The False Choice of IT Vs. OT

This Dragos analysis explains how IT–OT convergence has enabled attackers to leverage IT-centric techniques (including living-off-the-land tradecraft) to mount ICS-focused intrusions and deploy ICS-specific malware (e.g., CRASHOVERRIDE, TRISIS), potentially causing physical damage. It argues that pure IT security controls and responses are often inappropriate or unsafe for industrial environments and recommends blending IT methods with ICS-aware visibility, detection, and remediation tailored to operational constraints and safety requirements.