HOME > EVENTS & NEWSROOM

​22 - 23 July 2026​​

Key Takeaways from Operational Technology Cybersecurity Expert Panel Forum organised by Cyber Security Agency of Singapore (CSA)

​

​​​​​​​​​​​Executive Summary – Five Pillars

Key Takeaways

​1. People: Human capability remains both the greatest vulnerability and the strongest defence. Competence, collaboration, leadership and operational discipline determine cyber resilience.

​2. Process: Organisations are shifting from compliance-driven activities towards operational resilience through risk-based governance, preparedness, continuous monitoring and recovery planning.​

3. Technology: AI has become the dominant technology theme. OT environments continue to expand through cloud, IIoT and connected infrastructure, while quantum remains a lower near-term priority for most OT operators.

​4. Governance: Executive leadership, cross-sector collaboration and national coordination continue to strengthen organisational and critical infrastructure resilience.​

5. Engineering: Cybersecurity must be designed around physical processes, safety and operational constraints. Engineering judgement remains the defining characteristic of effective OT security.

​

Overall Reflection

OTCEP 2026 demonstrated that while technologies and threats continue to evolve rapidly, the foundations of OT cybersecurity remain remarkably consistent. AI has become the dominant catalyst for change, but the industry's priorities continue to centre on protecting physical operations through sound engineering, capable people, resilient processes and effective governance. At the same time, the conference itself is evolving—placing greater emphasis on deeper practitioner learning through masterclasses and focused discussions, reflecting the growing maturity of the OT cybersecurity profession.

​

I. The Mission of OT Cybersecurity Has Not Changed

Despite increasing discussions around AI, advanced threat actors, cloud connectivity and digital transformation, the conference consistently reinforced that the primary objective of OT cybersecurity remains protecting physical processes, safety, reliability and operational continuity.

Key takeaway: OT cybersecurity is ultimately about preventing physical consequences rather than simply protecting digital assets.​

​

II. AI Has Moved to Centre Stage

Artificial Intelligence was the dominant theme throughout the conference, appearing in keynote speeches, technical presentations and panel discussions. While Post-Quantum Cryptography (PQC) and quantum threats were discussed, they attracted significantly less attention. This reflects the industry's current priorities, where most OT environments remain more concerned with availability, integrity and safety than long-term confidentiality.

Key takeaway: AI is becoming today's operational challenge, while quantum remains an important but longer-term strategic consideration.​

​

III. OT Security Is Becoming More Engineering-Centric

Across multiple sessions, a common thread emerged:

• understand the physical process first

• understand the system architecture

• understand operational constraints then implement cybersecurity.

Security cannot simply be overlaid onto industrial systems using traditional IT approaches.

Key takeaway: Engineering judgement is becoming just as important as cybersecurity expertise.​

​

IV. Human Factors Continue to Dominate

Although AI featured prominently throughout the conference, many discussions returned to a familiar reality: People remain both: the weakest link through human error, poor practices and weak operational discipline; and the strongest defence through competent engineers, operators, responders and leadership.

Key takeaway: Building resilience requires continuous investment in people—not just technology.​

​

V. The Industry Is Moving Beyond Compliance Towards Resilience

Several sessions reflected a broader shift in mindset.

Rather than asking:"Are we compliant?"

The focus is increasingly:"Can we continue operating safely when something goes wrong?"

Topics such as incident response, operational recovery, engineering resilience and cyber-informed engineering reinforced this transition.

Key takeaway: Compliance establishes the baseline; operational resilience is the objective.

​

​VI. OT Continues to Expand Beyond Traditional Industrial Systems

OT now encompasses a much wider ecosystem, including:

• EV charging infrastructure

• Industrial IoT

• cloud-connected operational systems

• remote access

• APIs

• mobile applications.

The cyber-physical attack surface continues to grow beyond the traditional control network.

Key takeaway: OT cybersecurity must evolve together with digital transformation.​

VII. OTCEP Itself Is Evolving

Compared with previous editions, OTCEP 2026 adopted a noticeably different conference format. Observations include:

• greater emphasis on longer masterclass sessions

• continued plenary sessions

• less emphasis on parallel technical tracks and technology showcases than in previous programmes

• fewer opportunities to sample many different topics in short sessions

• professional event organisation with excellent moderation throughout.

The published programmes support the shift towards masterclasses and plenaries, while earlier programmes gave more prominence to governance tracks, engineering tracks and technology showcases.

Key takeaway: OTCEP appears to be maturing from broad awareness-building towards deeper practitioner learning.​

VIII. Leadership and Community Continue to Matter.

The opening reflected a leadership transition within CSA. The Chief Executive's opening remarks were intentionally concise, allowing the Minister's keynote to establish the strategic direction for the conference. Beyond the presentations themselves, OTCEP continues to provide significant value by bringing together government, operators, vendors, researchers and practitioners to exchange experiences and strengthen Singapore's OT cybersecurity community.

Key takeaway: Strong leadership and collaboration remain essential components of cyber resilience.​​

About Attila Cybertech

Attila Cybertech is an Operational Technology (OT) cybersecurity firm. We help our clients secure their critical assets through a holistic approach with a range of solutions from risk assessments on secured network design, firewall selection/configuration and pen-testing for SCADA/industrial control systems. We combine our specialist domain knowledge of industrial automation, process engineering and IT security with our passion for pioneering innovative cybersecurity technology to deliver leading-edge, robust and resilient solutions.​​​​​​​​​