For many years, information technology (IT) and operational technology (OT) have followed separate paths, each pursuing its own goals to deliver maximum benefit within its industries or companies.
After giving it some thought, I'm "daring" to give my opinion and perspective on what I've learned after these 16 years working (as of 2024), mainly with Operational Technology but interacting very (too) closely with IT areas, and in turn, how these two areas differ, but above all in how they can and They MUST converge to form a single force, always with the objective of providing the maximum return value to the companies.
I will surely be limited by space (there's so much to say on this topic) and perhaps also by "ignorance" (there will be many other experiences and opinions). Therefore, I invite you, from now on, to Comment and give me your opinion.. Your feedback will surely help us improve the approach and focus of this topic.
Information Technology (IT)
Historically, IT can be said to focus on data management and processing, software applications, networks, and communications. The main objective of IT is to optimize information flow and operational efficiency through the digitization and automation of administrative and business processes.
For IT, data security and confidentiality are paramount. IT focuses on protecting sensitive information and ensuring that systems are accessible and reliable.
It uses technologies such as servers, data networks, software applications, and cloud services. The IT infrastructure is highly dynamic and adaptive to new technologies.
Perhaps I have fallen short in the definition (there is much more, of course), but to focus on the topic it is sufficient I think.
Operational Technology (OT)
On the other hand, OT has also historically dealt with the monitoring and control of physical devices and systems in industrial and manufacturing environments. OT systems are designed to manage machinery, critical infrastructure, and industrial processes, ensuring operational continuity and safety.
For OT, the priority is availability and operational safety. OT systems must ensure that industrial processes run without interruption, minimizing the risk of failures that could cause physical damage or economic losses.
Classic equipment used in OTs or based on specific technologies such as PLCs (Programmable Logic Controllers), SCADA (Supervisory Control and Data Acquisition), and distributed control systems (DCS). These technologies are designed to be robust and reliable in harsh industrial environments.
Again, there is more to discuss on this topic, but I think this is enough to provide some context.
IT and OT Integration and Convergence
Over the years (especially recently), this "convergence" has accelerated, whether by necessity or by default. We see how DCS or SCADA systems (even PLC-based systems) have already integrated servers, high-speed communication networks, operational information systems, web systems, firewalls, virtualization technology, operational data centers, applications for operational performance, and so on. In other words, a great deal of infrastructure and software that was historically used almost exclusively by IT, but always maintaining a focus on ensuring availability and operational continuity.
And on the IT side, progress continues with a clear approach to OT in order to provide services that can offer high value such as Domain Controller services, advanced backup services, disaster recovery, licensing, cybersecurity, database service consumption, operational data integration, etc.
While there is still much to be done, or many problems and challenges in this whole "integration," companies continue to make progress in harmonizing this integration between IT and OT so that they are not islands, each providing separate solutions.
I believe that companies understand that to achieve the goal of Industry 4.0 and IoT (IIoT), this convergence is necessary, no matter what.
Cultural and technical differences among professionals
IT and OT professionals often have different priorities and approaches.
In IT, words like "order", "cybersecurity", "confidentiality", "integrity", "update or upgrade" make a lot of sense and are even "rules" that should hardly be broken.
Whereas with OT, words like "availability", "production", "agility", "security", "maintenance", "24x7x365", "day and night shift", "if it ain't broke, don't fix it" have a badge on every OT professional.
Therefore, to continue advancing in this convergence, both types of professionals need to acquire a little more and more of both cultures and priorities.
Not to mention the technical skills required. Although I come from the OT world, I must say that interacting with top IT professionals has been incredibly enriching. Applying this IT perspective to OT, I believe, creates a highly effective synergy that, above all, adds value to the company.
Another common example is the speed at which operating system updates and/or patches are released. In IT, this is standard practice and very fast; it's even a must. That is, a well-maintained IT system should be up-to-date with the latest software versions. In OT, this is much slower; even today, many systems are launched with a specific operating system and patches and often reach their end of life with those same versions. Instead, we have to wait for the manufacturer to validate, test, and ensure that everything will be working correctly before we perform any updates.
Another gem to mention is how much it has cost (and continues to cost) us, those of us in OT, to internalize cybersecurity. Activating domain controllers on operator workstations, engineering systems, servers, HMI panels, etc., is perhaps something 'new,' as is using firewalls on our industrial networks. The use of the username/password 'admin/admin' or 'admin/default' (and many other known combinations) is something easily discovered with a simple audit. Even today, you still see handwritten notes and pieces of paper next to some HMI panels indicating the username and password (of course, when there are problems and plant shutdowns, we need quick access to the panel :D).
Addressing the Technical Challenges, Summary
In summary, we could mention the main problems seen in this IT/OT convergence:
Network and Systems Integration:
Integrating IT and OT systems is complex due to differences in architectures and protocols. IT systems typically use standardized and open protocols, while OT systems often use proprietary and industry-specific protocols, making interoperability difficult.
Cybersecurity:
OT systems were originally designed to operate in isolated environments and are not well-equipped to deal with modern cyber threats. Convergence with IT exposes OT systems to cybersecurity risks, requiring an update to protection strategies to include measures such as firewalls, intrusion detection systems, and network segmentation.
Updates and Maintenance:
OT technologies often have much longer lifecycles than IT technologies. Upgrading or replacing OT equipment can be costly and risky, as any disruption can impact production or operational safety. On the other hand, IT systems are upgraded and replaced more frequently, creating a disparity in maintenance and upgrade cycles.
Scalability and Flexibility:
IT systems are designed to be scalable and adaptable as needs change. In contrast, OT systems are optimized for stability and reliability under specific conditions, making them less flexible and more difficult to scale without careful planning and significant infrastructure changes.
Differences in Data Management:
In IT, large volumes of data are handled in real time, utilizing advanced data analytics and big data technologies. Meanwhile, in OT, the focus is on critical, real-time operational data for process control, which must be accurate and continuously available. Integration requires solutions that can effectively manage and analyze both types of data.
Yes, I know what you're thinking, "Jose Carlos, this isn't absolute," and I agree with you. Depending on the system, culture, or organization, they will have more or less progress in this IT/OT integration. For example, in modern DCS, this IT/OT integration might be simpler because everything is already standardized and advanced, but in many other systems, it isn't.
Conclusions
I didn't mean to sound overly dramatic, but the reality in medium-sized and large companies is that these gaps are gradually closing, thanks to significant effort from both sides. Many departments today are called 'Technology Departments' and encompass everything across the board, fostering a collaborative effort to bring both technological areas together.
There will always be intermediate points, gray areas or zones that are not clearly defined, and perhaps in the future this IT or OT designation will become outdated to consolidate everything into a common and transversal 'technological' term.
Let us remember, and never forget, that any technology (IT, OT, or whatever you want to call it) must always demonstrate its tangible value to the business; if it doesn't, then it's simply a wish or a nice-to-have. These benefits could include increased production, greater equipment availability, higher productivity, reduced operating costs, improved SHEC safety ratings, and so on.
I encourage you to add to the article with your own experience by writing in the comments. I'm sure you have more than one anecdote to share or other perspectives to offer. I look forward to reading them!‘
If you liked this article, COMMENT and SHARE!
Spanish 
English