INDUSTRY UNPLUGGED

LESSONS FROM THE FLOOR  ·  FULL SERIES FEATURE

Practical OT Cybersecurity for Industrial Engineers

Lesson 1: Start with the Basics, Not the Buzzwords

Attend any cybersecurity conference and you'll hear about AI, Zero Trust, threat intelligence, and advanced monitoring platforms. While these technologies have value, they often distract organisations from what truly reduces cyber risk.

The best OT cybersecurity programs start with strong operational discipline — not expensive technology. Before investing in new tools, ask yourself: Do we have an accurate asset inventory? Can we restore our backups? Is USB usage controlled? Are user accounts regularly reviewed? Is there a patch management process? Do employees understand basic cyber hygiene? If the answer is “not consistently,” you’ve found your starting point.

Cybersecurity is not a product. It is a process supported by people and technology. Get the fundamentals right first, and every future investment becomes more effective.

“Cybersecurity is not a product. It is a process supported by people and technology. Master the basics before chasing the buzzwords.”

Also in Asad’s 6-lesson series:

›  Lesson 2: You Can’t Protect What You Don’t Know Exists — asset inventory as the foundation
›  Lesson 3: Backups Are Only Useful If You Can Restore Them
›  Lesson 4: USB Drives — The Smallest Device with the Biggest Risk
›  Lesson 5: The Most Important Security Device Is the Person at the Keyboard
›  Lesson 6: Implement ISA/IEC 62443 One Practical Step at a Time

About the Author: Asad Naeem is an Instrumentation, Control Systems, and OT Cybersecurity professional with over 12 years of experience designing, modernising, and securing industrial control systems in critical process industries. Through the Lessons from the Floor series, he shares field-tested insights to help engineers build secure, reliable OT environments. Connect on LinkedIn →

This is a community submission. The views expressed are those of the author based on their professional experience.

Submitted by: Asad Naeem — LinkedIn

OT SECURITY

ISA OT Cybersecurity Summit Draws Record Attendance as IEC 62443 Takes Centre Stage

The fourth annual ISA OT Cybersecurity Summit in Prague (June 2026) saw a 25.5% year-on-year attendance increase — 314 attendees, 41 speakers, 18 sponsors. ISASecure unveiled its new ACSSA programme, designed to demonstrate site-level compliance with ISA/IEC 62443. The surge reflects growing urgency among industrial operators to formalise OT security posture against an escalating threat landscape.

June 2026  |  Automation.com

OT SECURITY

Dragos 2026 Report: OT Threat Groups Shift from Reconnaissance to Active Operations

The 2026 Dragos OT Cybersecurity Year in Review identifies a critical shift — threat actors are moving from passive surveillance to active targeting of industrial control systems. Two new groups, AZURITE (data exfiltration, long-term OT surveillance) and PYROXENE (Iranian IRGC-backed, ICS-focused), were added to the threat registry. The report warns that only a fraction of OT networks currently have visibility to detect threats before operational impact occurs.

2026  |  ARC Advisory Group

MARKET INTELLIGENCE

Only 19% of Manufacturers Plan Cybersecurity Investment Despite 56% Expanding Automation

A 2026 Cisco industrial AI report reveals a critical mismatch: 56% of manufacturers plan new automation projects this year, but just 19% are prioritising cybersecurity spending. As connected PLCs, historians, and remote access tools multiply, the gap between operational ambition and security readiness widens. Cybersecurity is now the top barrier cited by manufacturers for AI adoption — yet capital allocation continues to favour operations over the security foundation they depend on.

2026  |  Manufacturing Dive

CASE STUDY

AI-Powered OT Security: Closing the Visibility Gap in Industrial Networks

For decades, the biggest OT security challenge wasn’t a lack of tools — it was a lack of visibility. Industrial networks grew organically: legacy systems speaking proprietary protocols, undocumented devices accumulating across the plant floor, no comprehensive picture of what was running or where. In 2026, AI-driven asset intelligence platforms are changing that equation. Non-invasive discovery tools now map OT environments in real time — tracking firmware versions, open ports, and network behaviour without disrupting production.

Platforms bringing OT asset discovery, vulnerability response, and incident management onto a single surface — with AI-driven workflow prioritisation — are closing the gap between “we identified a risk” and “we resolved it.” IDC projects that by 2029, 75% of large manufacturers will deploy AI-powered cyber defence to detect threats faster and with less manual effort. But the companies building foundational asset inventories and access policies now are the ones who will be ready when the window matters.

“In 2026, the most valuable asset may no longer be the machinery itself — it’s the operational data generated every second of production.”

Source: IoT Analytics

UNPLUGGED — EP 55 · DROPPING TODAY

Kristopher Sandoval — FlowFuse — Scaling Node-RED for Industrial Automation (Part 2)

Phil and Ed continue the FlowFuse deep dive with Kristopher Sandoval — exploring enterprise deployment patterns, team management across Node-RED instances, and how FlowFuse is positioning for the industrial edge AI era. Episode 55 drops Tuesday 15 July. Subscribe now to catch it as soon as it lands.

Help keep Unplugged independent and ad-light.

Join the Patreon membership and get early access to episodes, behind-the-scenes notes, and a direct line to Phil & Ed. Or follow us on LinkedIn to catch every drop.

Know someone who should read this?

Forward this email — or share the link to subscribe.

Unplugged: An IIoT Newsletter

by Industry Unplugged  |  Phil Seboa  |  info@unplugged-education.com

Industry Unplugged, Brisbane, Australia

You’re reading an archived edition of Unplugged: An IIoT Newsletter.
Subscribe or browse every issue at unpluggediiot.com/newsletter

© 2026 Industry Unplugged. All rights reserved.