The Operational-Technology Layer of the AI Data Center
A data center is two machines welded together: the compute that runs the models, and the operational-technology plant that keeps the compute alive. Security programs obsess over the first and ignore the second, yet the second is what decides whether current flows and heat leaves. The building-management system, the power controllers, the cooling loops, and the supervisory layer above them form the real physical attack surface. Their governing protocols assumed an isolated wire and carry no authentication. AI infrastructure is critical infrastructure precisely because this layer exists, and its threat surface is not the rack but the machinery that makes the rack usable.
Knowledge check
Why is the operational-technology layer, rather than the compute fleet, the decisive physical attack surface in a data center?
Show the answer
Because the OT layer governs the physical conditions the compute depends on: power delivery, cooling, and environmental control. Its controllers act directly on machinery, and its legacy control protocols were designed for isolated wires with no authentication, so reaching them lets an attacker affect the physical world the servers cannot survive without.