Improve OT Governance to Drive Business Results
Managing risk through systematic and collaborative OT governance.
- Your operation isn’t very cautious or knowledgeable about the negative consequences of having OT equipment exposed to the internet.
- The business is still using a lot of manual paper-based processes such as bankers’ boxes to track, store, and review the quality of your products.
- You are risking being caught off guard by downstream suppliers if the regulatory bodies conduct a full review of all suppliers’ products/materials/ingredients being used to develop your finished goods.
- The company isn’t tracking all materials, solvents etc. used within the manufacturing process and may encounter unexpected liabilities or penalties due to residue left on the finished goods being delivered to the customer.
- You are risking being left behind as the rest of the industry progresses in this digital and ESG conscious era.
- Your operation has difficulty tracking and tracing across the supply chain and this is slowing the process of adding new products into the portfolio.
- Niche players have made your operation more vigilant and therefore you need to modernize your processes so that customer satisfaction ratings from audits will be a benefit over the competition vs. a hinderance.
- The effects of the pandemic are still apparent within your operation, most notably a shortage of labor, acquiring skilled labor, and supply chain disruptions.
Our Advice
Critical Insight
OT governance has gained prominence as businesses need to have 24/7 reliability of equipment, but they are transitioning to an internet-based business landscape. The need to have a collaborative approach for managing and protecting the business has never been greater. Many manufacturers keep equipment well beyond its warranty and support period and can therefore encounter problems as equipment ages and still needs to be supported. Outdated operating systems and weak security systems are a hacker’s easiest targets.
Impact and Result
- Identify: Discover the methods, people, tools, and approaches that can be used to ensure you have a streamlined OT governance model in place.
- Prioritize: Further determine a tiered approach to assembling teams and tools.
- Align: After establishing your teams and understanding your gaps you will have a systematic approach for pulling in the right people with the right tools at the right time. Operations and IT will be tightly aligned.
Improve OT Governance to Drive Business Results
Avoid bureaucracy and achieve alignment with a minimalist approach.
Analyst Perspective
Governance will always be part of the fabric of your organization. Make it adaptable so it doesn’t constrain your success.
IT/OT convergence, IT governance, and OT governance are misunderstood.
The purpose of governance isn’t to create a roadblock within the organization but rather it is a mindset of ensuring that the factory operation isn’t causing undo stress on the business.
Success in modern digital organizations depends on their ability to adjust for velocity and uncertainty, requiring a dynamic and responsive approach to governance – one that is embedded and automated in your organization to enable new ways of working, innovation, and change while ensuring security.
OT governance has become critical as organizations become nimbler and the OT areas of the organization leverage greater amounts of automation with often older equipment.
If your governance doesn’t adjust to enable your changing business environment and customer needs, it will quickly become misaligned with your goals and drive you to failure.
IT/OT must build an approach to governance that is effective and relevant today while building in adaptability to keep it relevant tomorrow.
 | Kevin Tucker |  | Valence Howden |
Executive Summary: OT Governance for Manufacturing
Situation: OT Governance becomes a Hot TopicCOVID-19 raised the profile of OT governance as businesses began to grapple with the onslaught of cybersecurity attacks. Remote and hybrid employees found it difficult to support and communicate with each other. OT have operated in a silo with walls around the factory that IT wouldn’t enter, and that was fine until their suppliers could no longer come on site to service equipment that now needed to be exposed to the network. The power of data analytics with AI/ML has become critical for optimal business process. | Complication: A new Playground for HackersOT becomes high risk as equipment must be exposed on the internet for external suppliers to perform maintenance and repairs. Outdated mindsets hamper the organization’s ability to recognize the volatility they are exposed to. Skills are lacking with regards to justifying, planning, implementing and maintaining the commissioning and decommissioning of OT services so it becomes management by chaos as businesses are compromised. Most don’t measure the cost avoidance and value delivery generated from intentional OT governance. | Solution: Tools & ProcessesUse this OT governance deck to assess your business and harden OT governance:
|
Info-Tech Overarching Insight
OT Governance Compliance must keep up with the changing state of business. In order to do so companies need to have clarity as to the regulations governing their industry and the tools at their disposal.
