Global Cyber Agencies Issue AI Security Guidance for Critical Infrastructure OT

Global cyber agencies have published joint guidance on the safe and secure use of artificial intelligence in operational technology, with the document published on the website of CISA. The 25-page guidance, dated 4 December 2025, is authored by government organisations in the United States, the United Kingdom, Canada, Germany, the Netherlands, and New Zealand, and outlines four principles for securely integrating AI into OT, including in critical infrastructure such as ICS, SCADA, DCS and HMI systems.

The article notes practical use cases where AI can analyse data from field devices like sensors and actuators, and be applied to PLCs and RTUs for tasks such as anomaly detection and load balancing, with potential benefits in predicting maintenance and aiding operator decision‑making.

It emphasises addressing data security and the responsibilities of AI makers, OT vendors, and managed service providers, plus governance, testing, regulatory considerations, and the need for robust oversight and failsafe practices, according to the principles for the secure integration of artificial intelligence in operational technology.