1. Overview

1.1 Objectives

This document aims to catalogue and analyse key Operational Technology (OT) use cases across various sectors, with a focus on critical infrastructure. It seeks to identify the associated cyber and operational risks inherent in these environments and to recommend appropriate security controls tailored to the unique requirements of OT systems. By doing so, it supports the development of resilient, secure, and trusted OT environments capable of withstanding evolving threat landscapes.

1.2 Target Audience

The intended audience for this document includes cybersecurity policy developers, OT engineers, system architects, operators, and stakeholders involved in the protection and oversight of critical systems. These stakeholders play a vital role in shaping, implementing, and maintaining the cybersecurity posture of the OT system.

1.3 Document Structure

This document is organized to provide both a high-level overview and detailed technical insights:

• Section 2 provides a summary of prominent OT use cases across sectors.

• Section 3 and subsequent sections present a detailed analysis of each use case. This includes the identification of sector-specific threats, vulnerabilities, and risks, as well as recommended security controls and mitigation strategies aligned with best practices and regulatory requirements.