Securing smart devices in OT environments

21st September 2021

By Joe Robertson, Director of Information Security and EMEA CISO at Fortinet

The Industrial Internet of Things (IIoT) is all about connecting people, processes, and assets. Traditionally, devices in OT environments have been isolated or connected directly to an industrial control system. IIoT gives these devices a link to the internet. Now that these devices have been "brought to life,” users can interact with them in real time, draw data from them, and analyse that data via statistical or predictive analysis. The value from that intelligence is priceless and the opportunities are endless.

Benefits include improved operational efficiency because IIoT devices can reduce troubleshooting time from days to minutes; reduced maintenance costs via preventive maintenance, using sensors that can detect when equipment will soon break down; optimised procurement planning and scheduling; improved safety; and enhanced customer experience.

In addition, advances in IIoT technology coupled with the rise of 5G will allow organisations to strengthen all of these benefits. So what are the different ways that critical industries are using “smart” stuff/devices?

Oil and Gas

IIoT devices can be found across the oil and gas industry value chain, from upstream exploration and production to refining and downstream distribution. And in demanding environments such as offshore platforms, small IIoT networks can be used for rig or cargo-ship monitoring, reducing the billions of dollars lost each year to nonproductive time (NPT). In the midstream sector, advanced sensors are being implemented to surveil various parameters of the pipeline to detect potential leaks or breaches. 


Using the IIoT approach of digital twins, manufacturers can virtually replicate a product or process, enabling them to analyse the efficiency of a system, make predictions and forecasts, and help them create a better version of their products. In production lines, sensors, cameras, and data analytics can determine, through predictive maintenance, when a piece of machinery will fail, and can help managers plan maintenance and service schedules before a problem occurs. Smart devices can optimise shared costs in the value chain by tracking and tracing inventory in real time, providing visibility and projections to supply-chain managers of available materials, the arrival of new materials, and works in progress. 

Power and Utilities

The power and utilities sector embraces IIoT for smart water and gas management and smart grids. In smart water management, optimising water usage is key. Sensors can track parameters such as water pressure, temperature, quality, and consumption, enabling utility companies to analyse the data as well as use it for billing purposes. Consumers can monitor their water consumption, decreasing water waste. With smart grid, smart meters can monitor electricity consumption and transmission in real time, which allows for more efficient, demand-based electricity generation and distribution. They can also alert electricity companies of power outages, allowing them to react at speed and restore services quickly. Finally, smart meters are a critical element of the decentralised power model by facilitating the growth of energy sources, such as solar panels and wind turbines, furthering efficiencies in production and distribution. 

Transportation and Logistics

The transportation and logistics sector is becoming smarter and safer thanks in part to IIoT with applications such as public transport management, fleet management, and track and trace. In public transport management, IIoT solutions include passenger information and display systems, integrated ticketing systems, live vehicle tracking, and more. With fleet management, IIoT devices are embedded in the vehicles to monitor their condition and driver behavior, which informs of idle times and driving style. Track and trace uses IIoT sensors to track goods and manage them properly, ensuring that goods are in the right vehicle and on the way to the right destination. 

Smart Cities

Smart cities display some of the most exciting applications of IIoT from smart lighting to smart traffic to smart waste and smart parking, all ensuring that cities are cleaner, safer, more organised, and economical for their residents. By managing, monitoring, and automating connected streetlights—processes like brightness levels and consumption—cities can decrease costs and improve sustainability. IIoT-enabled traffic monitoring can help manage traffic flows efficiently to decrease congestion and improve road safety. With smart waste solutions, sensors are installed in containers, enabling waste collectors to track waste levels, optimising schedules and routes. Finally, smart parking lots can interact with smart vehicles to provide up-to-date information on open space availability. 

With various industries increasingly relying on IIoT smart stuff to monitor, track, and manage various assets and predict, prevent, and control a number of incidents, a vital question arises: Are smart devices implicitly safe to use and trust?

Smart doesn’t imply secure in OT environments

In fact, being smart just makes you more attractive to hackers. With each new smart device introduced into the network, the risk increases because each device is a potential new entry point for attack. Adding to this equation is 5G, which, although more secure than its predecessors, makes for a whole new playground for hackers. Additional security will still be needed.

Making smart devices in OT environments secure: Best practices

When securing any system that includes smart devices, there are three important factors to consider: