OT Cybersecurity in Industrial Automation: Key Takeaways from the Brussels Summit 2025

Attendees Enjoy OT Cybersecurity Summit in Brussels

Global Experts Gather to Strengthen OT Cybersecurity

The International Society of Automation (ISA) hosted its third annual OT Cybersecurity Summit in Brussels, Belgium, from 18–21 June 2025. The event has become one of the most influential gatherings for professionals in industrial automation and control systems security.

More than 250 attendees and 40 speakers shared insights on emerging cyber threats, ISA/IEC 62443 standards, and industrial resilience strategies. According to ISA, participation increased by 20% compared to 2024, showing the industry’s growing focus on cybersecurity.

Immersive Learning: Cyber Escape Room and Real-World Scenarios

For the second year, attendees experienced an interactive virtual “escape room” developed by Visco. The simulation recreated a ransomware attack on an offshore oil and gas platform, offering OT engineers a hands-on understanding of incident response procedures.

This training format, first introduced in 2024, has become a benchmark for cybersecurity education. It effectively bridges theory and practice, helping automation engineers strengthen their response to real-world cyber incidents.

Keynote Speakers Emphasize AI Ethics and Supply Chain Resilience

AI governance expert Bola Adesina discussed ethical challenges in adopting artificial intelligence within industrial environments. She highlighted that cybersecurity is about people, not just systems, saying, “We’re protecting people from people.”

John Fitzpatrick, founder of Lab539, and ISA President Scott Reynolds focused on operational resilience and supply chain protection. Reynolds encouraged attendees to begin improving visibility through passive asset inventory, noting that starting small is better than waiting for perfect funding.

Two Core Tracks: Threat Intelligence and Supply Chain Security

The summit featured 35 sessions and workshops covering topics such as:

• Threat detection using network segmentation and anomaly analytics.
• Securing the global industrial supply chain with zero-trust architectures.
• Applying PLC and DCS hardening techniques for legacy systems.

These sessions reflected a growing trend where cybersecurity is tightly integrated with factory automation and process control strategies.

Industry Collaboration: ISA Global Cybersecurity Alliance

The ISA Global Cybersecurity Alliance (ISAGCA) and ISASecure programs co-sponsored the event, emphasizing the alignment between international standards and industrial practices. ISAGCA hosted panels on ISO/IEC 27001 integration with the ISA/IEC 62443 framework and shared new white papers bridging IT and OT security.

ISASecure introduced the upcoming IACS Security Assurance (ACSSA) program—an initiative designed to certify operating sites based on ISA/IEC 62443. This program aims to fill a critical compliance gap in OT environments and support global standardization.

Practical Training and Incident Response Workshops

The Incident Command System for Industrial Control Systems (ICS4ICS) hosted workshops to enhance emergency cyber response. Participants practiced communication protocols and recovery actions tailored to industrial control systems.

ISA also offered its popular IC32 and IC33 courses, focusing on how to secure and assess industrial automation and control systems under the ISA/IEC 62443 standards.

2026 OT Cybersecurity Summit: Next Stop Prague

The next OT Cybersecurity Summit will take place in Prague, Czech Republic, from 16–18 June 2026. Organizers expect even larger participation and new sessions on AI-driven threat detection and predictive risk modeling.

Attendee René Matthiassen from Denmark summarized the event’s value: “This is the one summit where automation and cybersecurity professionals truly connect to shape the industry’s future.”

Author Insights and Industry Perspective

According to World of PLC, the integration of cybersecurity into industrial control systems is no longer optional—it is foundational to reliable production. As PLCs, DCS, and SCADA networks evolve, ISA/IEC 62443 provides a robust framework for protection. Companies that embed cybersecurity into system design from the start achieve faster compliance and higher uptime.

Organizations should consider a three-step strategy:

• ✅ Build a passive asset inventory across all control systems.
• ⚙️ Apply ISA/IEC 62443 security levels to each process zone.
• 🔧 Establish continuous monitoring with real-time threat intelligence.

Real-World Applications and Solutions

Industrial facilities can apply OT cybersecurity through:

• Network segmentation for PLC and DCS devices.
• Secure remote access management for OEM service partners.
• Patch management integrated with factory automation workflows.

Discover more cybersecurity-ready automation products and guidance at World of PLC.

FAQ

1. How does ISA/IEC 62443 improve factory automation security?
   It provides a standardized, risk-based approach to securing industrial control systems, ensuring consistent protection across assets.
2. What are the main threats to OT environments today?
   Ransomware, supply chain vulnerabilities, and misconfigured remote connections are the top risks, according to the ISA 2025 report.
3. Why should manufacturers attend OT cybersecurity events?
   Such summits offer hands-on training, peer networking, and access to the latest compliance updates and best practices.

_{This article was adapted by World of PLC from the August/September issue of Automation.com Monthly.}