OT CYBER THREAT LANDSCAPE In the past, malicious cyber activities were limited to website defacement, data theft and cyber-fraud. Cyber criminals also relied on social engineering tactics – for example, through phishing emails that entice individuals to click on malicious links that will Robert M. Lee CEO and Founder, Dragos, Inc., American ICS cybersecurity company 8 compromise their accounts or online credentials. A more worrying threat has developed with “As a community we have moved beyond the the increased connectivity between IT and OT land of theoretical cyber-attacks on industrial operations to a world where these attacks are a reality for denying power, disrupting operations, and even specifically targeting human life as was the case in the TRISIS cyberattack in 2017. The threat is worse than we realise but not as bad as we want to imagine. It is a worthy cause to invest in and prioritise OT cybersecurity and it is a winnable battle.” systems. Adversaries are now able to compromise OPERATIONAL TECHNOLOGY CYBERSECURITY MASTERPLAN 2019 IT systems connected to the Internet, secure their footholds, and move to the OT systems to disrupt industrial processes. OPERATIONAL TECHNOLOGY CYBERSECURITY MASTERPLAN 2019 9