OT security consultants hear the same statements repeatedly: "We have a firewall, we're secure." "Our environment is air-gapped." "We can't implement that because of vendor support." Each of these reflects a common pattern - organizations applying incomplete thinking to a complex problem, often stopping short of real protection while believing the job is done. Legacy systems, surface-level segmentation and IT tools deployed without OT context are among the most persistent sources of exposure in industrial environments.

Drawing on four-plus years of OT security consulting experience across manufacturing sectors, this session challenges the assumptions that keep organizations vulnerable.

In this session, led by Leon Staufer of TXOne Networks, you will learn:

• Why buying a product is not the same as having a security program;
• How shallow segmentation - firewalls between IT and OT only - leaves the plant floor exposed;
• Why submarines remain the most useful mental model for understanding OT network isolation.