Topic starter
10/07/2026 9:09 pm
TL;DR: Manufacturing ransomware can force a full shutdown when IT and OT share weak or flat boundaries, according to Elisity, and the article argues that identity-based segmentation lets teams contain the IT compromise while preserving production continuity. The governance issue is not whether cyber risk exists, but whether production can stay online when corporate systems are hit.
Editorial analysis by NHI Mgmt Group, based on content published by Elisity: “IT/OT network segmentation: how manufacturers contain ransomware without killing production”.
By the numbers:
- Manufacturing ransomware has caused $17 billion in downtime across 858 incidents since 2018.
- Mature microsegmentation is associated with 71.4% faster mean time to contain breaches.
- Network segmentation is one of 12 key controls insurers evaluate during underwriting.
Key questions
Q: What breaks when IT and OT share a flat network during ransomware incidents?
A: A flat IT/OT network breaks the containment model because defenders cannot prove that production systems are clean before they decide whether to shut them down.
Q: Why do cross-boundary OT paths increase ransomware risk?
A: Cross-boundary OT paths increase risk because any trusted route can become a bridge for malware once an attacker reaches business IT.
Q: How do teams know whether IT/OT segmentation is actually working?
A: Teams know segmentation is working when an incident on corporate IT does not alter production traffic, control-system availability, or the ability to maintain safe operations.
Practitioner guidance
- Define the IT/OT trust boundary explicitly Document every approved cross-boundary communication path and remove any route that exists only because it was never challenged.
- Bind OT access to verified identity Use identity-based segmentation so only approved engineering workstations and designated services can reach production controllers.
- Constrain remote vendor access to one asset Limit maintenance sessions to the exact OT device being serviced and block any lateral movement into adjacent systems.
Bottom line: Flat IT and OT networks turn ransomware into a production shutdown decision because defenders cannot isolate one environment without gambling on the other.
Explore further
View Full Forum → | NHI Foundation Course → | Our Services → | Read the full analysis →
10/07/2026 9:32 pm
IT/OT segmentation is now a continuity control, not just a security control. In manufacturing, the real governance question is whether the organisation can preserve production during an IT compromise. That shifts segmentation from an architecture preference to a business resilience decision, especially where downtime, safety, and batch integrity intersect. Practitioners should treat cross-boundary access as a production-critical risk domain.
A question worth separating out:
Q: Who should be accountable for production boundary decisions in manufacturing?
A: Accountability should sit jointly across security, OT operations, and business नेतृत्व, because the boundary is both a cyber control and an operational risk decision. IT can define enforceable policy, OT can validate production dependencies, and leadership must own the trade-off between containment and continuity.
👉 Read our full editorial: IT/OT network segmentation is the ransomware containment line