--- title: Securing legacy OT systems without disrupting operations description: Manufacturers have become major targets for cyberattacks in recent years, largely due to the vulnerability of operational technology (OT) systems that run on outdated platforms and are not protected with the same cybersecurity and data protection measures as IT systems. Discover how manufacturers can overcome this challenge as OT and IT converge. canonical_url: https://www.acronis.com/en/blog/posts/securing-legacy-ot-systems-without-disrupting-operations/ locale: en last_updated: 2026-10-27 --- [Acronis Blog](https://www.acronis.com/en/blog/) # Securing legacy OT systems without disrupting operations Manufacturers have become major targets for cyberattacks in recent years, largely due to the vulnerability of operational technology (OT) systems that run on outdated platforms and are not protected with the same cybersecurity and data protection measures as IT systems. Discover how manufacturers can overcome this challenge as OT and IT converge. [Try now](https://www.acronis.com/en/products/cyber-protect-ot/trial/) [![Image 2: Lee Pender](https://staticfiles.acronis.com/images/content/96b4b6d9ceee3c624b79f42543d1d633.png)](https://www.acronis.com/en/blog/authors/lee-pender/ "Lee Pender") [Lee Pender,](https://www.acronis.com/en/blog/authors/lee-pender/)Senior Content Marketing Manager 5 min read Last updated 27 February 2026 Other languages available:[Deutsch](https://www.acronis.com/de/blog/posts/securing-legacy-ot-systems-without-disrupting-operations/) [Español](https://www.acronis.com/es/blog/posts/securing-legacy-ot-systems-without-disrupting-operations/) [Français](https://www.acronis.com/fr/blog/posts/securing-legacy-ot-systems-without-disrupting-operations/) [Italiano](https://www.acronis.com/it/blog/posts/securing-legacy-ot-systems-without-disrupting-operations/) [日本語](https://www.acronis.com/ja/blog/posts/securing-legacy-ot-systems-without-disrupting-operations/) [Português](https://www.acronis.com/pt/blog/posts/securing-legacy-ot-systems-without-disrupting-operations/) Manufacturers have become major targets for cyberattacks in recent years, largely due to the vulnerability of operational technology (OT) systems that run on outdated platforms and are not protected with the same cybersecurity and data protection measures as IT systems. A 2024 report by Statista revealed that [more than a quarter of global cyberattacks](https://www.statista.com/statistics/1315805/cyber-attacks-top-industries-worldwide/) in 2023 targeted manufacturers, the largest percentage of any field. OT and industrial control systems (ICS) absolutely cannot go down. Any downtime can cost a manufacturer severely. But OT systems often run on platforms that the rest of the computing world has left behind. For instance, Windows XP, frequently found in OT environments, is nearly a quarter century old; Microsoft placed it in end-of-support and stopped issuing bug fixes and security patches for it in 2009. Operating systems that old usually can’t run modern cybersecurity software. [![Image 3: Reliable backup and recovery for operational technology (OT) environments](https://staticfiles.acronis.com/images/content/0c00509cc844e8cab5e56f31c35286a8.png) Demo webinar Reliable backup and recovery for operational technology (OT) environments Register now](https://acronis.events/event/reliable-backup-and-recovery-for-manufacturing-environments-nam/?utm_source=blog&utm_medium=content&utm_campaign=fy26-q1-OT-demo&utm_content=cta_button) ## IT moves in on OT’s territory IT departments regularly update security software and apply vendor-supplied patches to applications so as to close known vulnerabilities, often using scheduled downtime. Many embrace IT as a service, effectively outsourcing their IT operations to a managed service provider (MSP). OT managers can’t do any of that, at least not easily. That’s why, in many manufacturing organizations, OT and IT still run separately. OT systems are commonly “air gapped” — disallowing connections to external networks, including the enterprise intranet — so that a successful cyberattack on IT won’t affect OT and halt production systems. However, that practice is changing as organizations seek to exploit the advantages of Manufacturing 4.0 (a.k.a. Industry 4.0). This digital transformation model more closely integrates IT and OT and enables more connections to external networks in order to take advantage of new technologies like the Industrial Internet of Things (IIoT) and cloud-based data analytics collected by OT sensors. In recent years, a growing number of chief information security officers (CISOs), who once dealt exclusively with IT, have begun to assume responsibility for securing OT operations as well. In one survey, 95% of respondents [said CISOs would be involved](https://www.statista.com/statistics/1419018/ciso-responsibility-for-operational-technology-cyber-security/#:~:text=According%20to%20a,percent%20in%202022.) in