Risks in OT: results from OT monitoring and vulnerability assessments

The presentation is a cooperation between Rhebo, a provider of an attack detection system for OT networks, telent, a provider of technology solutions and services in the field of critical infrastructures (KRITIS), and a German energy supply company (naming is currently under discussion).
The presentation is dedicated to the challenge of cyber security in industrial networks from practice for practice. Two levels will be highlighted in particular:
What risks and vulnerabilities are found in OT networks in the first place? The top 10 findings are categorised in terms of their criticality and prevalence and evaluated in the context of network structures. All data comes from over two dozen risk analyses and vulnerability assessments carried out by Rhebo in the operational technology of KRITIS and industrial companies in 2023.
What does a holistic cyber security structure according to IT-SiG 2.0 look like? This case study explains the steps and experiences of a German energy supply company towards an efficient security architecture across the entire distributed infrastructure. The focus here is on the question of how the requirements of the BSI guidance for ‘attack detection systems’ can be sensibly implemented.

The audience will gain a practice-based insight into the real risk exposure of many OT networks and learn lessons from successful OT security projects in KRITIS companies.

The presentation is aimed at security officers of industrial companies for whom OT security represents a new challenge, as well as managing directors who want to ensure legal compliance with existing (IT-SiG 2.0) and upcoming (NIS2) regulations as part of their operator responsibility.