Abstract
Information Technology (IT) oversees information systems within organisations, whereas Operational Technology (OT) is responsible for industrial control systems. Historically, these departments functioned independently, each with distinct objectives and separate networks. However, the rise of digital transformation and technologies such as the Industrial Internet of Things (IIoT) has increasingly blurred the lines between IT and OT, requiring their integration for effective management and cybersecurity(George, 2024).
This study examines the priorities and responsibilities of IT and OT departments, identifying the requirements for managing cybersecurity in integrated IT/OT environments, as well as the barriers and challenges that hinder successful integration. Its goal is to develop a governance and management framework to facilitate the convergence of IT and OT departments. The framework aims to define ownership and accountability, accelerate digital transformation, mitigate cybersecurity risks, enhance operational efficiency, and facilitate effective change management during the integration of IT/OT systems.
The conceptual framework identified key variables in the Integration of IT and OT, including management and governance of the integration process, the change management process implemented, cybersecurity management procedures in an IT/OT integrated environment, as well as the regulations and standards to be implemented or followed. A quantitative survey conducted at Rand Water formed the basis of the empirical framework. The positive correlation study and structural equation model (SEM) from the survey revealed that the management and governance of IT/OT integration have a significant influence on the change management process, the implementation of regulations and standards, as well as cybersecurity management. It further revealed that change management is crucial in integrating IT and OT departments. The study recommends implementing a change management process that addresses people, processes, and technology to enhance IT/OT integration. Key roles in these environments should be based on expertise rather than traditional departmental divisions. It suggests that organisations develop new governance and management policies explicitly tailored to digital technologies.