SCADA that adversaries cannot command-inject.

SCADA and industrial control systems authenticate users, not commands. An attacker who reaches the control network — through IT/OT bridging, a compromised engineering workstation, or a supply chain implant — can issue commands that the system executes without additional verification. The command looks identical to a legitimate operator instruction. The system responds. The consequence is physical: valves open, breakers trip, turbines overspeed.

Modern industrial environments bridge IT and OT networks for monitoring, remote maintenance, and efficiency. Every IT/OT connection is a potential pivot path from enterprise email phishing to operational technology control. Attackers routinely establish persistent access in IT environments and wait — sometimes months — for the right moment to cross into OT. The Colonial Pipeline attack established IT access well before the operational decision was made to shut down the pipeline.

Industrial controllers, RTUs, and communication hardware sourced from global supply chains may contain firmware implants or silicon-level backdoors that cannot be detected by operational security testing. A compromised PLC does not need to be hacked over the network — its implant activates on a trigger. Stuxnet demonstrated that industrial hardware implants could cause catastrophic physical damage before detection. The threat has evolved significantly in the decade since.

Industrial control system communications — operational parameters, command sequences, topology data — are being archived for retroactive quantum decryption. This intelligence has strategic value: infrastructure topology, operational procedures, and system parameters provide a map for future physical attacks. The current encryption on ICS communications provides no protection against a quantum-capable adversary operating on a 5–10 year timeline.

Regulators worldwide — EU NIS2, German KRITIS, and equivalent frameworks across critical infrastructure sectors — are mandating a transition to post-quantum cryptography and verifiable command integrity. Operators who have not yet made that transition face both rising regulatory exposure and an architecture that is structurally unprepared for the current threat model. Compliance timelines are compressing; the technical gap is widening.