Critical Infrastructure and Cross-Domain Operations
Operational Technology, Safety, and Restoration
Understand how industrial processes, control, safety, engineering, and human operators determine physical consequence.
Approx. 3 min reading · Includes diagrams; allow extra time for reflection and linked resources.
Start reading ↓About this learning content and editorial review
Your focus
What you’ll learn
- Build a process-centric OT risk and effects model including safety and manual restoration.
This lesson uses the Ukrainian grid cases to teach process-aware analysis and resilience without giving attack procedures.
Model process, control, safety, and enterprise together
Operational technology in cyberwarfare must be understood first as machinery controlling a physical process. Map process state, acceptable operating envelope, sensors, actuators, controllers, supervisory systems, engineering workstations, safety instrumented systems, historians, remote access, enterprise dependencies, vendors, and operators. Availability, integrity, and timing may matter more than data secrecy.
Separate basic process control from independent safety protection. Identify fail-safe and fail-danger states, physical inertia, alarm handling, maintenance, and local manual control. A cyber effect may alter visibility without altering process, alter control without defeating safety, or disrupt enterprise services that operators need for restoration. Each has different consequence.
The 2015 Ukraine grid incident combined enterprise access, operator-session abuse, control action, denial of control, destructive components, and communications disruption. Manual switching enabled restoration. The reusable lesson is the full operational sequence and defender recovery—not a single malware name.
Plan for safe degradation and restoration
Defenders should prioritize known assets and communication paths, separate enterprise and control zones, constrain remote access, monitor engineering change, protect safety systems, maintain offline configurations, rehearse manual operation, and preserve out-of-band communications. CISA’s Cross-Sector Cybersecurity Performance Goals provide a risk-reduction baseline; sector engineering and safety requirements go further.
During conflict, restoration becomes operational. Define minimum safe service, load shedding, staffing, spares, vendor access, clean-room recovery, and decision authority. Coordinate cyber, engineering, safety, physical security, communications, and public messaging. Preserve evidence without delaying action needed to protect life.
Effects planners must model the same recovery paths. An operation whose advantage depends on duration will fail if manual alternatives are ready. Attempts to suppress restoration expand civilian risk and require renewed legal and command review.
Resources
- CISA Russian State-Sponsored Threats to Critical Infrastructure — Official synthesis of the 2015 and 2016 Ukrainian electric-sector operations and defensive implications.
- CISA Cross-Sector Cybersecurity Performance Goals — Prioritized baseline practices for IT and OT risk reduction and national resilience.