Glossary · OT cybersecurity
Data security
Also known as: Information security (data)
German: Datensicherheit
In information security, data security is the protection of data against unauthorized access, alteration, loss and destruction, at rest, in transit and in use. It covers measures such as access control, encryption, integrity checks and backups.
- OT security
In one sentence
Data security protects data at rest, in transit and in use against unauthorized access, alteration, loss and destruction.
Example
Recipe data sent from the MES to the line controllers is transmitted over an authenticated, integrity-protected connection and backed up daily.
How it applies
- Engineering: In OT, integrity of process data, recipes, parameters and logs is often more critical than confidentiality. IEC 62443 treats system integrity and data confidentiality as separate foundational requirements.
- Operation: Production data can be sensitive (recipes, quality records), and some OT data is personal, such as operator logins. Protection measures must fit the real-time and availability needs of the control system.
- Compliance: Regulated industries add their own expectations, for example Data integrity (GxP) in pharmaceutical manufacturing.
- Documentation: Manuals should describe where the product stores data, which data can be exported, how it is protected (encryption, access rights) and how it is deleted when a device is decommissioned or returned for repair.
Data security vs. data protection
Data security concerns technical and organizational protection of any data. Data protection (privacy) concerns the lawful handling of personal data. In German both are sometimes rendered loosely; keep "Datensicherheit" and "Datenschutz" apart.