Cybersecurity Becomes Core to Industrial Operations
Rockwell Automation has launched a new cybersecurity-focused season of its ROKStudios video series, signaling a clear shift in how manufacturers approach operational risk. No longer treated as a peripheral IT concern, cybersecurity is now embedded directly into production environments, where downtime, safety, and data integrity intersect.
From Awareness to Execution in Smart Manufacturing
Building on insights from the State of Smart Manufacturing Report, the series emphasizes a transition many industrial organizations are currently undergoing: moving from conceptual awareness of cyber threats to practical, system-level implementation. This includes securing interconnected assets, managing OT vulnerabilities, and aligning cybersecurity strategies with real production workflows.
Key Industry Voices and Practical Strategies
The new season features perspectives from global manufacturers and domain experts:
- Andrew Peckston highlights how cybersecurity is being integrated into supply chain strategy, ensuring resilience across geographically distributed operations.
- Steve Lynn focuses on foundational OT practices such as asset visibility and network segmentation—areas still underdeveloped in many plants.
- Maria Else and John Speakman examine regulatory pressure and lifecycle security integration.
- Barry Long discusses operational fragility caused by aging infrastructure and workforce gaps.
These discussions reflect a broader industry reality: cybersecurity maturity is uneven, and many facilities are still building baseline capabilities.
IT/OT Convergence Expands the Attack Surface
As IT and OT systems converge, the traditional isolation of industrial control systems is disappearing. Increased connectivity—driven by cloud platforms, remote monitoring, and AI-enabled analytics—has expanded the attack surface significantly. Nearly half of manufacturers reporting cyber incidents within a year is not surprising; it reflects systemic exposure rather than isolated failures.
From an engineering standpoint, this means cybersecurity design must be considered at the same level as control logic and safety systems. Network architecture, firmware integrity, and protocol-level security (e.g., EtherNet/IP, Modbus TCP) are no longer optional considerations.
My Perspective: Cybersecurity Is Now a Control Layer
In my view as an industrial automation engineer, cybersecurity should be treated as an additional control layer—parallel to PLC logic and safety interlocks. Just as we design redundancy into systems (e.g., SIL-rated architectures or TMR in SIS), we must design resilience into communication and data layers.
A practical approach includes:
- Embedding security at the I/O and controller level
- Segmenting networks based on process criticality
- Monitoring real-time anomalies, not just IT-level events
- Integrating cybersecurity into maintenance and lifecycle planning
Ignoring these aspects leads to what I call “invisible downtime risk”—where systems appear functional but are vulnerable to disruption at any moment.
Cybersecurity as a Foundation for Digital Transformation
A consistent message across the ROKStudios series is that cybersecurity is not a barrier to innovation—it is an enabler. Without a secure foundation, scaling AI, advanced analytics, or autonomous operations becomes unsustainable. Digital transformation initiatives will only succeed if resilience is engineered into every layer of the system.
