What is the state of security awareness on the OT side in Turkey?

İlkem Özar, General Manager of Kaspersky Turkey, met with students at the Cyber ​​Summer Camp 2024, organized by BÜSİBER (Boğaziçi University Management Information Systems Cybersecurity Center) and the Cyber ​​Clubs Union.

Responding to questions from Wise TV following the panel, Özar stated the following:

“When we talk about OT (Operational Technology) security, it is necessary to clarify exactly what we mean. OT security refers to industrial solutions. In the past, we thought of security primarily in terms of computers, networks, and servers—focusing on securing financial transactions, for instance. Today, however, the situation has become far more complex. Everything is now interconnected. For example, factory machinery, medical devices used for patient monitoring or in operating rooms, sensors within electricity and water distribution networks, airport security systems, and even smart cars—all these elements have become electronic and connected to the internet.

As technology permeates every aspect of our lives, these devices become gateways to the internet, linking directly to our networks. If your television is hacked, the impact isn’t limited to the TV itself; an attacker could potentially use it to access your home Wi-Fi network and, subsequently, your computer. Similarly, companies can become vulnerable to such threats if they have weak network security.

Consider the case of a large cargo ship that came to a sudden halt on the second day of its voyage across the ocean. All its systems shut down, resulting in a loss of $3 million. An investigation revealed that a supplier’s shop at the port served as the ‘weak link’—the entry point through which attackers infiltrated the port’s network and, ultimately, the ship itself. This is precisely why awareness regarding OT security is so critical.” Since technology is ubiquitous, we must secure everything; anything can be subject to an attack.

One common misconception is that closed networks are inherently secure. For instance, factory production facilities may operate on closed-circuit networks, but these machines must connect to networks whenever their software is updated—a process that leaves them vulnerable.

At Kaspersky, we offer best-in-class solutions for OT (Operational Technology) security. Facilities like factories often rely on specialized, lightweight operating systems, and we provide optimal protection for these environments without disrupting their operations. If, for example, a cyberattack were to cause a two-day system outage, the resulting losses could be substantial. We help you safeguard against such catastrophic scenarios.

Critical infrastructure—such as power grids and water supply networks—also requires protection. When incidents like power outages occur, questions often arise as to whether they might be the result of a cyberattack. Such events are entirely possible, which is why robust protection is essential. I would like to emphasize the critical importance of OT security.