Zero Trust for Operational Technology (OT) Security
Creating resilient U.S. critical infrastructure
Securing operational technology is imperative for our nation’s critical infrastructure resiliency in the face of increased cyber threats. U.S. ports are crucial to the country's economic strength and global position, handling over $2.1 trillion of goods annually*. These supply chain systems are key targets for cyberattacks in today’s digital battlefield. Foreign adversaries are looking to establish strategic positions within American critical infrastructure—including maritime facilities—as part of their cyberattack strategy.
Securing the nation means using advanced technology to protect critical assets and data. That’s why Booz Allen and Auburn University’s McCrary Institute for Cyber and Critical Infrastructure Security developed a new report called Anchored in Zero Trust: Taking Action to Create Resilient U.S. Port Infrastructure. This paper details how implementing zero trust (ZT) principles can fortify resilience, protect vital operations, and maintain an uninterrupted global supply chain—an essential goal for national and economic security. To help maritime organizations address cyber risks, this report offers insights and actionable advice into:
- The nature of the threats posed by China’s** STS cranes and the engineering perspective on the vulnerabilities associated from these threats
- The role that OT and control systems play in the operation of port material handling equipment (MHE) and OT-specific threat vectors
- Technical and policy steps to help asset owners strengthen resilience
Citations
*Source: American Association of Port Authorities, U.S. Port & Maritime Industry Economic Impact Report
**Note: Consistent with U.S. policy, this report uses “People’s Republic of China” (PRC) and “China” interchangeably. Statements about “China’s” actions, intentions, capabilities, and responsibility for cyberattacks refer only to the government of China.
