מאמרים  מאת יוסי שביט #CIA -> SRP

For many years, the information security discipline has been built around three fundamental principles: Confidentiality, Integrity, and Availability (CIA). This model has become a cornerstone of cybersecurity and remains highly relevant for protecting IT systems, organizational information, databases, financial systems, and digital services. However, when we move from the IT environment to the world of Operational Technology (OT), and particularly to Industrial Control Systems (ICS), a significant gap becomes apparent. An OT system is not merely a system that stores or processes information. It is a system that monitors the physical world, makes decisions, and directly influences physical processes. A PLC can open a valve. An HMI can change a process parameter. A DCS can control temperature, pressure, or flow. A Safety Instrumented System (SIS) can activate a protective function. And an incorrect sensor reading or malicious command can trigger a physical response with real-world consequences. Therefore, the fundamental question in OT cybersecurity is not only: "How do we protect the system and its information?" It is also: "How do we ensure that the physical process continues to operate safely, reliably, and productively even when the system is under cyberattack?" This is where a more OT-oriented framework becomes valuable: SRP – Safety, Reliability, and Productivity.