Cybersecurity Becomes a Core Priority for Industrial Automation
Rockwell Automation has introduced a new cybersecurity season of its ROKStudios video series. The program focuses on practical cybersecurity strategies for modern industrial operations.
The new season brings together manufacturers, cybersecurity specialists, and industrial automation professionals. Their discussions address growing risks across connected factories and digital production environments.
Moreover, the series reflects a major industry shift. Manufacturers now treat cybersecurity as an operational requirement rather than a separate IT responsibility.
For industrial automation companies, this change directly affects PLC networks, DCS platforms, control systems, and factory automation infrastructure.
IT and OT Convergence Creates New Operational Risks
Modern manufacturers increasingly connect information technology with operational technology. This integration improves data visibility and production efficiency.
However, greater connectivity also expands the potential attack surface. PLC controllers, industrial networks, engineering workstations, and remote access systems can become cybersecurity targets.
According to Rockwell Automation's latest smart manufacturing research, many manufacturers experienced cyber incidents during the previous year.
The findings also show increasing concerns around IT/OT convergence and connected industrial environments.
Therefore, manufacturers must consider cybersecurity throughout the complete automation architecture. Security cannot remain limited to corporate IT systems.
From an engineering perspective, industrial cybersecurity should protect both information and physical operations.
A successful strategy must support confidentiality, integrity, and availability without disrupting production.
ROKStudios Examines Practical Cybersecurity Strategies
The new ROKStudios season explores how manufacturers can strengthen cyber resilience through practical operational strategies.
The discussions move beyond theoretical cybersecurity concepts. Instead, they focus on implementation challenges inside real manufacturing environments.
Topics include asset visibility, network segmentation, supply chain cybersecurity, lifecycle management, and regulatory compliance.
In addition, the series examines how organizations can align cybersecurity investments with broader digital transformation strategies.
This approach matters because industrial automation environments often operate for decades.
A PLC, DCS controller, or safety system may remain active long after its original cybersecurity assumptions become outdated.
Therefore, manufacturers need continuous risk assessment and lifecycle planning.
Mondelēz International Discusses Supply Chain Cybersecurity
Andrew Peckston from Mondelēz International discusses cybersecurity within global supply chain operations.
The discussion highlights the importance of treating cybersecurity as a business and operational priority.
Large manufacturers often operate across multiple factories, suppliers, and technology platforms. Consequently, inconsistent cybersecurity practices can create significant operational exposure.
The conversation also addresses cooperation between IT and OT teams.
This cooperation remains one of the most important challenges in industrial automation cybersecurity.
IT teams traditionally focus on data protection and enterprise networks. Meanwhile, OT engineers prioritize production continuity and process availability.
Therefore, organizations need governance structures that support both objectives.
William Grant & Sons Focuses on OT Cybersecurity Fundamentals
Steve Lynn from William Grant & Sons presents a practical approach to operational technology cybersecurity.
The discussion emphasizes foundational capabilities instead of complex security technologies.
Asset visibility represents one important starting point. Manufacturers must understand which devices operate within their industrial networks.
This inventory may include PLC systems, DCS controllers, HMIs, engineering stations, industrial switches, sensors, and remote access equipment.
Moreover, network segmentation can reduce the potential impact of a cybersecurity incident.
Proper segmentation separates critical control systems from less sensitive networks.
This approach can limit lateral movement while supporting safer factory automation operations.
However, segmentation alone cannot solve every cybersecurity challenge.
Manufacturers also need disciplined patch management, access control, backup procedures, and incident response plans.
Industrial Cybersecurity Must Move Beyond Compliance
Maria Else and John Speakman discuss the relationship between cybersecurity regulations and operational capability.
Their discussion addresses evolving requirements, including the Cyber Resilience Act and machine-related regulations.
Compliance can provide an important framework. However, compliance alone does not guarantee operational resilience.
Manufacturers should build cybersecurity into the complete equipment lifecycle.
This lifecycle starts during system design and continues through installation, commissioning, operation, maintenance, and modernization.
For example, a secure PLC installation should include controlled engineering access and documented network architecture.
Similarly, DCS environments should maintain clear user permissions and backup procedures.
In addition, organizations should review cybersecurity risks when replacing legacy automation equipment.
Aging Industrial Assets Increase Cybersecurity Challenges
Barry Long discusses operational fragility across the UK manufacturing sector.
Many manufacturers continue operating aging industrial assets because replacement projects require significant investment.
However, older automation systems may lack modern cybersecurity capabilities.
Legacy PLC platforms may use outdated communication protocols or unsupported operating systems.
Older control systems may also depend on engineering software that cannot meet current security requirements.
Therefore, manufacturers should avoid treating cybersecurity as an isolated upgrade project.
A better approach combines cybersecurity improvements with planned automation modernization.
