OT security
Help your customers protect what keeps production running
Control systems, operator PCs and machines running Windows XP cannot be patched and must not stop. Gridheart gives you as an MSP the right vendors, backup that works in isolated networks and our own Head of OT at your side.
The situation
Attackers have found their way to the factory floor
What used to be isolated control systems is now connected to business systems, suppliers and remote support. At the same time, most organisations lack visibility into their OT networks.
Sources: Dragos OT Cybersecurity Year in Review 2026 and the NIS2 directive.
IT and OT
Same customer, completely different rules
In the office, security comes before availability. In production it is the other way round. That is why ordinary IT tools often cannot be used as they are in an OT environment.
| Aspect | IT | OT |
|---|---|---|
| Top priority | Confidentiality and data protection | Availability and safety |
| Lifespan | A few years | Often 15-25 years |
| Updates | Continuous, automatic | Rare, often needs the vendor's approval |
| Restarts | Whenever convenient | Only during planned stops |
| Network | Connected to the cloud | Segmented or fully isolated |
| Operating systems | Windows 11, current servers | Windows XP, Windows 7, Server 2003 |
Acronis Cyber Protect for OT
Backup that works where other backup cannot reach
Most backup solutions have dropped support for older systems and require a cloud connection. Acronis is built for the opposite.
- Protects operating systems from Windows XP SP1 to Windows 11, including Windows Server 2003.
- Works fully without internet, with local storage and ransomware protection that runs offline.
- Operators can recover a machine themselves, without IT on site.
- Acronis' development process is certified to IEC 62443-4-1.
The vendors
The whole chain, from assessment to recovery
No single product protects an OT environment. We have brought together vendors that each cover one part, so you can offer the whole picture.
Penetration tests and security assessments of OT environments that show where production is vulnerable before anyone else finds out.
Specialised advisory for production environments: risk assessment, implementing protective measures, ongoing monitoring and compliance with standards and regulations.
MDR and incident response, so an attack is detected and handled before production is affected.
Backup and recovery for legacy and isolated systems, with ransomware protection that works offline.
How we help
You have the customer, we have the OT expertise
Many MSPs get questions about the production environment but have no OT specialist of their own. That is where we come in.
We join you at the customer
Oscar takes part in the customer meeting and helps you ask the right questions about the production environment.
Assessment
Together we go through systems, levels, legacy operating systems and the biggest risks.
The right protection per level
We propose a solution with the right vendor for each part, tailored to the customer's requirements.
You deliver, we back you up
You own the customer relationship. We support you with technology, vendor contacts and NIS2 questions.
Head of OT
Oscar Swanberg
Oscar leads Gridheart's OT work and is your contact when a customer has production, control systems or critical infrastructure. Book a call and we will go through the customer together.
Many OT customers are covered by NIS2
Energy, water, transport and manufacturing are among the sectors in scope. We help you connect OT protection with the requirements.
Frequently asked questions
Get started
Have a customer with production?
Tell us about the customer and the environment and we will take the next step together.