Immersive unveils new OT cybersecurity training for industry teams

Immersive has launched a new scenario-based operational technology (OT) cybersecurity solution aimed at preparing industrial teams to address threats in critical operational environments.

The new Software-as-a-Service (SaaS) offering is designed to cater to the unique requirements of OT environments, which have historically lagged in the implementation of robust security measures. As the threat to OT infrastructure has increased, recent industry findings indicate that 73% of OT professionals have reported intrusions affecting their environments.

Immersive's solution focuses on upskilling both red teams, who simulate attackers, and blue teams, who defend systems, by providing interactive and on-demand training designed to equip professionals with the ability to detect, disrupt, and react to OT-specific cyber threats. This approach is intended to serve organisations at all stages of security maturity, with continuing content updates.

The first release of the product addresses the training needs of defensive, offensive, and compliance-oriented teams operating in OT environments, and includes the necessary tools to conduct Immersive Cyber Drills.

Thanos Karpouzis, Chief Technology Officer at Immersive, commented on the security challenges facing the sector. "Operational technology is now a front-line target for ransomware, nation-state attacks, and supply chain vulnerabilities, but the training available to defend it has historically lagged behind," Karpouzis said.

Karpouzis added, "Immersive has filled this gap in the market with continuous OT exercising and hands-on, self-guided OT labs to prove and improve vital cyber capabilities. With the stakes being so high for industrial systems, the need for robust security measures and thorough training cannot be overstated."

The key features of Immersive's Operational Technology Cybersecurity Training Suite include an Adaptive OT/ICS Skills Assessment, which is currently in beta. This assessment is integrated into the labs by default to baseline user proficiency in OT and industrial control systems (ICS) security. This feature is available exclusively to customers with an OT licence.

The platform offers hands-on labs with a defensive focus, where users can learn how to counter various threat actors and malware specific to OT environments while developing OT cyber threat intelligence skills. A collection dedicated to OT threat actors allows learners to explore the tactics, techniques, and procedures of groups targeting OT systems, with emphasis on MITRE ATT&CK frameworks for both ICS and enterprise environments.

A further component is the OT malware collection, which introduces users to malware affecting both conventional IT systems and OT-specific infrastructure such as programmable logic controllers. The OT cyber threat intelligence collection aims to build core CTI capabilities tailored to OT, supporting the tracking of campaigns targeting these systems.

In terms of team-based exercises, the solution includes cyber range exercises that simulate attacks such as those conducted by the Sandworm threat actor, enabling participants to practice detection and response strategies in a controlled OT lab setting.

Leadership teams can utilise a crisis simulation component designed to complement the technical exercises. This scenario-based training is aimed at improving communication, decision-making, and incident response during periods of high operational stress.

Mark Schmitz, Chief Executive Officer at Immersive, noted the historical lack of OT-focused training within cyber programmes. "Effective OT cybersecurity training has historically been overlooked in cyber training programs, despite its critical importance to operational resilience," Schmitz said.

Schmitz continued, "Strengthening hands-on training and implementing cyber drills for OT teams is key to building lasting resilience and maintaining seamless operations. Given the serious risks to productivity, finances, and even the environment, a robust training strategy isn't just recommended - it's imperative."

The launch of this new OT cyber solution by Immersive comes as a response to the increasing frequency and severity of cyber incidents targeting industrial systems, reinforcing the need for comprehensive and practical training for operational technology teams.