The rise in cyber security incidents in Asia Pacific is reshaping the definition and protection of critical infrastructure. New digital and operational technology risks are prompting stakeholders to reconsider conventional beliefs that critical infrastructure is primarily industrial machinery behind high fences.

Michael Fisher from Garland Technology discusses this evolving landscape. Critical infrastructure now encompasses essential services such as banking, finance, and telecommunications, expanding beyond traditional definitions.

The convergence of IT and operational technology (OT) networks increases cyber security risks. Many OT services were not designed with cyber security in mind, leaving them vulnerable to cyber attacks. Industries most at risk include telecommunications, banking, finance, and utilities, where any disruption can significantly impact society.

Increased Visibility

Fisher highlights that traditional cyber security alone is insufficient to secure these infrastructures. Effective protection requires a new approach focused on visibility. Garland Technology’s mission is to provide visibility to upstream cyber security platforms, eliminating blind spots.

Governments and businesses must recognise their roles in combatting cyber threats. Australia’s Security of Critical Infrastructure Act is a step towards increasing corporate responsibility in recognising critical infrastructure and ensuring compliance with security measures.