The Convergence of IT & OT From a Cyber Security Perspective
Alejandro Macho Aroca, PhS, Head of Global Cybersecurity, GEM, Iberdrola
In this highly relevant and technically grounded thought leadership session, Dr. Alejandro Macho Aroca, Head of Global Cybersecurity at Iberdrola’s Global Energy Management division, explored the growing intersection of IT and OT systems and the critical cybersecurity challenges this convergence presents.
Framing the Operations Control Center as the “heartbeat” of industrial visibility and coordination, Alejandro Macho Aroca examined how rapid digitalisation—through AI, digital twins, cloud, and edge computing—is flattening traditional boundaries between information technology (IT) and operational technology (OT). While convergence promises efficiency and agility, it also increases the risk surface and the potential blast radius of cyber incidents.
Alejandro Macho Aroca presented a clear comparison of IT and OT realities, from differing risk postures and lifecycles to conflicting operational objectives. He highlighted that while IT often operates on principles of agility, automation, and rapid recovery, OT systems prioritise safety, deterministic control, and long-term stability—creating unique challenges when integrating the two.
With practical insights from a cybersecurity leader, the session outlined a path forward: converging data and control without compromising the safety perimeters that protect critical operations. He emphasised the need for rigorous validation, clear boundary definitions, and engineering-led controls to maintain visibility and prevent unsafe states.
Ultimately, this presentation offered a pragmatic, systems-level view of cybersecurity in the age of digital convergence—providing attendees with a framework to safeguard industrial operations while embracing technological innovation.
