The Vanishing Air Gap
Faraday's read: the air gap was never a wall, it was a habit — and habits erode under convenience. Every dashboard that lets an executive watch the plant from a laptop, every vendor laptop plugged in for a firmware update, every remote-access tool bolted on during a crunch, is a wire laid across the moat. Nobody decides to connect operational systems to the internet. It happens one reasonable exception at a time, until the map you drew of an isolated network describes a building that no longer exists. The gap doesn't close with a bang. It closes with a hundred small yeses.
Knowledge check
Explain why an intrusion that begins entirely in business IT can still force a physical shutdown of operational equipment, even if the attacker never touches the control systems.
Show the answer
Operators depend on IT systems for the information and confidence needed to run the plant safely — billing, scheduling, monitoring, and the visibility that tells them the process is behaving. When those systems are compromised or knocked out (or simply can't be trusted), operators lose the ability to verify safe operation and will deliberately shut down the physical process as a precaution. The shutdown is a rational human safety decision forced by loss of trustworthy information, not a direct manipulation of the machinery.