OT cybersecurity decision making, up from 88% the year before. ## IT and OT are integrated but not the same The problem is that IT and OT aren’t the same and don’t use the same processes or technologies. Manufacturers can plan more downtime for IT systems than they can for OT systems, which are essential for meeting production quotas. The high cost of OT downtime makes securing OT systems a major challenge. Security updates and maintenance for OT can be difficult to execute because they usually require more downtime than most manufacturers can afford. In a 2024 survey by Statista, manufacturing executives said [mandatory uptime was the biggest hurdle](https://www.statista.com/statistics/1469297/obstacles-to-reducing-control-system-cybersecurity-attacks/#:~:text=In%20a%202024,system%20attack%20surface.) to reducing cyberattacks on control systems. There are other major challenges. Aging OT infrastructure is difficult and sometimes impossible to update. In many cases, vendors long ago stopped producing updates for applications and platforms that are still at the heart of OT manufacturing systems. Upgrading manufacturing environments to newer technology runs the risk of breaking or crimping the functionality of OT software, so manufacturers avoid hardware and OS updates in the interest of stability. Often, software goes unpatched and isn’t adequately protected. Beyond that, OT locations — manufacturing plants, oil refineries, power plants, mining operations, etc. — cannot justify full-time IT staff on-site, but are costly and time-consuming to dispatch IT personnel to in the event of an OT system outage. ## How manufacturers can secure legacy OT systems The dilemma is difficult but not impossible to solve. There are best practices manufacturers can adopt to safeguard OT systems. ### Network segmentation For starters, network segmentation can be deployed to limit access to critical assets. By isolating sensitive OT systems, businesses can reduce the risk of unauthorized access and lateral movement of threats from IT to OT. Segmentation doesn’t necessarily break the integration of IT and OT, but it does enable managers to more effectively control it. ### Multifactor authentication Enforcing multifactor authentication (MFA) for all user accounts adds an extra layer of security by requiring more than one method of authentication to verify the user's identity. MFA makes it much harder for unauthorized users to gain access to systems. ### Zero trust security The zero trust security model is gaining traction in OT environments. Zero trust assumes that no user or device is inherently trustworthy. Every entry to an OT system has to pass a security test. Continuous verification and authentication significantly enhance security, especially as IT and OT convergence opens up more attack vectors into OT systems. ### AI-driven threat monitoring Some modern technologies can play a role in securing legacy systems. For example, AI-driven monitoring continuously analyzes system behavior and identifies anomalies. It can then take steps to stop or significantly mitigate damage from cyberattacks. ### Reliable backup and rapid recovery Perhaps most importantly, OT systems managers need to be able to recover information quickly after an incident and get operations up and running again as rapidly as possible. Effective backup and recovery are absolutely essential. ## Acronis Cyber Protect enables manufacturers to secure legacy OT environments Acronis Cyber Protect for Operational Technology delivers capabilities that enable organizations to [ensure manufacturing uptime](https://www.acronis.com/en-us/industries/backup/manufacturing/). The solution delivers cybersecurity essentials, including MFA and threat monitoring with AI. The bottom line is that Acronis Cyber Protect delivers an IT level of data protection for OT systems without the downtime associated with IT security. It can protect OT environments whether they are integrated with IT or air gapped. Some key features for OT environments include: **Universal Restore**: This feature enables manufacturers to back up and recover systems, even if they’re running older, unsupported operating systems. With Universal Restore, manufacturers can restore legacy applications to new hardware with the necessary drivers installed. The result is a massive reduction in downtime. **One-Click Recovery**: This unique feature enables local non-IT staff to quickly restore OT systems that have failed or been compromised by malware. Again, manufacturers can reduce downtime and associated costs and get production systems back up and running quickly after an incident. **Backup without downtime**: This capability is critical. Acronis Cyber Protect conducts backups without taking an OT system offline or rebooting it. As such, critical security processes do not disrupt production. This feature addresses the essential dilemma