The Human Element in Cybersecurity: Bridging the Gap Between OT and IT in Manufacturing

In an era where manufacturing operations are increasingly interconnected, the importance of cybersecurity cannot be overstated. As cyber threats evolve, they exploit vulnerabilities that often arise from communication breakdowns between operational technology (OT) and information technology (IT) systems. To effectively secure these environments, cybersecurity teams must prioritize not only technical expertise but also essential interpersonal skills such as collaboration and communication. This article delves into the critical role these skills play in safeguarding manufacturing operations and offers strategies for building resilient cybersecurity teams.

The Vulnerability of Manufacturing Facilities

Manufacturing facilities are particularly susceptible to cyber threats due to their reliance on both OT and IT systems. These systems, while essential for operational efficiency, can create silos that hinder effective communication. According to the ENISA Threat Landscape 2024 report, a staggering 60 percent of cybersecurity incidents stem from communication breakdowns, resulting in delayed responses and heightened risks to critical operations. Attackers are quick to exploit these gaps, making it imperative for security leaders to foster a culture of collaboration between teams.

The Talent Shortage and Its Implications

The cybersecurity industry is currently grappling with a significant talent shortage, with nearly four million unfilled positions worldwide. This gap underscores the urgent need for professionals who can not only navigate complex technical landscapes but also collaborate effectively across departmental boundaries. As manufacturing environments become more dynamic, leaders must seek candidates who possess both technical skills and strong interpersonal abilities. These qualities are essential for bridging the gaps that can lead to vulnerabilities.

The Importance of Interpersonal Skills in Cybersecurity

An effective cybersecurity strategy hinges on professionals who can align priorities, close blind spots, and respond efficiently to incidents. Interpersonal skills become particularly critical during high-pressure situations, such as ransomware or denial-of-service (DDoS) attacks. In these moments, seamless coordination between teams can mean the difference between a swift recovery and prolonged downtime.

Case in Point: The Norsk Hydro Ransomware Attack

The 2019 ransomware attack on Norsk Hydro, a global aluminum manufacturer, serves as a poignant example of the importance of communication and collaboration during a crisis. The LockerGoga ransomware disrupted operations across 40 countries, forcing the company to revert to manual processes. However, Norsk Hydro’s commitment to fostering cross-team collaboration significantly mitigated the impact of the attack. The transparency and coordination between security and network teams allowed the company to contain the damage quickly and prevent further disruptions. This incident illustrates that technical skills alone are insufficient; strong communication across departments is vital for effective incident management and recovery.

Key Soft Skills to Look for in Candidates

When reviewing resumes, manufacturing security leaders should prioritize candidates who demonstrate the following key soft skills:

1. Communication: Candidates must be able to articulate technical concepts clearly to non-technical stakeholders. Effective communication ensures that OT and IT teams remain aligned, preventing misunderstandings that could disrupt operations.

2. Collaboration: Look for candidates with experience in cross-functional teams or joint training exercises. These experiences indicate a candidate’s ability to work across departments and help prevent operational silos.

3. Adaptability: Given the ever-evolving nature of cyber threats, adaptability is crucial. Candidates with experience in dynamic environments or incident drills demonstrate their capacity to stay composed under pressure and adjust quickly to new challenges.

Building Collaborative, Risk-Resilient Teams

To cultivate collaboration and build resilient teams, manufacturing leaders can implement several strategies:

• Implement Cross-Functional Training: Training programs that involve both network and security teams promote mutual understanding and foster a shared approach to problem-solving. This training can help break down silos and encourage teamwork.

• Adopt Integrated Systems: Utilizing integrated vulnerability and network security solutions can enhance collaboration by eliminating communication barriers between OT and IT teams. This integration allows for a more cohesive security posture.

By adopting these strategies, leaders can align their teams toward a common goal: protecting the organization from evolving cyber threats.

Conclusion: The Essential Nature of Interpersonal Skills in Cybersecurity

In the realm of manufacturing security, technical expertise is only part of the equation. Professionals who can collaborate effectively and adapt to evolving threats are equally essential. Strong communication ensures smooth coordination between OT and IT teams, reducing downtime and mitigating risks. By prioritizing candidates with both technical and interpersonal strengths, leaders can build teams that are resilient, proactive, and aligned with operational goals.

Investing in these critical soft skills fosters a security culture that is prepared for today’s challenges and tomorrow’s uncertainties. In a fast-changing threat landscape, the ability to communicate and collaborate effectively is not just beneficial—it is essential for maintaining secure, uninterrupted operations. As manufacturing environments continue to evolve, the human element in cybersecurity will remain a cornerstone of effective risk management.