Hidden Cybersecurity Vulnerabilities in Today’s Data Centers

Hidden Cybersecurity Vulnerabilities in Today’s Data Centers

by Scott Cargill, Craig Duckworth, Dino Busalachi

Applied Sciences & Engineering Computing & Cybersecurity UComputing and Information TechnologyURComputer security
🎙 Scott Cargill, Craig Duckworth, Dino Busalachi 👥 192 📅 October 7, 2025 ⏱ 27 min 👁 18 📄 expert opinion 🧭 2026-08-16
Available in: English (current) Français

Keywords

OT securitydata centerBMSEPMSIT-OT convergence

Summary

In this episode of Industrial Cybersecurity Insider, hosts Craig Duckworth and Dino Busalachi are joined by Scott Cargill, a partner at BW Design Group, to discuss the often-overlooked cybersecurity vulnerabilities in data center operational technology (OT) infrastructure. They highlight that while data centers invest heavily in IT security, their building management systems (BMS) and electrical power monitoring systems (EPMS) are frequently left unprotected. Cargill shares his experience at a data center investment conference where, when asked about protecting physical assets, a panelist responded ‘I pray a lot,’ illustrating the lack of awareness. The conversation draws parallels between data centers and manufacturing plants, emphasizing that both rely on automation and control systems that are vulnerable to cyberattacks. They discuss the rapid expansion of data centers for AI workloads, which has outpaced OT security implementation, creating exploitable attack vectors. The panelists note that a compromise of cooling or power systems could cause millions in damage within minutes. They attribute the neglect to a focus on data rather than the supporting infrastructure, and to a disconnect between IT and OT teams. They suggest that OT security must be designed in from the start, not patched in later, and that managed services may be necessary due to resource constraints. The episode concludes with optimism that awareness is growing and that solutions will be integrated in the near future.

224 words

Critical Evaluation

Value of the Information & Strength of the Argument

The value of the information lies in its practical insights from an industry insider, highlighting a critical gap in data center security that is often ignored. The argumentation is based on anecdotal evidence and professional experience, which lends credibility but lacks empirical support. The panelists effectively argue that data centers are essentially manufacturing plants with high-value assets, and that the IT-OT convergence gap leaves them vulnerable. They provide a compelling narrative but do not offer concrete data or case studies to quantify the risk.

Scientific Rigor, Source Quality, Title Accuracy

The scientific rigor is moderate; the discussion is informed by professional experience but lacks citations to standards, research, or documented incidents. The sources cited are primarily LinkedIn profiles and company pages, which are not academic or authoritative. The title accurately reflects the content, focusing on cybersecurity vulnerabilities in data centers. The episode does not reference specific frameworks like IEC 62443 or NIST, which would enhance credibility. The lack of empirical evidence and reliance on personal anecdotes reduces the overall rigor.

179 words

Title / Content Match

The title accurately reflects the content, focusing on cybersecurity vulnerabilities in data centers, particularly in OT systems.

Quality & Reliability

6/10

The discussion is based on professional experience and anecdotal evidence from industry conferences, but lacks empirical data, specific case studies, or references to standards. The panelists are experienced in OT cybersecurity, but the claims about vulnerabilities are not backed by quantitative analysis or documented incidents.

Chapters

Cited Sources

Concurring Sources

  • SANS Institute: Securing Building Automation Systems — Supports the claim that BMS are often vulnerable and overlooked.

Dissenting Sources

Contribution & Novelties

The episode provides a unique perspective on data center security by focusing on OT systems, which are often overlooked in favor of IT security. It highlights the specific vulnerabilities in BMS and EPMS and draws parallels to manufacturing, offering a framework for addressing these gaps. The discussion emphasizes the need for OT security to be designed in from the start rather than retrofitted.

Pour aller plus loin :

  • IEC 62443 — International standards for industrial automation and control systems security, relevant to OT security in data centers.
  • NIST Cybersecurity Framework — Provides a policy framework for improving cybersecurity, applicable to OT environments.
  • Building Management System (BMS) — Overview of BMS and its role in facility management, relevant to the discussion.

120 words

Radar Profile

The radar profile shows moderate scores across all dimensions, indicating a balanced but not exceptional presentation. The content is informative but lacks depth in technical detail and empirical evidence, resulting in a moderate overall quality.

Reliability 5/10