.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.advens.com\/en\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/www.advens.com\/en\/wp-json\/wp\/v2\/comments?post=24496"}],"version-history":[{"count":1,"href":"https:\/\/www.advens.com\/en\/wp-json\/wp\/v2\/posts\/24496\/revisions"}],"predecessor-version":[{"id":24497,"href":"https:\/\/www.advens.com\/en\/wp-json\/wp\/v2\/posts\/24496\/revisions\/24497"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.advens.com\/en\/wp-json\/wp\/v2\/media\/28710"}],"wp:attachment":[{"href":"https:\/\/www.advens.com\/en\/wp-json\/wp\/v2\/media?parent=24496"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.advens.com\/en\/wp-json\/wp\/v2\/categories?post=24496"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.advens.com\/en\/wp-json\/wp\/v2\/tags?post=24496"},{"taxonomy":"format","embeddable":true,"href":"https:\/\/www.advens.com\/en\/wp-json\/wp\/v2\/custom_format?post=24496"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}