The One Surface: AI Infrastructure as Critical Infrastructure
Stop thinking of a data center as a building full of servers. Think of it as a single attack surface with four faces that touch each other: the enterprise IT that runs the business, the operational technology that runs the power and cooling, the physical shell and its access controls, and the supply chain that delivers every chip and firmware image. An attacker does not respect the org chart that splits these teams. A phished credential becomes a route to a cooling controller; a propped-open door becomes a route to a network jack. Security fails at the seams between layers. Reason about the whole surface, or defend none of it.
Knowledge check
Why is it a mistake to secure an AI data center as four separate areas handled by four separate teams?
Show the answer
Because the four layers are physically and logically connected, and real attacks cross the seams between them. An intrusion that starts in enterprise IT can pivot into operational technology; a physical breach can plant a foothold on the network; a compromised supplier can undermine all three. Splitting ownership without a shared view of the whole surface leaves the connections between layers undefended, and those connections are exactly where determined attackers operate.