https://amarsinghjandu.com/insights Principal architect across cloud, enterprise and operational technology: security architecture for national-scale critical infrastructure, AI security in OT, national grid intelligence and IT/OT convergence. en-au https://amarsinghjandu.com/insights/post-10-zero-trust-hybrid-ot-it https://amarsinghjandu.com/insights/post-10-zero-trust-hybrid-ot-it Which zero trust principles survive contact with operational technology, and which will break your control systems if you apply them. Identity, segmentation and encryption reconsidered for hybrid IT/OT estates. Tue, 08 Sep 2026 00:00:00 GMT Zero Trust OT Security ICS Hybrid Architecture Identity Microsegmentation Network Security Critical Infrastructure Enterprise Architecture https://amarsinghjandu.com/insights/post-09-adversarial-ml-ot-environments https://amarsinghjandu.com/insights/post-09-adversarial-ml-ot-environments Adversarial machine learning meets industrial control. Training-time poisoning, inference-time evasion and model extraction against OT anomaly detection, with the architectural and operational controls that build in robustness. Tue, 18 Aug 2026 00:00:00 GMT Adversarial ML Machine Learning Security OT Security ICS Anomaly Detection Model Poisoning Evasion Attacks AI Security Critical Infrastructure https://amarsinghjandu.com/insights/post-08-smart-grid-edge-security https://amarsinghjandu.com/insights/post-08-smart-grid-edge-security The traditional grid had thousands of controllable assets; the smart grid has millions. Securing distributed energy resources, virtual power plants and edge devices at a scale the existing security architecture was never designed for. Tue, 28 Jul 2026 00:00:00 GMT Smart Grid Distributed Energy Resources DER VPP Grid Security IoT Security NERC CIP Zero Trust Certificate Management Energy Transition https://amarsinghjandu.com/insights/post-07-ot-incident-response https://amarsinghjandu.com/insights/post-07-ot-incident-response In enterprise IT a bad incident response decision costs you an outage. In OT it can cost a life. Why SIEM playbooks do not transfer to operational environments, and what an OT-specific response capability has to look like. Tue, 07 Jul 2026 00:00:00 GMT Incident Response OT Security ICS SCADA Process Safety Industrial Cybersecurity SIEM Critical Infrastructure Energy Security https://amarsinghjandu.com/insights/post-06-ot-dmz-design https://amarsinghjandu.com/insights/post-06-ot-dmz-design The OT DMZ is the most important zone in an industrial security architecture and the one most often designed by people who have never operated a control system. What a defensible design actually requires, broker by broker. Tue, 16 Jun 2026 00:00:00 GMT OT DMZ Industrial Networks IT/OT ICS Security Data Diodes Firewall Architecture Jump Hosts Defence-in-Depth ISA/IEC 62443 https://amarsinghjandu.com/insights/post-05-sovereign-cloud-architecture-energy https://amarsinghjandu.com/insights/post-05-sovereign-cloud-architecture-energy A practical design guide for regulated energy operators adopting cloud without surrendering the control properties that regulation and operational safety demand: data residency, sovereignty boundaries, and assurance under IRAP and SOCI. Tue, 26 May 2026 00:00:00 GMT Cloud Architecture Sovereign Cloud Energy Critical Infrastructure Data Residency Zero Trust Regulated Industries Azure Government AWS GovCloud https://amarsinghjandu.com/insights/post-04-narrow-case-for-ai-in-ot https://amarsinghjandu.com/insights/post-04-narrow-case-for-ai-in-ot Where machine learning genuinely earns its place in industrial control, and where it does not. Anomaly detection and predictive maintenance assessed honestly against the determinism and safety constraints of OT environments. Tue, 05 May 2026 00:00:00 GMT AI Machine Learning OT Security ICS Anomaly Detection Predictive Maintenance Industrial Control Critical Infrastructure https://amarsinghjandu.com/insights/post-03-scada-modernisation-architecture https://amarsinghjandu.com/insights/post-03-scada-modernisation-architecture The most dangerous moment for a control system is when someone decides to replace it. Architecture patterns for SCADA modernisation (migration strategy, historian placement, remote access) that preserve operational safety properties. Tue, 14 Apr 2026 00:00:00 GMT SCADA OT Architecture Energy Infrastructure Modernisation Defence-in-Depth Historian Remote Access ICS Security https://amarsinghjandu.com/insights/post-02-threat-modelling-cni-beyond-stride https://amarsinghjandu.com/insights/post-02-threat-modelling-cni-beyond-stride STRIDE was built to find bugs in software; critical national infrastructure has an adversary problem. A consequence-driven approach to threat modelling using PASTA, MITRE ATT&CK for ICS, and process hazard analysis as first-class inputs. Tue, 24 Mar 2026 00:00:00 GMT Threat Modelling Critical Infrastructure ICS Security MITRE ATT&CK for ICS PASTA CNI Risk Architecture https://amarsinghjandu.com/insights/post-01-itot-convergence-energy-security https://amarsinghjandu.com/insights/post-01-itot-convergence-energy-security Convergence is routinely treated as an engineering convenience problem when it is a security architecture problem. Why the Purdue Model still matters, how convergence projects break it, and what ISA/IEC 62443 actually demands of energy operators. Tue, 03 Mar 2026 00:00:00 GMT IT/OT Critical Infrastructure Energy Security ICS SCADA Architecture ISA/IEC 62443 AI