OT vs IT Security — Why Buildings Are Different

The Founder's Explanation (Teach Exactly This Way)

"A hospital ICU machine must never switch off, even for one minute — that is OT thinking, uptime first. The office computer, IT reboots it every night for updates, no problem. Now put both on one network in a building. IT wants to reboot; OT says do not stop my plant. Both are right. Security is bridging these two, not forcing one on the other."

Teaching the Concept

The ICU Machine and the Office PC An ICU machine must never switch off — uptime is everything. An office PC is rebooted nightly for updates without a thought. A building puts both on one network. IT wants to patch and reboot; OT says never stop the plant. Both are right. Securing a building means bridging the two cultures. Two Priorities ``` OT SECURITY IT SECURITY uptime + determinism confidentiality + patching never stop the plant patch and reboot on schedule long equipment life fast software refresh ``` How Buildings Reconcile Them ``` Segment keep OT on its own network Coordinate agree maintenance windows for patching Share one policy, two sets of constraints ``` In buildings, OT and IT security are two constraints to bridge, not enemies to pick between — uptime and confidentiality on one network.

---

Related Topics

• What is BMS integration? — how a BMS connects VFDs, meters and other systems
• What is a protocol in BMS? — the shared language controllers use to talk
• Browse all Protocols topics — more from this section of the EnSmart BMS Library