Cyber-physical security is the protection of systems where digital compromise can change physical operations or outcomes. It applies to industrial control systems, utilities, building automation, medical devices, robots, and other OT environments where software commands can move equipment, open valves, stop machines, or alter safety settings.
This matters because an attack is not limited to data theft or service disruption: it can affect uptime, product quality, worker safety, and critical infrastructure. Defenses therefore focus on reducing operational impact, not just blocking malware. Common controls include asset inventory, network segmentation, strict remote access, authentication for operators, monitoring for abnormal commands, and tested recovery procedures. In real attacks, adversaries may use stolen credentials, insecure remote tools, or poorly segmented networks to reach controllers and influence physical processes. In defense, organizations measure success by resilience: how quickly they detect, contain, and restore safe operations when something goes wrong.