The article concerning the protection of the rigs OT environment is very interesting. I believe, it will be an increasingly important subject. There is only one thing I would like to add to the article and that’s the use of a data diode to seperate certain parts of your network. A data diode enables you to transfer data (reading) from one network (network A) to the other (network B) while in the meantime blocking any data traffic the other way around. This ensures that network A cannot be attacked from network B.

This solutions enables real time monitoring, while being secured. 100% hardware, so no need for software updates to keep you protected.