Recent Attacks Highlight the Need for Stronger OT Security Across PLC, SCADA and Industrial Control Systems

Industrial cybersecurity is becoming one of the most important issues in the automation industry as attackers increasingly target operational technology environments.

Recent incidents involving industrial infrastructure and automation suppliers have highlighted the risks associated with internet-connected PLCs, remote access systems and industrial networks.

One recent case involved Micro-Comm, a Kansas-based supplier of technology used by water utilities. The company was targeted in a cyberattack that resulted in the exposure of a large volume of company data.

The incident attracted attention because Micro-Comm supplies PLC technology used in wastewater facilities.

Although the incident did not mean that customers' operational systems had been compromised, cybersecurity experts warned that information exposed during attacks could potentially help attackers understand industrial environments.

The incident demonstrates why cybersecurity must be considered throughout the industrial automation supply chain.

PLCs Are Becoming Security-Critical Devices

PLCs are designed primarily to control physical processes.

They can operate:

• Pumps
• Motors
• Valves
• Conveyors
• Water treatment equipment
• Production machinery

Traditionally, many PLC systems operated inside isolated industrial networks.

That architecture is changing.

Modern factories and infrastructure facilities increasingly connect PLCs to:

• HMIs
• SCADA systems
• Engineering workstations
• Remote maintenance systems
• Cloud platforms
• Enterprise networks

Connectivity provides important operational benefits.

However, it also creates additional security considerations.

Water Infrastructure Is a Major OT Security Concern

Water and wastewater facilities rely heavily on automation.

A modern water treatment facility may use PLCs and SCADA systems to control:

• Pump stations
• Chemical dosing
• Filtration
• Water levels
• Pressure
• Flow

If these systems are disrupted, operators may face significant operational challenges.

This makes water infrastructure an important target for cybersecurity protection.

Utilities increasingly need to evaluate not only their own security but also the security of technology suppliers and contractors.

Supply Chain Security Is Becoming More Important

Industrial organizations depend on a large network of technology suppliers.

A factory or utility may purchase:

• PLCs
• HMIs
• Industrial computers
• Network equipment
• Engineering software

from multiple vendors.

A cybersecurity weakness at a supplier can potentially create risks for customers.

This means industrial cybersecurity cannot focus only on the plant network.

Companies also need to understand their technology supply chain.

Remote Access Creates New Security Challenges

Remote access is widely used in industrial automation.

Engineers can troubleshoot PLCs and SCADA systems without traveling to a facility.

This can reduce maintenance costs and improve response times.

However, poorly configured remote access can create security weaknesses.

Industrial organizations should carefully control:

• User accounts
• Passwords
• Authentication
• Remote connections
• Access permissions
• Session monitoring

Access should be limited to authorized users and necessary functions.

Legacy PLC Systems Require Special Attention

Many industrial facilities operate automation systems for long periods.

Legacy PLCs can continue to perform their original control functions reliably.

However, older systems may not provide modern cybersecurity features.

Companies therefore face a difficult decision.

Replacing a complete control system can be expensive.

But continuing to operate unsupported equipment can increase security and maintenance risks.

A phased modernization strategy can provide a practical solution.

Network Segmentation Protects Industrial Systems

Network segmentation is one of the most important principles of OT security.

Industrial organizations can separate systems into different zones.

For example:

• Enterprise IT
• Industrial DMZ
• SCADA
• PLC network
• Field devices

Controlled communication can then be established between zones.

This approach reduces unnecessary exposure and helps limit the impact of security incidents.

Industrial Monitoring Helps Detect Abnormal Activity

Security monitoring is becoming increasingly important.

Industrial organizations can establish a baseline of normal network behavior.

Unusual activity can then trigger investigation.

Monitoring can identify:

• Unknown devices
• Unexpected communication
• Unusual network traffic
• Unauthorized access attempts

This provides greater visibility into the industrial environment.

Cybersecurity and Safety Are Closely Connected

In industrial environments, cybersecurity and functional safety cannot always be treated as separate issues.

A cyber incident that affects a PLC or safety-related system could potentially influence physical processes.

For example, industrial equipment may operate under specific temperature, pressure or speed conditions.

Unauthorized changes could create operational and safety concerns.

This makes cybersecurity an important part of overall industrial risk management.

PLC Engineers Need Cybersecurity Awareness

Automation engineers traditionally focus on:

• PLC programming
• Control logic
• Industrial networking
• HMI configuration

Modern engineers increasingly need additional cybersecurity knowledge.

Important areas include:

• Network architecture
• User authentication
• Secure remote access
• Firmware management
• System hardening
• Security monitoring

The goal is not to turn every PLC engineer into a cybersecurity specialist.

Instead, cybersecurity needs to become part of normal automation engineering practices.

Industrial Suppliers Have an Important Role

Automation equipment suppliers can also contribute to improved OT security.

When supplying replacement equipment, suppliers should provide accurate information about:

• Product lifecycle
• Compatibility
• Firmware
• Communication interfaces
• Security capabilities

Customers increasingly need this information when modernizing legacy automation systems.

For international automation distributors, technical accuracy is becoming increasingly important.

AI Changes the Industrial Cybersecurity Landscape

Artificial intelligence is creating both opportunities and risks.

Industrial companies can use AI to analyze:

• Network activity
• Equipment behavior
• Security logs
• Maintenance data

However, attackers may also use AI to accelerate research and develop more sophisticated attack techniques.

This means industrial cybersecurity strategies will need to evolve continuously.

The Growing Importance of OT Security

Industrial automation is becoming increasingly connected.

Factories, power plants, water utilities and process facilities are adopting:

• Industrial IoT
• Cloud systems
• Edge computing
• Remote maintenance
• AI analytics

These technologies provide significant benefits.

But secure architecture must be included from the beginning.

Security cannot simply be added after a system has already been connected.

Future Industrial Automation Must Be Secure by Design

Future PLC and DCS systems will increasingly include cybersecurity features as standard requirements.

Industrial organizations will focus more heavily on:

• Secure device configuration
• Network segmentation
• Identity management
• Continuous monitoring
• Secure remote access
• Lifecycle management

Cybersecurity will become a normal part of automation system design.