of balancing data protection with uptime. With Acronis Cyber Protect, manufacturers can have both. ## Legacy OT systems aren’t going away, and they don’t have to Manufacturers will likely run legacy OT systems for years to come. Securing them requires specialized strategies to maintain operational integrity while minimizing the risk of downtime and cyberthreats. By implementing some best practices and embracing the OT-specific capabilities in Acronis Cyber Protect, manufacturers can effectively protect their critical infrastructure and ensure continuous operations. [![Image 4: Discover the benefits of Acronis Cyber Protect for Operational Technology (OT)](https://staticfiles.acronis.com/images/content/2c71fe07f52a46db4ea61ce055367d11.png) Solution brief Discover the benefits of Acronis Cyber Protect for Operational Technology (OT) Read the solution brief](https://www.acronis.com/en-us/resource-center/resource/preserving-uptime-in-operational-technology-ot-environments/) [Corporate cybersecurity](https://www.acronis.com/en/blog/tags/corporate-cybersecurity/) [Cyber protection for businesses](https://www.acronis.com/en/blog/tags/cyber-protection-for-business/) [Disaster recovery](https://www.acronis.com/en/blog/tags/disaster-recovery/) [Data loss prevention](https://www.acronis.com/en/blog/tags/data-loss-prevention/) [Operational Technology (OT)](https://www.acronis.com/en/blog/tags/operational-technology/) ## Written by ![Image 5: Lee Pender](https://staticfiles.acronis.com/images/content/96b4b6d9ceee3c624b79f42543d1d633.png) Lee Pender Senior Content Marketing Manager Lee was a journalist in the technology industry for 15 years, writing for and managing publications that served both IT and partner audiences. His experience as a corporate content creator includes tenures with an MSP and a provider of tax-compliance services. He writes about a variety of topics for Acronis, including cybersecurity trends, MSP management, emerging technologies and product updates. [Previous post](https://www.acronis.com/en/blog/posts/acronis-tops-combined-analysis-of-three-canalys-research-reports/) [Acronis tops combined analysis of three Canalys research reports](https://www.acronis.com/en/blog/posts/acronis-tops-combined-analysis-of-three-canalys-research-reports/) [Next post](https://www.acronis.com/en/blog/posts/introducing-acronis-email-archiving-for-microsoft-365/) [Introducing Acronis Email Archiving for Microsoft 365](https://www.acronis.com/en/blog/posts/introducing-acronis-email-archiving-for-microsoft-365/) About Acronis Acronis is a leader in AI-native cyber protection, unifying data protection, cybersecurity, IT operations and hybrid infrastructure to deliver business continuity, security and compliance with less cost and complexity. More than 21,000 service providers trust Acronis to protect over 750,000 businesses in 150 countries. Acronis is headquartered in Schaffhausen, Switzerland. [Add as a preferred source on Google](https://google.com/preferences/source?q=acronis.com) ## Related stories Want to learn more? Read the latest stories featuring this solution on our blog. [Acronis Blog](https://www.acronis.com/en/blog/) ![Image 6: Acronis Cloud Storage adds a recovery warranty](https://staticfiles.acronis.com/images/blog-card/6a693ef2012c6324f65b0b452c11b3d6.png) [Acronis Cloud Storage adds a recovery warranty](https://www.acronis.com/en/blog/posts/acronis-cloud-storage-adds-a-recovery-warranty/) Secure, scalable cloud storage with a recovery commitment backed by Acronis. The Anti-Ransomware Recovery Warranty that helps MSPs make recovery a visible part of the service they deliver. **October 12, 2026**4 min read ![Image 7: Acronis Cyber Protect v17: Improving cyber resilience across people, data and infrastructure](https://staticfiles.acronis.com/images/blog-card/c2467c28c0278609eb3560cb2a8a4d53.png) [Acronis Cyber Protect v17: Improving cyber resilience across people, data and infrastructure](https://www.acronis.com/en/blog/posts/acronis-cyber-protect-v17-improving-cyber-resilience-across-people-data-and-infrastructure/) Acronis Cyber Protect v17 Q3 2026 expands integrated cyber protection with new capabilities that strengthen security awareness, improve backup operations and extend protection across more virtual environments. The result is stronger cyber resilience, simplified operations and broader protection delivered through a single platform. **October 05, 2026**4 min read ![Image 8: SCADA backup and recovery: protecting PC-based supervisory control systems](https://staticfiles.acronis.com/images/blog-card/541eac32c82d84a5616d868ed24a68e0.png) [SCADA backup and recovery: protecting PC-based supervisory control systems](https://www.acronis.com/en/blog/posts/scada-backup-and-recovery/) SCADA backup differs from IT backup. Learn what to capture, how to plan recovery, and how Acronis Cyber Protect for OT supports PC-based OT systems. **September 11, 2026**8 min read