For example, a factory may upgrade network infrastructure during a PLC migration project.
The organization can also introduce secure remote access during a DCS modernization program.
This combined strategy can reduce engineering disruption and improve investment efficiency.
Cybersecurity Supports AI and Digital Transformation
The ROKStudios discussions also connect cybersecurity with artificial intelligence and digital transformation.
Manufacturers increasingly deploy AI, advanced analytics, cloud platforms, and connected automation systems.
These technologies can improve production optimization and predictive maintenance.
However, they also increase the number of connected systems and data flows.
As a result, cybersecurity becomes a foundation for scalable digital transformation.
A manufacturer cannot safely expand connected operations without understanding its industrial network architecture.
This principle applies to factory automation, process automation, PLC networks, and distributed control systems.
In my view, cybersecurity now represents a design requirement for new automation projects.
Engineers should consider security during system architecture development.
Adding security after commissioning often creates higher costs and operational limitations.
Practical Experience Shows Asset Visibility Should Come First
From practical industrial automation experience, many cybersecurity projects begin with incomplete asset information.
Engineering teams may know their primary PLC or DCS platforms. However, they may not fully understand every connected device.
Industrial environments can include unmanaged switches, remote access gateways, legacy controllers, and third-party equipment.
Therefore, asset discovery should become an early cybersecurity activity.
Engineers should document device types, firmware versions, communication paths, and operational responsibilities.
The next step should focus on risk prioritization.
Critical control systems require stronger protection because failures can directly affect production and process safety.
This approach aligns cybersecurity investments with actual operational risks.
Recommended Industrial Cybersecurity Strategy
Manufacturers can strengthen industrial cybersecurity through several practical measures:
- Create a complete inventory of PLC, DCS, HMI, and network assets.
- Separate IT and OT networks through appropriate network segmentation.
- Control remote access to industrial control systems.
- Apply role-based access management for engineering and operations teams.
- Maintain tested backups for critical automation configurations.
- Review legacy systems and unsupported software regularly.
- Include cybersecurity requirements in automation modernization projects.
- Develop incident response procedures for production environments.
- Train engineers and operators on industrial cybersecurity practices.
- Align security programs with recognized industrial standards such as IEC 62443.
IEC 62443 remains particularly relevant because it addresses cybersecurity throughout industrial automation and control system environments.
Therefore, manufacturers can use the standard as a structured framework for improving cybersecurity maturity.
Application Scenario: Securing a Connected Manufacturing Plant
Consider a manufacturer operating several production lines with PLC-based control systems.
The plant connects production equipment to an MES platform and enterprise IT systems.
Initially, engineers focus on production data collection and remote diagnostics.
However, increasing connectivity introduces additional cybersecurity risks.
The manufacturer can begin by identifying all connected industrial assets.
Next, engineers can separate production networks from enterprise networks.
The organization can then introduce controlled remote access for authorized maintenance personnel.
In addition, the engineering team can create configuration backups for PLC programs and HMI applications.
This approach supports both cybersecurity and production continuity.
Moreover, the manufacturer can gradually modernize legacy equipment during planned maintenance periods.
The result is a more secure industrial automation architecture without requiring a complete factory shutdown.
ROKStudios Expands Industry Cybersecurity Discussion
Rockwell Automation recorded the new cybersecurity episodes during its Secure Digital Operations Forum in the United Kingdom.
The new content joins more than 170 previous ROKStudios recordings.
The platform provides interviews with manufacturers, technology specialists, and industrial domain experts.
The cybersecurity season reflects growing concerns across global manufacturing industries.
Cyber threats now affect production continuity, supply chains, engineering systems, and business operations.
Therefore, industrial organizations need closer cooperation between cybersecurity professionals and automation engineers.
Industry Perspective: Cybersecurity Is Now Part of Control System Engineering
The industrial automation sector has changed significantly during recent years.
Previously, cybersecurity projects often focused on firewalls and enterprise IT infrastructure.
Today, cybersecurity increasingly affects PLC programming, DCS architecture, industrial communication networks, and remote maintenance.
This change requires automation engineers to develop stronger cybersecurity awareness.
At the same time, cybersecurity professionals need a deeper understanding of industrial processes.
A security policy that interrupts a critical control process can create serious operational consequences.
Therefore, successful industrial cybersecurity programs require technical cooperation between both disciplines.
Rockwell Automation's new ROKStudios season contributes to this discussion by presenting practical perspectives from manufacturers and cybersecurity specialists.
The central message remains clear: cybersecurity must support operational resilience rather than exist separately from production operations.
For manufacturers planning digital transformation, this principle should guide future automation investments.
Secure industrial operations will increasingly depend on integrated cybersecurity, modern control systems, and disciplined lifecycle management.