Endpoint Security , Events , Governance & Risk Management

Building Cyber Resilience Across OT, IT and IoT Environments

The convergence of IT and OT operations from a cybersecurity perspective is reshaping how organizations manage their technological ecosystems. As industries evolve, the integration of these two previously distinct domains is increasingly necessary to enhance efficiency, security and innovation.

See Also: Make Zero Trust Happen

Schneider Electric, a leader in energy management and automation, has made cybersecurity a foundational component of its IT and OT operations. Focused on resilience, the company prioritizes protecting customer assets through a culture that combines advanced technology with cybersecurity principles. "The best way to do that is inculcating a strong culture of cybersecurity, building knowledge, and having the right talent and level of expertise to be able to deliver on our promise of quality and security," said Andre Shori, CISO for APAC governance at Schneider Electric.

Shori also shared that while standards such as IEC 62443 guide risk management, companies should create tailored risk metrics to address unique requirements. Schneider prioritizes customer asset protection, measuring effectiveness by assessing whether its products maintain consistent security throughout their use, he said.

"Most breaches aren't due to zero-day exploits; they often stem from overlooked fundamentals. Be vigilant and make sure that you have your environment in order and that you're ready to respond to the inevitable incident," Shori said.

In this video interview with Information Security Media Group at the GovWare Conference and Exhibition 2024, Shori also discussed:

• Establishing secure-by-design practices for end-to-end product security;
• Schneider Electric's collaborative approach to cybersecurity incident response;
• Setting vendor requirements to address legacy infrastructure issues;

With more than 30 years of experience in cybersecurity, Shori has established himself as a leader in both IT and OT cybersecurity. He leads IT and OT cybersecurity program for Schneider Electric across the Asia-Pacific region.