OT governance is…
| ||
OT governance is not…
| ||
Governance needed to regain confidence
Companies in Manufacturing are at an ever increasing risk of a data breach as was evidenced from the responses of 225 companies.Lacking Protection Confidence | Experienced a Breach |
| AVERAGE LOSS PER BREACH $1,000,000 – $10,000,000 | |
What is governance? | Governance is a critical and embedded practice that ensures information and technology investments, risks, and resources are aligned in the best interests of the operation and the organization to produce insights and business value. Effective governance ensures that the right technology investments and integrations are made at the right time to support and enable your organization’s mission, vision, and goals. |
| FIVE KEY OUTCOMES OF GOOD GOVERNANCE | ||||
STRATEGIC ALIGNMENTTechnology investments and portfolios are aligned with the organization's strategic objectives. | RISK OPTIMIZATONOperational and organizational risks are understood and addressed to minimize impact and optimize opportunities. | VALUE DELIVERYOT investments and initiatives deliver the expected benefits without new unplanned risks. | RESOURCE OPTIMIZATIONResources (people, finances, time) are appropriately allocated across the organization to optimal organizational benefit. | PERFORMANCE MEASUREMENTThe performance of technology investments are monitored and used to determine future courses of action and validate success. |
Holistic Operational Technology (OT) Governance
Operational Technology (OT) Governance is the policies, processes, and practices that a company implements to oversee and control the use and functionality of its OT systems. Typically, these systems are employed to automate and manage vital infrastructure, including production facilities, electricity grids, and transportation networks.
Effective OT Governance is crucial because these technologies frequently have a direct impact on the security, dependability, and effectiveness of an organization's operations. Additionally, it is essential for protecting these systems' integrity and security because they might be exposed to online dangers.Tasks Within OT Governance
| Defining roles and responsibilities for managing OT systems. Establishing policies and procedures for the use and maintenance of OT systems. Making sure OT systems are updated with the latest software and security patches. | Monitoring performance and availability of OT systems. Putting security measures in place to guard against cyber threats. Making sure OT systems are compliant. |
Management of OT Governance
Models of effective OT governance are those that have the organization's IT and OT departments oversee OT governance, under the direction of top management. To make sure that the organization's OT systems are managed successfully, it is crucial that these departments have excellent communication and coordination.
Avoid common misconceptions of OT governance
Governance and management each have unique roles to play. Confusing the two results in wasted time and uncertainty around ownership.GovernanceOT governance sets direction through prioritization and decision making and monitors overall OT performance. Governance aligns with the mission and vision of the organization to guide OT and protect OT assets. |  | ManagementManagement is responsible for executing on, operating, and monitoring activities as determined by OT governance. Management makes decisions for implementing based on governance direction. |
* Adapted for OT Governance)
Mature your governance by transitioning from ad hoc to automated
Organizations should look to progress in their governance stages. Ad hoc and controlled governance practices tend to be more rigid, making these a poor fit for organizations requiring higher velocity delivery or using more agile and adaptive practices. The goal as you progress through these stages is to delegate governance and empower teams based on your fit and culture. This enables teams where needed to make optimal decisions in real time, ensuring that they are aligned with the best interests of OT and the broader organization. Automate governance for optimal velocity while mitigating risks and driving value. This puts your organization in the best position to be adaptive and able to react effectively to volatility and uncertainty. |  |
Stages of OT Governance
 |
|
About Info-Tech
Info-Tech Research Group is the world’s fastest-growing information technology research and advisory company, proudly serving over 30,000 IT professionals.
We produce unbiased and highly relevant research to help CIOs and IT leaders make strategic, timely, and well-informed decisions. We partner closely with IT teams to provide everything they need, from actionable tools to analyst guidance, ensuring they deliver measurable results for their organizations.
What Is a Blueprint?
A blueprint is designed to be a roadmap, containing a methodology and the tools and templates you need to solve your IT problems.
Each blueprint can be accompanied by a Guided Implementation that provides you access to our world-class analysts to help you get through the project.
Talk to an Analyst
Our analyst calls are focused on helping our members use the research we produce, and our experts will guide you to successful project completion.
Book an Analyst Call on This Topic
You can start as early as tomorrow morning. Our analysts will explain the process during your first call.
Get Advice From a Subject Matter Expert
Each call will focus on explaining the material and helping you to plan your project, interpret and analyze the results of each project step, and set the direction for your next project step.
Unlock Sample ResearchContributors
- Jeanne Lasheff, Director of Digital Transformation, Hollister Incorporated
- Brian Buddemeyer, VP Information Technology, Spang & Company
- Jay Stanley, VP Information Technology, Heartland Food Products Group
- Robert Verret, Chief Information Officer, Dupre Logistics
- Jeff Renfer, Director of Information Technology, Universal Fiber Systems
- Steven Schmidt, Managing Partner, Durable Goods, Info-Tech Research Group
- Christopher Goodhue, Managing Partner, Non-Durable Goods, Info-Tech Research Group
- Valence Howden, Principal Research Advisor, Info-Tech Research Group
- Larry Fretz, Vice President, Industry, Info-Tech Research Group
- Rob Redford, Practice Lead, Industry, Info-Tech Research Group