Cybersecurity & Energy Sector: Knowledge Access Is a Sovereignty Issue

In late December 2025, a major cyberattack targeted key assets in Poland’s energy sector: more than 30 wind and solar farms, a combined heat and power plant, and several industrial systems had their operational controls compromised. The attack targeted both IT (Information Technology) and OT (Operational Technology) systems simultaneously, resulting in the destruction of data on supervisory interfaces and the loss of visibility and control over critical equipment. The incident underscores both the growing sophistication of cyber threats and the persistent vulnerabilities of industrial systems within critical infrastructure. 

This attack is a stark reminder that energy infrastructure central to national sovereignty has become a prime target for cyberattacks. 

In this context, the separation between IT and OT remains an essential barrier against intrusions. But this firewall, while protective, also fragments operational knowledge. As a result, controlled access to technical, regulatory, and operational knowledge has become a major strategic issue for the energy sector, one with direct implications for sovereignty and resilience. 

The Problem: An IT/OT Divide That Fragments Critical Knowledge 

In the energy sector, the separation between IT and OT has a long history of justification. 

• IT: ERP systems, analytics platforms, collaboration tools, document management. 
• OT: SCADA, DCS, and industrial control systems that manage physical assets. 

The “air gap” or strict segmentation model is designed to protect critical systems from external intrusions. This separation is essential to prevent a cyberattack from spreading to sensitive industrial equipment. 

But this protection comes with a significant side effect: structural fragmentation of knowledge. 

The IT/OT divide indispensable for shielding critical systems (SCADA, DCS) from cyber threats creates a knowledge fragmentation that: 

• Prevents quick access to operational data from the IT side (historical records, root cause analyses, procedures). 
• Complicates knowledge sharing between OT and support functions (engineering, HSE, quality). 
• Weakens energy sovereignty (dependence on foreign solutions, risk of uncontrolled third-party access). 
• Limits digital transformation (analytics and AI require combined OT + IT data). 

Cybersecurity protects systems. But when it blocks controlled access to critical knowledge, it can slow operational decision-making at the very moment when every minute counts. 

Root Causes: Cybersecurity Design, Technological Complexity, and External Dependencies 

A Cybersecurity Model Built Around Isolation 

As attacks on critical infrastructure have multiplied, the response has been to prioritize isolation: 

• Air gaps or strong network segmentation. 
• Strict restrictions on data flows between IT and OT. 
• Limited access to operational data. 

This approach is necessary. But it has often been implemented without a cross-functional knowledge architecture. The result: an information air gap that slows operations and complicates decision-making. 

The central question becomes: Does air gap = maximum security but operational paralysis? Is there a middle ground? 

A Proliferation of Specialized Systems 

SCADA, DCS, EAM, ERP, GIS, OMS, HSE systems, document management tools each addresses a specific need, but none provides a unified view of the operational context. 

During an incident on a critical asset, an engineer may need to consult: 

• SCADA parameters. 
• Past work orders. 
• Reports from similar incidents. 
• Procedures validated at the time of the event. 
• Applicable regulatory guidance. 

Without a unified knowledge layer, this information remains siloed and hard to reach. 

Growing Digital Sovereignty Risks 

Energy infrastructure represents national strategic assets. Yet: 

• Some data is hosted on clouds outside national jurisdiction. 
• Certain analytics solutions rely on foreign technology. 
• Information flows may depend on third-party actors. 

The sovereignty question is clear: if critical operational data is not fully controlled domestically, what are the risks? Sovereignty is no longer just about energy production  it also means controlling the knowledge that enables infrastructure to be operated and secured. 

The Consequences: Operational Slowdowns, Regulatory Risk, and Strategic Vulnerability 

Slower Incident Response 

During a network incident, an unplanned shutdown, or equipment malfunction: 

• Finding the right information can take longer than the technical analysis itself. 
• Previous root cause analyses are not easily retrievable. 
• Lessons learned remain local and rarely shared. 

Every minute lost increases MTTR (Mean Time to Repair) and raises overall risk exposure. 

Audit and Compliance Challenges 

Regulators require: 

• Decision traceability. 
• Procedure versioning. 
• Justification of corrective actions. 
• Evidence preservation. 

When knowledge is fragmented across IT and OT environments, retroactive reconstruction becomes complex and time-consuming. Compliance becomes reactive rather than built-in. 

A Brake on AI and Digital Transformation 

Analytics and AI initiatives require combined OT and IT data. But without a governed architecture: 

• Data remains inaccessible. 
• AI projects are constrained or outsourced. 
• The risk of data leakage or exposure increases. 

How do you share OT knowledge without compromising security? This is one of the sector’s most pressing challenges. 

The Solution: A Knowledge Management Architecture Built for Critical IT/OT Environments 

The answer lies neither in fully opening OT systems nor in isolating them entirely. It requires a knowledge management architecture designed specifically for critical infrastructure. 

A Cross-Functional Knowledge Layer 

A structured knowledge management approach  such as Sinequa for Energy & Utilities  makes it possible to: 

• Connect existing systems without replacing them. 
• Index information without moving sensitive data. 
• Respect existing IT/OT access controls. 
• Provide a secure, governed single point of access to knowledge. 

This cross-functional layer does not eliminate the IT/OT boundary. It respects it  while making knowledge actionable across the organization. 

Security and Access Are Not Mutually Exclusive 

The right architecture enables: 

• Granular access rights management. 
• Full audit trails for all knowledge consultations. 
• Logical separation between sensitive raw data and indexed metadata. 
• Compliance with regulatory requirements. 

Cybersecurity is not simply about blocking data flows  it’s about ensuring controlled, governed, and auditable access to critical knowledge. 

Concrete Use Cases in the Energy Sector 

Incident Response 

Immediate access to validated procedures, similar past incidents, and historical root cause analyses. 

HSE Investigations 

Cross-referencing field reports, regulatory documents, and asset history in one place. 

Cross-Site Knowledge Sharing 

Secure sharing of lessons learned across plants or regional networks. 

Secure Field Access 

Delivering validated, up-to-date information to technicians in the field  without exposing OT systems. 

Knowledge as a Pillar of Sovereignty and Resilience 

In the energy sector, resilience depends on: 

• Continuity of operations. 
• Speed of decision-making. 
• The ability to capitalize on operational experience. 
• Control over critical data. 

Knowledge management enables organizations to: 

• Protect operational memory against workforce turnover and outsourcing. 
• Reduce dependence on individual experts. 
• Maintain control over strategic information flows. 
• Support secure digital transformation. 

Energy sovereignty is no longer just about producing or transmitting power. It now includes the governance and control of the knowledge that makes these infrastructures operable and secure. 

Conclusion 

The IT/OT separation is indispensable for protecting critical infrastructure. But without structured knowledge management, it can create a fragmentation that slows operations, weakens compliance, and limits digital transformation. 

The goal is not to pit security against accessibility. It is to design an architecture where technical, operational, and regulatory knowledge is accessible, controlled, and governed  without compromising cybersecurity. 

In an era of escalating cyber threats and heightened sovereignty requirements, knowledge management has become a strategic pillar of energy infrastructure resilience. It turns dispersed data into secure decision-making capacity  in service of continuity, compliance, and national security.