Where Operational Technology Lives — A Map of the Verticals

OT is a useful umbrella, but an electric substation, a hospital ventilation system, and a packaging line have different jobs. Understanding the vertical means understanding the physical service, its operating constraints, and the consequences of losing it.

There is no single exhaustive global taxonomy of “OT verticals.” Industries overlap, organizations span several sectors, and local regulations use different categories. The groupings below are a practical learning map, not a regulatory classification or a claim that every system in each industry is OT.

For definitions and the relationship to business systems, start with IT and OT — Similar Technology, Different Consequences. This page focuses on where OT is used.

Energy: electricity, oil and gas, and nuclear

Electricity includes generation, substations, protection, distribution, distributed energy resources, and storage. Common OT functions include telemetry, protective relays, turbine or inverter controls, and supervisory control. Protection and electrical restoration require specialist engineering; a working server does not establish that it is appropriate to energize equipment.

Oil and gas extends from production through pipelines, terminals, refining, and distribution. Remote telemetry, compressors, pumping, metering, and process control create different dependencies across geographically distributed sites. Nuclear facilities add highly specific operational, safety, security, and regulatory requirements; generic industrial advice is insufficient.

Recovery question: which local protections, communications, utilities, and engineering checks must be available before an operational function can resume?

Water, wastewater, and dams

Treatment, pumping, storage, distribution, lift stations, and wastewater processing use instrumentation and controls to support physical services. Dams and water-control structures may combine gates, level monitoring, communications, and power-generation functions.

Stored volume or another buffer may allow a limited service interval during disruption, but that depends on the actual system. Water quality, hydraulic conditions, environmental requirements, and operator authorization matter as much as restoring screens.

Recovery question: can the team verify the physical condition and measurement quality, rather than merely reconnecting telemetry? The recovery explorer uses a fictional pumping-service example to introduce these questions without modeling real hydraulics.

Manufacturing: discrete, process, and hybrid

Discrete manufacturing produces countable items: automotive assemblies, electronics, machinery, and packaged goods. Robotics, motion control, machine vision, and interlocks may be central. Continuous processes such as refining or chemical production have different dynamics from a batch reactor or a production line that can pause between items.

Many sites are hybrid. A food or pharmaceutical facility might use batch processing upstream and discrete packaging downstream. Semiconductor manufacturing adds tightly controlled environmental conditions, specialized tools, and demanding quality requirements.

Recovery question: are the correct logic, recipes, tool configurations, quality checks, and upstream/downstream conditions available—not just the computer image?

Chemical, petrochemical, and pharmaceuticals

These environments can involve mixing, reaction, separation, temperature and pressure control, and carefully managed materials. Instrumentation, distributed control, analyzers, and independent protection layers may have distinct responsibilities.

In pharmaceutical and other regulated production, electronic records and quality decisions can be as important as restoring control. A technically successful restart may not authorize release of affected product.

Recovery question: what process state, material condition, quality evidence, and change approval must be reconciled after an interruption?

Food, agriculture, and cold chains

Irrigation, greenhouses, grain handling, processing, pasteurization, packaging, and refrigeration all contain OT use cases. Seasonal work, distributed locations, perishable materials, and limited technical staffing can shape recovery options.

Recovery question: how long can temperature, moisture, or another condition depart from its required range, and who decides whether material remains acceptable?

Transportation, logistics, and maritime

Rail signaling, traffic management, airport facilities, ports, conveyors, cranes, fuel systems, and warehouse automation support the movement of people and goods. Aviation, rail, and maritime environments each have specialized operating and safety requirements. A scheduling application alone is not automatically OT; its interfaces and operational consequences need examination.

Recovery question: what local coordination, communications, movement restrictions, and validation are necessary before the next operational action?

Buildings and campuses

HVAC, building management, lighting, elevators, access control, fire-related systems, and environmental monitoring appear in offices, hotels, schools, stadiums, and public facilities. Responsibility may be distributed among facilities teams, landlords, contractors, IT, and specialist vendors.

Recovery question: does restoring the building-management server restore the actual environmental or access function, and what independent local systems still work?

Healthcare and laboratories

Hospitals rely on building and utility functions such as ventilation, electrical distribution, cooling, and medical-gas infrastructure. Laboratories may depend on controlled environments and cold storage. Connected clinical devices have additional medical-device, patient-safety, and regulatory considerations; they should not be treated as interchangeable with generic industrial controllers.

Recovery question: which physical support services and clinical coordination are required before a room, instrument, or function can be used again?

Mining, metals, and materials

Conveyance, extraction equipment, ventilation, crushing, smelting, and materials processing bring together heavy equipment, remote sites, energy dependencies, and environmental monitoring.

Recovery question: are personnel, ventilation, material movement, and equipment state accounted for before restarting an automated sequence?

Communications, data centers, and other infrastructure

Telecommunications and data centers have both information services and physical infrastructure. Cooling, power distribution, generators, batteries, and facility controls are OT-related functions even when the business primarily delivers digital services. Aerospace and defense production, emergency-service facilities, and research campuses also contain industrial or building-control functions.

Recovery question: can the physical support infrastructure sustain the intended service load through the recovery sequence?

How this relates to CISA's 16 sectors

CISA's critical-infrastructure sectors describe a U.S. national infrastructure framework. They are not sixteen kinds of OT. A sector contains IT, OT, people, physical assets, and organizational functions; the same OT technology can appear in several sectors.

The examples below show possible OT touchpoints, not formal determinations that every listed system belongs to a particular regulatory scope.

A reusable way to learn a new vertical

Ask what physical service is being delivered, which variables matter, how quickly the process can change, and what failure means. Then identify the operating roles, maintenance constraints, independent protections, and evidence required to return the function to service.

That approach transfers between verticals more reliably than memorizing a vendor list. Use the observation worksheet to build a first process picture, then add the sector-specific expertise and requirements the site needs.

Further reading

• NIST SP 800-82 Rev. 3: a broad OT definition and examples including industrial, building, transportation, and physical monitoring systems.
• CISA Critical Infrastructure Sectors: the official U.S. sector framework and links to sector-specific resources.
• CISA Industrial Control Systems: industrial guidance and advisories to explore alongside the process context.