Powering cyber resilience: How a major power generator strengthened OT security with GE Vernova’s risk assessment

The challenge

In 2025, a major power generation company undertook a follow-up assessment to better understand its OT cybersecurity resilience after an initial review in 2022. While attending GE Vernova’s OTArmor training in Longmont, Colorado, the company learned about GE Vernova’s cybersecurity risk assessment services. Recognizing a growing need to baseline their security maturity against the IEC 62443 industry standard, the customer wanted to:

• Evaluate their existing cybersecurity posture.
• Identify vulnerabilities across operational systems.
• Justify a dedicated cybersecurity budget.
• Build a roadmap for long-term OT security improvements.

Their primary challenge was translating complex OT network data and fragmented controls into a clear, actionable security plan that both technical and business leaders could support.

The solutions

GE Vernova’s cybersecurity team conducted a two-phase assessment that combined technical evaluation with hands-on collaboration: first reviewing the customer’s network architecture, policies, and protections to establish a baseline, then deploying visibility sensors and conducting interviews to map traffic, access, and configurations. The process revealed vulnerabilities such as missing OT firewalls, shared credentials, open ports, weak authentication, outdated patches, limited visibility, and poor encryption. GE Vernova mitigated these risks through centralized asset management with real-time monitoring via Security Information and Event Management (SIEM), data diodes to separate IT and OT networks, and stronger user and password controls—fortifying the OT environment and securing long-term support for continued cybersecurity investment.

Following completion of the assessment, the customer approved additional remediation actions outlined in the report to further strengthen their cybersecurity posture. This is an excellent example of how the partnership between GE Vernova and one of our customers continues to increase the cyber protection of the control system, in a world where the risk will continue to grow and become more complex.