2. Operational Technology (OT)

2.1 OT System Definition

Operational Technology (OT) refers to the hardware and software systems used to monitor, control, and manage physical devices, processes, and infrastructure in real time. Unlike Information Technology (IT), which focuses on data processing, storage, and communication, OT is primarily concerned with the direct control and automation of systems that interact with the physical world.

Traditionally associated with industrial sectors such as manufacturing, energy, utilities, and transportation, OT extends beyond industry-specific applications. It also plays a vital role in non-industrial environments, including tele-communication, navigation and other mission-critical control environments.

The core purpose of OT is to ensure the safe and reliable operation of systems. By enabling real-time automation and control, OT helps organisations optimise performance, minimise downtime, reduce human error, and maintain the integrity of critical infrastructure. As OT environments become more interconnected with IT networks, the convergence of IT and OT also introduces new challenges and opportunities in areas such as cybersecurity, data integration, and system interoperability.

2.2 OT System Abstract Reference Architecture

This layered architecture outlines how various Operational Technology (OT) systems – such as Autonomous and Remotely Operated Systems (AROS), Building Management Systems (BMS), and Traffic Management Systems (TMS) – function across onboard, hybrid, and remote deployments. Each system is structured into multiple functional layers, including perception, intelligence, actuation, communication, telemetry, backend infrastructure, and supervisory control. These layers work together to enable real-time sensing, decision-making, control execution, data transfer, logging, cloud-based analytics, and fleet or system-wide monitoring. While AROS relies heavily on high-speed communication and advanced AI for mobility and autonomy, BMS focuses on optimizing building efficiency and security, and TMS ensures safe and efficient traffic flow. This framework enables a modular and scalable approach to managing complex OT environments.

This layered architecture and mapping to its corresponding components across all use cases is presented in Table 1 below.

Table 1: OT System Reference Architecture and Mapping to Use Cases

Each use case addresses its own threats, with its own T-numbering, in its chapter.

2.3 OT Use Cases

Operational Technology (OT) systems are critical for managing and automating infrastructure and industrial processes across various domains. Use cases include Building Management Systems (BMS) for controlling HVAC, lighting, and security; Smart Monitoring Systems (SMS) for tracking electricity, water, and gas usage; and Production Monitoring Systems (PMS) for overseeing manufacturing operations. Traffic Management Systems (TMS) optimise transportation flow, while Navigation Systems (NGS) support real-time asset movement and routing. Autonomous and Remotely Operated Systems (AROS), such as drones, robots, and underwater vehicles, enable remote surveillance and operations. Industrial Control Systems (ICS) facilitate the coordination of complex operations like port vessel traffic and airport ground tracking, enhancing efficiency and safety.

2.3.1 Building Management System (BMS)

Description: A Building Management System (BMS) integrates and manages the mechanical, electrical, and electromechanical systems within a building. Its primary goal is to improve operational efficiency, comfort, and safety while reducing energy consumption and enhancing building performance. BMS systems are commonly used in commercial, residential, and industrial facilities to optimize the operation of heating, ventilation, air conditioning (HVAC), lighting, and security systems.

Key Components:

• HVAC Controllers and Sensors: These control the building’s climate and include temperature, humidity, and air quality sensors.

• Lighting Control Systems: Automated systems to manage lighting based on occupancy and environmental conditions.

• Access Control and Security Systems: Includes electronic locks, surveillance cameras, and security alarms.

• Fire Detection and Alarm Systems: Systems to detect and alert to potential fire hazards.

• Lift and Escalator Systems: Vertical transportation systems, including control, motion, and safety subsystems.

• Plumbing and Sanitary (P&S) Systems: Includes water supply, drainage, and sanitary monitoring and control.

• Green Lease / Sub-Metering Systems: Metering infrastructure used to monitor and report tenant-level energy and water consumption in support of green lease and sustainability requirements.

• Central Management Software/Human-Machine Interface (HMI): Provides centralized control and monitoring of all BMS components.

Security Considerations: Securing BMS is critical as it controls life-sustaining systems like HVAC and fire alarms. Threats such as unauthorized access, tampering with settings, or disruption of system communication can lead to significant safety risks. Controls like encryption of communication paths, access control, and continuous monitoring of system behaviour are essential to safeguarding these systems.

2.3.2 Smart Monitoring Systems (SMS) – Electricity, Water and Gas

Description: Smart Monitoring Systems oversee the generation, distribution, and usage of utilities such as electricity, water, and gas. These systems are integral to improving efficiency, detecting faults, and enabling data-driven decision-making. They often support smart grid functionalities, load balancing, and predictive maintenance across utility networks.

