Six sectors, one reference model
Different processes. The same architecture underneath.
By sector
What actually changes when the process changes.
The method carries across all of them. The consequence model, the constraints and the order of work do not — which is why a program written for one sector rarely survives contact with another.
Electric utilities
Exposure concentrates where control reaches the field: substation automation and protection, the SCADA wide-area network, distribution automation and a growing population of connected distributed energy resources. The consequence is measured in load, protection behaviour and restoration time.
Power generation
A dense mix of vendor-specific control systems, turbine and boiler control, safety systems and balance-of-plant packages, most of them supported remotely by their manufacturers. The work is as much about governing those support paths as about hardening the plant.
Water and wastewater
Small teams, large geography, unstaffed remote sites on cellular or radio links, and long-lived controllers with little monitoring. The constraint is what a utility can sustain, not what a vendor can install — and the consequence is public health.
Oil, gas, refining and chemicals
Safety instrumented systems, a large resident contractor population, tightly coupled process and manufacturing execution layers, and maintenance windows years apart. Sequence is decisive: anything needing an outage has to be carried into the turnaround scope or it waits.
Industrial manufacturing
Many small control systems from many suppliers, networks grown line by line, machine builders with standing remote support, and expanding links to quality, maintenance and analytics platforms. The common event is not a targeted attack but commodity ransomware on an unmapped path.
Critical facilities and buildings
Building management, power and cooling, fire and life safety, access control and lifts are control systems with physical consequence. In a data centre, hospital or airport the first piece of work is usually establishing what exists and who is accountable for it.
Questions across sectors
What changes between industries, and what does not.
Which industries does InnovAKT work in?
Electric utilities, power generation, water and wastewater, oil, gas, refining and chemicals, industrial manufacturing, and critical facilities such as data centres, airports, hospitals and large commercial estates. What these have in common is a physical process that cannot simply be switched off to be secured.
Does OT cybersecurity differ between industries?
The engineering does. A distribution utility's exposure runs through substations, protection relays and a wide area network it does not fully own. A refinery's runs through safety instrumented systems, turnarounds measured in years and a large resident contractor population. A water utility's runs through unstaffed remote sites on cellular links. The method is common; the consequence model, the constraints and the sequence are not.
Does InnovAKT work with critical facilities as well as plants?
Yes. Building automation, power and cooling, fire and life safety, access control and lift systems are industrial control systems, and in a data centre, hospital or airport their failure has the same character as a process failure. InnovAKT treats a facility's control estate as OT, because that is what it is.