Rockwell Automation, which sells industrial automation software and equipment, has opened a security operations centre at its Asia Pacific headquarters in Singapore. The centre will monitor customers' factory and plant networks around the clock, part of a wider network of managed security services the company runs.

The work it describes is managed detection and response for operational technology, the systems that run machines rather than the office. The centre takes in data from a range of vendors' equipment, adds threat intelligence, and sorts problems by risk so that a plant's small security team can focus on the most serious ones first. The company says it will also run training and simulation exercises there, and that it has hired young cybersecurity graduates into the team.

Naming the hard part

The release is unusually direct about where the difficulty lies. It points to the convergence of information technology and operational technology — the fact that a factory network, once deliberately isolated, is now connected to the same world as a corporate laptop. Security teams in manufacturing often have neither the tools nor the mandate to see that whole estate, and the announcement quotes regional research finding cybersecurity has become the second most critical external risk for Asian manufacturers.

What a centre like this proves, though, is harder to state than that it exists. Monitoring is only useful if someone responds, quickly, with authority to shut a line down, and the release gives no response-time commitment. It also cites a survey of manufacturers, which is industry data rather than an outcome. The verifiable fact is a facility and a staff; the open question is what its service-level agreement promises when a plant is actually under attack.