TABLE OF CONTENTS ACKNOWLEDGEMENTS We would like to thank the OT community for their valuable input and support over the course of developing this Masterplan. In particular, we would like to specially mention the following individuals for their quotes provided in this publication, in alphabetical order of surname: FOREWORD 1 EXECUTIVE SUMMARY 3 INTRODUCTION What is Operational Technology? Evolution of Operational Technology in the Age of Digitalisation 5 5 6 OT CYBER THREAT LANDSCAPE Overview of Cyber-attacks Against OT Systems How These Global OT Cyber Trends Affect Singapore 9 10 12 THE NEED FOR AN OT CYBERSECURITY MASTERPLAN 14 • Ms. Nathalie Marcotte, SVP, Cybersecurity and Industry Services, Schneider Electric WHO THE MASTERPLAN IS FOR 15 FOCUS AREA: INDUSTRIAL CONTROL SYSTEMS (ICS) 16 • Mr. Ng Joo Hee, Chief Executive, Public Utilities Board CHALLENGES TO SECURE ICS People Process Technology 19 22 24 26 KEY THRUSTS 29 • Mr. David Foo, Senior Director, Operations Technology, Maritime and Port Authority of Singapore • Mr. Robert M. Lee, Chief Executive Officer and Founder, Dragos, Inc. • Ms. Michelle Knight, GM, Industrial Control Systems, Shell • Mr. Ngiam Shih Chun, Chief Executive, Energy Market Authority • Mr. Hiroshi Tanoguchi, Head of Lifecycle Service Business Division, IA Systems & Service Business HQ, Yokogawa Electric Corporation • Mr. Donnie W. Wilburn, IT Risk Management Manager, ExxonMobil Global Services Company • Mr. Shinichi Yokohama, Chief Information Security Officer, NTT Corporation KEY THRUST 1: OT Cybersecurity Training 30 KEY THRUST 2: OT Cybersecurity Information Sharing and Analysis Center (OT-ISAC) 32 KEY THRUST 3: Strengthening Policies and Processes 35 KEY THRUST 4: Adopting Technologies for Cyber Resilience 37 CONCLUSION 42