Even the smallest looking component within the OT environment can be hacked, for example, a "Transformer", it seems odd in first thought but after taking a pause, most of us would agree that yes even it can be hacked.
What is the RISK in it?
Did we check the Supply chain arrangement for the IOT/OT items in the discussion,
who provides these heavy and irreparable devices that need a turnaround time if they want to be replaced and are being supplied from vendors out of the country.
Countries like the US have started taking it seriously and they follow strict policies to have supply chain sources only within the country and supply only US-made devices,
This definitely rings bells for OT security and towards unconventional and new ways of hacking IOT devices.
Key Components in a transformer;
- Voltage regulation mechanism
- System health and diagnostics mechanism
- Consumption data transmitter mechanism
- Smart devices to regulate the fluctuating demands of power supply
All above are the possible threats that hackers usually target and these attackers can make the affected nation feel that the attack was targeted by its political conflict countries .
So nowadays it's important not only to focus on what you have in your industrial OT environment, but it is also critical to be diligent while you plan to buy new devices and have strict supply chain policies to make sure your critical infrastructure is secure.
------------------------------
------------------------------