NIS2 compliance requires enhanced security for operational technology

In response to the NIS2 directive and Section 30 of the German BSIG, industrial companies must implement technical and organizational measures to secure operational technology (OT). Protecting production processes requires looking beyond standard office IT to include control systems, engineering computers, and maintenance access points.

Key strategies for securing OT include identifying critical assets and their dependencies, as well as clearly defining decision-making authorities. It is essential to establish who has the power to approve maintenance access or disconnect network segments during an alarm to avoid disrupting continuous production processes.