Anthropic’s critical infrastructure defense program: what changes for OT teams?

TL;DR: Dragos says it has joined Anthropic’s Critical Infrastructure Defense Program to apply frontier Claude models to OT defense across power grids, water systems, factories, and transportation networks, framing the move as a response to AI-enabled attacks and the limits of IT-era security assumptions in xOT environments. The practical question is how shared defense, not siloed tooling, changes detection, guidance, and governance for critical infrastructure operators.

Editorial analysis by NHI Mgmt Group, based on content published by Dragos: “Dragos Joins Anthropic’s Critical Infrastructure Defense Program”.

Key questions

Q: How should OT teams govern AI-assisted detections in critical infrastructure?

A: OT teams should treat AI-assisted detections as governed operational controls, not passive analytics.

Q: Why do AI systems create new risk in operational technology environments?

A: AI systems can influence maintenance decisions, monitoring, and control-relevant data flows without fitting traditional user access models.

Q: What signs show that shared threat intelligence is not working in xOT?

A: Shared threat intelligence is failing when it produces repeated false positives, cannot be mapped to local assets, or is ignored by operators because it lacks process context.

Practitioner guidance

• Define AI use boundaries for OT workflows Document where AI may support detection, triage, engineering guidance, or summarisation, and where it must not make or trigger operational changes.
• Map trust ownership across xOT decision paths Assign accountable owners for model inputs, model outputs, and any human or machine action taken on AI-assisted recommendations.
• Validate shared intelligence before operational use Require local testing of community-fed detections against your own asset inventory, process constraints, and false-positive tolerance.

Bottom line: AI is becoming part of critical infrastructure defence, but xOT environments still require safety-aware governance that enterprise IT controls do not provide.

Explore further

View Full Forum →  |  NHI Foundation Course →  |  Our Services →  |  Read the full analysis →