The successor wireless generation to 5G, targeted at sub-millisecond latency and native sensing/positioning capability — early standards work is only just underway.
Industrial IT / OT / Critical Control Information Infrastructure
The networks, security architectures and information infrastructure that connect and protect the control environment.
Industrial control once ran on isolated networks. Today plants are connected to business systems, suppliers and the cloud, and the networks, security architecture and information infrastructure around the control system have become as important as the control system itself.
This category follows three threads. The first is connectivity: cellular, satellite and edge computing that extend where operational data can go. The second is security: monitoring, architecture and operations adapted to environments where availability and safety come first and equipment stays in service for decades. The third is assurance: the supply-chain transparency, cryptography and compliance tooling that regulation increasingly demands of critical-infrastructure operators.
Full analyses in this category
- Converged IT/OT security operations centres
Security operations that monitor and respond to threats across both business IT and the industrial control environment, with OT-specific visibility, playbooks and authority. Widely recommended and increasingly expected by regulators, but unevenly implemented. - Zero Trust architecture for OT networks
Applying zero trust principles, verify every user, device and connection and grant only the access needed, to industrial control networks. CISA published dedicated OT guidance in April 2026; in practice most of what is sold as zero trust OT is good segmentation and remote-access control, which is worth having under any name. - AI-powered OT anomaly & threat detection
Passive monitoring of industrial networks that learns normal communication patterns and flags deviations, combined with protocol decoding and threat signatures. A mature product category in which machine learning is one ingredient, not the whole story. - SBOM & software supply-chain transparency for ICS
Machine-readable inventories of the software components inside control-system products, used to find which assets are affected when a vulnerability is disclosed. The EU Cyber Resilience Act turns SBOMs from good practice into a legal requirement for products sold in the EU from December 2027. - Private 5G industrial wireless backbones
Site-owned cellular networks that promise high-capacity, secure wireless coverage across plants, ports and mines. The technology works, but in the process industries deployments have grown more slowly than forecast, and most serve mobility and monitoring rather than control. - LEO satellite connectivity for remote OT sites
Low-earth-orbit satellite broadband bringing tens-of-milliseconds latency to well pads, pipelines, mines and substations beyond terrestrial networks. It has changed what is practical at remote sites; it is a shared, best-effort service, and OT designs need to treat it that way.
This category has 15 entries in the October 2026 edition, of which 4 are AI/ML-driven. They are listed below by stage, from earliest to most mature. Entries marked "Full analysis" have a sourced, in-depth page; the others are short entries.
Emerging Idea (5)
Entries at the Emerging Idea stage have a working concept and early demonstrations, but few or no production deployments. Evidence at this stage comes mainly from pilots, research and supplier roadmaps.
Cryptographic algorithms designed to resist attack from a future cryptographically-relevant quantum computer, replacing the RSA/ECC-based schemes protecting today's OT communications and remote access.
A machine-learning approach where models train across multiple plants' data without that data ever leaving each site, then share only the improved model — letting an operator with many similar sites benefit from fleet-wide learning without centralising sensitive process data.
A composable security architecture where distributed OT security tools (detection, identity, policy) interoperate through common analytics and policy layers, instead of each product operating in isolation.
Software that continuously assesses an OT environment against IEC 62443 zones-and-conduits requirements, NIS2 and equivalent regulation, rather than relying on a periodic manual audit.
Over-Promise (5)
Entries at the Over-Promise stage are receiving more supplier and media attention than their deployed base yet justifies. Products exist and early adopters are live, but independent evidence of results is still thin.
A live, continuously-synchronised virtual model not just of the process, but of the control network itself — every controller, switch, firewall rule and data flow — for security testing, capacity planning and incident response rehearsal.
A machine-readable Software Bill of Materials for every control-system component, listing every third-party and open-source library it contains, so a newly disclosed vulnerability can be matched to affected assets in hours rather than weeks.
Continuous verification of every device, user and connection inside the OT network, rather than trusting anything already inside the traditional Purdue-model perimeter.
AI agents that triage, investigate and in some cases respond to security alerts autonomously, extending the AI-SOC pattern rapidly emerging in enterprise IT security into the OT security operations centre.
Ruggedised, industrially-rated compute platforms running AI inference physically close to the process — in the control room or on the plant floor — rather than in a distant cloud region.
Reality Check (2)
Entries at the Reality Check stage have been through a round of over-promising. Early projects under-delivered, attention has moved on, and what remains is being re-scoped around the uses that work.
Dedicated, site-owned 5G networks providing high-bandwidth, low-latency, securable wireless connectivity across a plant, port or mine site, independent of public carrier infrastructure.
Distributed-ledger records intended to give an immutable, tamper-evident history of a control-system component's provenance, firmware updates and maintenance history.
Industry Acceptance (3)
Entries at the Industry Acceptance stage have repeatable reference deployments and a reasonably well-understood business case. The open questions are about integration, cost and scale more than about whether the technology works.
A single security operations function with visibility and defined authority across both IT and OT estates, replacing the historical split between a corporate SOC and a plant that security 'doesn't reach'.
Passive network monitoring that baselines normal OT traffic and process behaviour, then uses machine learning to flag deviations that signature-based tools would miss.
Low-earth-orbit satellite broadband providing low-latency connectivity to remote wellheads, pipelines, mines and substations that terrestrial networks never reached economically.
Stage and time-horizon placements are editorial judgements based on public information as of October 2026. See how placements are made.