Workspace

London OT/IT Resilience Architecture

Walk through London Grid Distribution's operational and information technology resilience architecture, mapping OT/IT boundaries, failover paths, and single points of failure.

Phase D, Technology ArchitectureDerived from TOGAF

OT, IT and Telecom resilience: two stacks depend on one shared foundation

Operational technology and information technology both rest on the telecom layer. Each stack names what it needs, what it serves, and how it fails when the shared dependency breaks.

Resilience is a function of the dependency chain, not of any single stack. The map names the chain so the failure mode is visible: when telecom drops, both the operational and information stacks above it go with it.

OT, IT and Telecom resilience: two stacks depend on one shared foundation A dependency map with two consumer columns resting on one shared foundation. The operational technology column needs telecom links, time sync and engineering tools; serves field operations and switching; and fails when telecom drops or IT identity locks up. The information technology column needs telecom, power, identity and storage; serves billing, reporting and ERP; and fails when the network drops or storage fills. Both columns have a depends-on arrow pointing down to a wide Telecom foundation, the shared dependency. Telecom needs power, fibre routes and microwave links; carries OT and IT; and fails on a fibre cut, radio outage or power loss. When telecom goes, both stacks fail with it. Consumer stacks Needs and servesFailure mode Operational technologyOTNeedsTelecom links, time sync, engineering toolsServesField operations, control room, switchingFails whenTelecom drops or IT identity locks upInformation technologyITNeedsTelecom, power, identity, storageServesBilling, reporting, customer care, ERPFails whenNetwork drops, auth fails, storage fills depends ondepends on TelecomShared dependencyNeedsPower, fibre routes,microwave linksServesCarries OT and IT; both runon itFails whenFibre cut, radio outage, PSUloss The shared layer sets the ceiling.When telecom drops, both the operational and information stacks above it lose their links and fail with it.