Exploring the security culture of companies that use Operational Technology (OT)

本研究调查了如何在使用运营技术（OT）的公司，如制造业和公用事业，通过与安全从业人员在该领域的采访安全文化的发展。各利益相关方（监管机构、顾问、安全服务供应商等）也活跃在这一领域，塑造网络安全意识并分享相关知识。因此，本研究旨在确定更好的OT安全性的常见组织障碍，外部利益相关者在发展这种文化中的作用，并最终提出针对运营层面员工（如工程师，操作员和维护人员）的新方法，并增加他们的网络安全理解。

This research investigates how a security culture is developed in companies that use Operational Technology (OT), such as manufacturing and utilities, through interviews with security practitioners in the field. Various stakeholders (regulators, consultants, security service vendors etc.) are also active in this space, shaping cybersecurity awareness and sharing relevant knowledge. Accordingly, this research aims to identify common organisational barriers towards better OT security, the role of external stakeholders in developing such culture, and ultimately propose new ways of targeting the employees at the operational level (such as engineers, operators, and maintainers) and increase their cybersecurity understanding.