Cyber Resilient Infrastructure Starts with Early and Strategic Design

[Cengiz Özemli]

Industrial operational technologies (OT) and control systems are increasingly under threat from cyberattacks. A new report by Black & Veatch and Takepoint Research reveals that cybersecurity is often integrated too late or not at all into these critical infrastructure projects. This situation increases long-term risks and costs.

### Report Highlights

• 72% of survey participants state that cybersecurity is included late or not at all in industrial capital projects.
• 78% believe that early cybersecurity integration reduces operational disruption and downtime.
• 43% indicate that a lack of cybersecurity expertise is an obstacle to early action, while 77% state that external support would help them start earlier.
• Only 24% report that cybersecurity is frequently considered at the beginning of projects.
• Three-quarters of participants say that a good business case is the strongest motivation in the adoption process.

### Cybersecurity Design Approach

Black & Veatch experts emphasize that the "security by design" principle means the most critical cybersecurity decisions are made when the architecture, network connections, and accountability of OT systems are determined. As project design and construction progress, opportunities to influence security decrease, often leading to expensive, problematic revisions after commissioning.

Ian Bramson states, "Cybersecurity must be validated at every stage, from the design of OT systems to acceptance testing. Regulatory compliance alone is not enough; we must go beyond minimum standards to guarantee resilience."

### Expert Opinions

Charlie Sanchez says, "Cybersecurity should not be an afterthought; it must be included early in the project scope, or it will be unaffordable. This is a critical factor for public safety, economic stability, and national resilience."

### Conclusion

Early and strategy-driven cybersecurity design in industrial infrastructure is inevitable for the long-term protection and operation of critical systems. Planning security at the project's inception is vital for both feasibility and operational success.

---

Black & Veatch is a global engineering, procurement, consulting, and construction company focused on improving the resilience and reliability of human-centered critical infrastructure for over 100 years.