What Are the Key Design Considerations When Merging OT and Unmanaged IoT?
A pharmaceutical company acquired a growing startup. The pharmaceutical company has a comprehensive OT stack, while the startup allows employees to install IoT devices without oversight. Both companies will continue to operate independently with some systems shared and others separated. Which of the following considerations are the most important when designing the new combined systems? (Choose two.)
Community Insight
The exam tests IT/OT convergence risk: unmanaged IoT creates an attack path into safety-critical OT, so segmentation and safety monitoring outrank generic privacy or data-aggregation concerns.
This question tests how to design a combined OT/IoT environment after a pharmaceutical acquisition, where unmanaged startup IoT devices meet a mature OT stack. The correct design prioritizes segmentation between zones and safety monitoring for OT processes.
Learners often pick regulation or data privacy because the acquirer is a pharmaceutical company, but those are governance constraints rather than the primary architecture controls for containing unmanaged IoT next to OT.
Community Discussion (1 comments)
Comments & Corrections
No comments yet — spotted an error or have a note? Share it below.
Expert Analysis
Why the Answer Is Correct
Segmentation (D) is correct because the startup's uncontrolled IoT devices cannot be trusted at the same level as the pharmaceutical OT stack; isolating them into separate zones and enforcing controlled conduits prevents lateral movement into critical manufacturing or OT networks. Safety monitoring (E) is correct because OT in a pharmaceutical environment can affect physical processes, product integrity, and human safety, so the combined design must preserve visibility and controls that detect unsafe conditions. The phrase "some systems shared and others separated" itself points to an intentional segmentation architecture rather than flat aggregation. BWH9492 similarly argues for isolating "insecure IoT/IT traffic from critical OT zones" and keeping OT process integrity and human safety uncompromised.Why the Other Options Are Wrong
Data privacy (A) matters for personal or patient data, but it does not address the immediate OT risk created by unmanaged IoT devices. Aggregation (B) is not a security objective here; combining data or networks without boundaries would increase exposure and blur accountability. Environmental (C) controls are relevant to facilities and OT operating conditions, but they are not the primary design consideration when merging an untrusted IoT culture with a safety-critical OT stack. Regulation (F) is a real pharmaceutical obligation, but it is a compliance constraint that follows from the architecture; it is less directly protective than segmentation and safety monitoring for this scenario.Community Comment Notes
The visible learner comment from BWH9492 selects D and E and explains segmentation through the Purdue Model/firewalls and safety monitoring through OT process integrity and physical human safety. That aligns with the exam's IT/OT convergence doctrine: uncontrolled IoT must be contained, and safety-critical processes must retain monitoring. The comment is useful because it names the concrete control boundary (critical OT zones) and the consequence (human safety) rather than treating the merger as a generic data-governance problem.Official Reference
Exam Strategy
For OT/IT merger questions, scan for the word "unmanaged" or "without oversight" — that signals segmentation as a required control. Then ask whether the industry has physical-process consequences; if so, safety monitoring is usually the second answer.
Frequently Asked Questions
Why is regulation not the answer if the company is in pharmaceuticals?
Regulation is a compliance driver, but the question asks for design considerations; segmentation and safety monitoring directly contain unmanaged IoT and protect OT processes.
Why does segmentation beat data privacy for the startup's IoT devices?
Unmanaged IoT creates a reachable attack path into critical OT; segmentation limits lateral movement, while privacy controls alone do not protect the OT stack.