Frontier AI in critical infrastructure: what changes for defenders?

TL;DR: Frontier AI can help critical infrastructure defenders reason across unfamiliar devices, protocols and attack patterns, according to Nozomi Networks, but OT environments still force slower patching, limited visibility and human accountability. The governance challenge is not whether AI can assist, but whether operators can use it without weakening safety, uptime or operational context.

Editorial analysis by NHI Mgmt Group, based on content published by Nozomi Networks: “Nozomi Networks Joins Anthropic’s Critical Infrastructure Defense Program”.

Key questions

Q: How should security teams govern AI-assisted infrastructure automation?

A: Treat AI-assisted automation as a privileged workload with constrained scope, logged actions, and mandatory human review for identity or network changes.

Q: Why do OT environments need different risk management than IT environments?

A: OT environments control physical processes, so the security outcome includes safety and operational continuity, not just data protection.

Q: What breaks when AI recommendations ignore process and safety context?

A: When AI recommendations omit process state, maintenance windows or device dependencies, defenders can act on incomplete signals and make unsafe changes.

Practitioner guidance

• Map OT assets and dependencies before introducing AI-assisted workflows Document the systems, protocols, maintenance windows and safety dependencies that determine what AI can safely analyse or recommend in production environments.
• Define human approval gates for AI-assisted remediation Set explicit thresholds for when an analyst may accept, reject or escalate AI-generated findings, especially where action could affect uptime or physical safety.
• Use AI for enrichment, not autonomous response Limit AI to summarisation, correlation and hypothesis generation until the organisation has tested logging, auditability and operator override paths.

Bottom line: Frontier AI can help OT teams investigate unfamiliar systems faster, but it cannot remove the operational constraints that define critical infrastructure security.

Explore further

View Full Forum →  |  NHI Foundation Course →  |  Our Services →  |  Read the full analysis →