Cisco launches OT security certification for industrial network defenders

Cisco has introduced the OT Security Practitioner certification to equip security and network teams with the expertise required to protect industrial environments where information technology and operational technology systems are increasingly interconnected.

Root cause

The initiative addresses a widening skills gap as organizations modernise operations and connect more industrial assets to corporate networks. Ryan Rose, director of skills and certification product management for Learn with Cisco, noted that evolving security requirements and the adoption of artificial intelligence create a pressing need for professionals who understand the unique constraints of the plant floor. Securing these environments differs significantly from traditional enterprise IT, as industrial operations often depend on legacy systems that are difficult to update or protect with standard security controls.

Attack path

Organisations face challenges integrating IT and OT operations, with a Cisco survey of 1,000 industry leaders finding that 43% report limited or no collaboration. Rose stated that safety and availability come first, so routine patching, active scanning, or other familiar IT practices may be impractical or could disrupt equipment and production. Cisco Talos found that nearly 40% of the 100 most targeted vulnerabilities in 2025 affected end-of-life devices, highlighting the prevalence of unpatchable assets in these environments.

Affected versions

The certification targets early-career operational technology professionals, information technology practitioners transitioning into industrial roles, and students pursuing careers in industrial cybersecurity. It does not apply to specific software versions but rather to the professional competencies needed to manage networks containing legacy hardware and software that may no longer receive vendor updates or security patches.

Mitigation

Cisco provides hands-on learning through Cisco Modeling Labs, which offers virtual environments for practising network designs and configurations without risking production systems. This safe space allows professionals to build and test skills without causing disruptions in live industrial settings. The curriculum emphasises network segmentation, monitoring, and security controls that account for strict industrial operating requirements, ensuring that defence strategies align with the need for continuous availability and safety.

Why it matters

Industrial networks prioritise availability and safety over confidentiality, which complicates standard security responses. Teams usually cannot apply automatic updates or aggressive scanning tools without risking physical harm or production downtime. Organisations should verify whether their security staff understand these operational constraints. Check if your team can design segmented networks that isolate critical control systems from corporate IT traffic. Ensure that monitoring strategies detect anomalies without interfering with machine control signals. This approach protects assets while maintaining the continuous operation required in manufacturing and utility environments.

What to do and how to stay safe: Cisco

• Review current network segmentation strategies to ensure industrial control systems are isolated from general corporate networks.
• Identify legacy devices that no longer receive vendor updates and assess their exposure to external networks.
• Verify that incident response plans account for the physical safety implications of disrupting industrial operations.
• Explore virtual lab environments to train staff on securing industrial networks without affecting live production systems.

Step-by-step guide: Password Policies Examples That Reduce Password Fatigue

General security guidance from the Vector Bulletin newsroom. It is not confirmed advice from the organisations named in this story.

Frequently asked questions

Who is the Cisco OT Security Practitioner certification designed for?

It targets early-career OT professionals, IT practitioners moving into industrial roles, and students interested in industrial cybersecurity.

What topics does the certification cover?

The curriculum includes industrial networking, security fundamentals, network segmentation, and incident response.

Why is this certification necessary now?

It addresses the skills gap created by IT/OT convergence, where legacy systems and AI adoption require specialised security knowledge.