Night-time cut-overs and identity segmentation moved 42 OT-critical apps to Azure, killed 97 lateral paths, and finished three weeks early - without disrupting telemetry from 15 million smart meters.
Azure AD + Conditional Access, micro-VNet mesh, JIT admin (15 min), nightly cut-overs (01:00-05:00 UTC) and monthly purple-team drills (MTTD 29 d → 6 h).
Key Results
“Advsec erased attack paths that haunted us for years.” - OT Security Director
