The Intelligence Surface
{"body": "Faraday's read: the convergence that made building systems accessible also made them attackable, and the industry is still catching up to the implication. The old safety was isolation; the new reality is a networked physical-control surface that cannot be rebooted at will. The right posture treats the mechanical layer's separateness as a defensive asset — segment it, gate its access, watch its traffic on its own terms. The same separation that is an engineering fact becomes a security principle. The nervous system should never share an undefended wire with the mind it keeps alive.", "position": 4}
Knowledge check
Why can't operational-technology systems like a BMS simply adopt the same security practices as information-technology systems?
Show the answer
Because their priorities and constraints are inverted. Information technology prizes confidentiality and can generally be patched, rebooted, and updated freely, whereas a BMS controls physical processes that cannot be stopped on demand — you do not reboot cooling to install an update — and runs on long-lived controllers that may not accept frequent patching. Operational technology prioritizes availability and safety because a failure is a physical event, not a data leak. Securing it therefore requires its own discipline: network segmentation, controlled remote access, and monitoring suited to control-system traffic, rather than treating the BMS as ordinary IT endpoints.