Key Components:

• Smart meters and utility-specific sensors

• Energy and resource management software

• Communication infrastructure (wired/wireless)

• Distribution control devices (e.g. circuit breakers, valves)

• Data analytics and dashboard platforms

Security Considerations: SMS are high-value targets for tampering and disruption, particularly in the energy sector. Compromising these systems can lead to billing fraud, supply outages, or false reporting. Key security measures include secure communication protocols, device authentication, anomaly detection for tampering attempts, and redundancy for critical links.

2.3.3 Production Monitoring System (PMS)

Description: Production Monitoring Systems provide real-time oversight of manufacturing processes to ensure quality, efficiency, and timely delivery. They integrate with machine-level controls to collect performance data and synchronize with enterprise systems for resource planning and workflow management.

Key Components:

• Programmable Logic Controllers (PLCs) and sensors

• Data acquisition devices and interfaces

• Manufacturing Execution Systems (MES)

• ERP system integration modules

Security Considerations: PMS systems often connect to both OT and IT environments, increasing exposure to cross-domain risks. Threats include sabotage, data exfiltration, and ransomware. Strong network segmentation, secure integration APIs, and role-based access control are essential to limit attack surfaces and maintain production integrity.

2.3.4 Traffic Management System (TMS)

Description: Traffic Management Systems coordinate road traffic through dynamic control of signals, signage, and information systems. They aim to improve traffic flow, minimize congestion, and enhance safety for pedestrians and vehicles.

Key Components:

• Traffic signal controllers and timers

• Surveillance cameras and roadside sensors

• Central traffic management dashboards

• Fibre or wireless communication networks

Security Considerations: TMS infrastructure is susceptible to denial-of-service attacks, tampering, and sensor spoofing. Disruption may result in congestion or accidents. Safeguards include redundant telecommunication links, access restrictions on control software, and anomaly detection on data feeds and control signals.

2.3.5 Navigation System (NGS)

Description: Navigation Systems support autonomous or guided movement across land, sea, or air through integration of geolocation technologies, mapping data, and inertial guidance. These systems are vital for drones, ships, vehicles, and robots.

Key Components:

• GPS or GNSS receivers

• Inertial Measurement Units (IMUs)

• Route planning and mapping software

• Communication modules (radio, cellular, satellite)

Security Considerations: Navigation systems are vulnerable to GPS spoofing, signal jamming, and map data corruption. These attacks can mislead operators or autonomous systems into unsafe areas. Controls should include sensor cross-validation, geofence alerts, encrypted GNSS signals (where available), and fallback logic for degraded navigation inputs.

2.3.6 Autonomous and Remotely Operated Systems (AROS) – UAVs, Drones, Robots, and AUVs

Description: AROS encompass systems capable of operating with minimal or no human intervention. These systems are used across various sectors for surveillance, inspection, delivery, and industrial operations. They rely on onboard intelligence, sensors, and communication links for safe and effective operation. AROS are categorised based on their operational environment:

• UAVs (Unmanned Aerial Vehicles) for air-based operations.

• AUVs (Autonomous Underwater Vehicles) for water-based tasks, including underwater inspections, research, and mapping.

• Robots for ground-based functions such as industrial automation, exploration, or hazardous material handling.

Key Components:

• Onboard control computers (autopilots or flight controllers)

• Environmental and positioning sensors (e.g. lidar, GPS, IMU)

• Communication interfaces (radio, 5G, satellite)

• Actuators and payload modules

• Operator consoles or control software

Security Considerations: AROS face risks such as command spoofing, data manipulation, physical tampering, and firmware compromise. Security must cover communication integrity, subsystem isolation, physical access control, and robust telemetry validation to ensure operational trust and safety.

2.3.7 Industrial Control System (ICS) – Port Vessel Traffic, Airport Ground Tracking

Description: Industrial Control Systems regulate and automate complex industrial processes across critical infrastructure sectors, including transport hubs. These systems manage operations in real time through programmable controls, sensors, and supervisory software.

Key Components:

• PLCs for direct process control

• Supervisory Control and Data Acquisition (SCADA) systems

• Distributed Control Systems (DCS)

• Sensors, actuators, and interface modules

• HMI terminals and dashboards

• Industrial protocols (Modbus, Profibus, OPC UA, OPC DA, MQTT, and other proprietary protocols)

Security Considerations: ICS are high-impact targets due to their role in essential services. Attacks may cause downtime, physical damage, or safety hazards. Recommended protections include network segmentation, protocol whitelisting, firmware integrity checks, intrusion detection, and secure remote access channels.**
**