Convergence of OT and IT Networks
A QLD based Water Utility organisation was fast approaching a technology ceiling for their current WAN infrastructure for their Operational Technology (OT) and Information Technology (IT) networks. A number of key drivers for the project included improving the agility and responsiveness of the WAN, providing a blueprint architecture for all sites and future needs, flexibility to support a multi-carrier strategy and a secure platform that can service both Industrial Control Systems (ICS) and Corporate networks.
To improve network performance, availability and to support future growth, the approach was to converge three WANs into one with logical separation and security. They had investigated alternate options for a future state WAN architecture and required a technology partner to design, build and implement a prototype and to roll out a number of pilot sites.
Due to our experience in both OT and IT network domains, along with our capabilities in Cyber Security for Critical Infrastructure, RIOT was engaged to complete the project. We based our engagement on a phased approach that included taking the customer through a discovery exercise that allowed us to determine the current and future state requirements. Following that we put forward a high level recommended architecture before moving on to the detailed design components. This catered for buy-in across both OT and IT stakeholders and sign off by the Business prior to any changes.
The customer now has a reference architecture that reflects their target end state of a converged OT/IT WAN. It formed the basis for the detailed design and identified any gaps with key recommendations. It enables them to provide the flexibility and modularity that meets the needs of the business, allowing for easy adoption of new services and technologies across both OT and IT. The approach provided the necessary detail to plan and co-ordinate the implementation of the solution which minimised risk, and provided a level of confidence that the solution could be deployed into the remaining critical sites.
The customer name has been withheld due to confidentiality. More information can be provided by contacting RIOT directly.