Operational Technology (OT) and Information Technology (IT) systems were traditionally kept separate, leading to different cybersecurity approaches and challenges. With the increasing convergence of IT and OT systems, there is a need for a unified cybersecurity approach that addresses the unique requirements of both environments. Existing cybersecurity solutions often fail to address the specific needs of OT systems, leaving them vulnerable to cyber threats.
The project addresses the escalating cybersecurity risks and vulnerabilities that arise from the increasing integration of Operational Technology (OT) systems with Information Technology (IT) systems. As OT and IT systems converge, there is a pressing need for a secure and observable digital infrastructure capable of effectively assessing, mitigating, and managing cybersecurity risks.
The anticipated outcome is the establishment of a resilient cybersecurity framework for converged IT and OT systems that improves the visibility of data across the entire technology stack—from physical devices to cloud applications. The mining and resources sector will be utilised as the use case area to demonstrate the improvements. By enhancing the observability of data over diverse industrial protocols, the project will bolster the security and resilience of critical infrastructure and industrial control systems, enabling seamless integration of cybersecurity measures throughout the solution.
Aim
The primary aim of this research is to design, implement, and evaluate a converged Information Technology (IT) and Operational Technology (OT) architecture based on the Open Process Automation (OPA) Standard that enhances cybersecurity, system observability, and operational resilience within industrial environments. The research seeks to develop a secure and interoperable framework capable of providing end-to-end visibility across the technology stack—from field devices and industrial control systems to enterprise and cloud-based applications—while addressing the unique cybersecurity challenges associated with IT/OT convergence.
Objectives
- Investigate the cybersecurity challenges and risks associated with IT/OT convergence in industrial environments, with particular emphasis on critical infrastructure and the mining and resources sector.
- Analyse the applicability of the Open Process Automation (OPA) Standard for supporting secure, interoperable, and vendor-neutral IT/OT integration architectures.
- Design a converged IT/OT reference architecture that incorporates cybersecurity-by-design principles, observability capabilities, and secure communication mechanisms across diverse industrial protocols and systems.
- Develop and implement a proof-of-concept platform demonstrating the proposed architecture and its ability to integrate OT devices, control systems, enterprise applications, and cloud services within a unified security framework.
- Establish a cybersecurity observability framework capable of collecting, correlating, and analysing operational and security-related data across the entire technology stack to improve threat detection, situational awareness, and incident response.
- Evaluate the effectiveness of the proposed architecture through use-case scenarios within the mining and resources sector, assessing improvements in security visibility, resilience, interoperability, and risk management.
- Develop recommendations and implementation guidelines for organisations seeking to adopt Open Process Automation technologies to achieve secure and scalable IT/OT convergence.
Significance
The increasing integration of Information Technology (IT) and Operational Technology (OT) systems is transforming industrial operations and enabling greater connectivity, automation, and data-driven decision-making. However, this convergence also expands the cyberattack surface and introduces new security challenges that traditional IT-centric or OT-centric cybersecurity approaches are unable to address effectively.
This research addresses a critical gap in current industrial cybersecurity practices by developing a converged IT/OT architecture founded on the Open Process Automation (OPA) Standard. By leveraging open, interoperable, and vendor-neutral technologies, the proposed framework aims to facilitate secure integration between industrial control systems, enterprise networks, and cloud-based services while maintaining operational reliability and safety.
A key contribution of the research is the development of enhanced observability capabilities across heterogeneous industrial environments. Improved visibility of operational and cybersecurity data will enable organisations to better identify vulnerabilities, detect cyber threats, assess risks, and respond to incidents in real time. This capability is particularly important for critical infrastructure sectors where cyber disruptions can have significant operational, economic, environmental, and safety consequences.
The research will generate new knowledge on the practical implementation of Open Process Automation principles for cybersecurity and resilience, providing an evidence-based framework that can be adopted across industrial sectors. Through validation in the mining and resources industry, the project will demonstrate how secure IT/OT convergence can strengthen the protection of industrial assets, improve operational resilience, and support the digital transformation of critical infrastructure.
The outcomes of this research have the potential to benefit industry, government, and critical infrastructure operators by providing scalable approaches for managing cybersecurity risks in increasingly connected industrial environments. Furthermore, the project aligns with national priorities relating to critical infrastructure protection, cyber resilience, industrial innovation, and secure digital transformation.
Ideal Candidate
The ideal PhD candidate will have a strong background in Electrical Engineering, Control Systems, Industrial Automation, or a closely related discipline. Applicants should possess knowledge of industrial control systems, programmable logic controllers (PLCs), SCADA systems, industrial communication protocols, and automation architectures. Experience or interest in Operational Technology (OT), Information Technology (IT) networking, cybersecurity, and Industry 4.0 technologies will be highly regarded. Familiarity with system integration, data analytics, cloud technologies, and open standards is desirable. The candidate should demonstrate strong analytical and problem-solving skills, programming capability, and the ability to conduct independent research while effectively collaborating with industry and academic partners. Additionally, the applicants should meet the eligibility criteria for entry into a PhD program at Curtin University.
This project is open to Domestic applicants only.
Internship
Through this project you will also have an internship opportunity. The intelligent systems and industrial Automation lab have close collaboration with Schneider Electric, Yokogawa, Cisco, Optus and other companies such as Rio Tinto. The research team and the selected PhD candidate will have opportunities to work as an intern in one of these companies depending on the progress of their research.
Scholarship
If you are identified as the preferred candidate for this project, you may be considered for an RTP scholarship.
Enquires and How to Apply
For enquires about this opportunity contact Dr Siavash Khaksar at Siavash.Khaksar@curtin.edu.au
To formally apply submit an Expression of Interest to Dr Siavash Khaksar during the Central Scholarship round (July 1st – July 31st 2026)