{"id":9481,"date":"2026-09-09T11:26:42","date_gmt":"2026-09-09T09:26:42","guid":{"rendered":"https:\/\/data-talk.eu\/ot-it-convergence-secure-data-flow\/"},"modified":"2026-09-14T11:16:01","modified_gmt":"2026-09-14T09:16:01","slug":"ot-it-convergence-secure-data-flow","status":"publish","type":"post","link":"https:\/\/data-talk.eu\/cs\/ot-it-convergence-secure-data-flow\/","title":{"rendered":"OT\/IT Konvergence: Jak bezpe\u010dn\u011b propojit data z v\u00fdroby s IT?"},"content":{"rendered":"\n

Bezpe\u010dn\u00e9 prost\u0159ed\u00ed<\/h2>\n\n\n\n

V\u00fdrobn\u00ed firmy dnes st\u00e1le v\u00edce pot\u0159ebuj\u00ed dostat data z v\u00fdroby tam, kde s nimi mohou d\u00e1l pracovat \u2013 do analytick\u00fdch n\u00e1stroj\u016f, ERP syst\u00e9m\u016f nebo cloudu. S t\u00edm, jak se sv\u011bt OT a IT st\u00e1le v\u00edce propojuje, ale roste i v\u00fdzva, jak udr\u017eet pr\u016fmyslov\u00e9 s\u00edt\u011b bezpe\u010dn\u00e9 a z\u00e1rove\u0148 zajistit snadn\u00fd p\u0159\u00edstup k dat\u016fm.<\/p>\n\n\n\n

Jak tedy propojit v\u00fdrobn\u00ed technologie s podnikov\u00fdmi syst\u00e9my, ani\u017e bychom obch\u00e1zeli bezpe\u010dnostn\u00ed pravidla nebo vystavovali citliv\u00e9 OT syst\u00e9my zbyte\u010dn\u00e9mu riziku? V tomto \u010dl\u00e1nku se pod\u00edv\u00e1me na to, pro\u010d je d\u016fle\u017eit\u00e9 zachovat principy Purdue modelu a jak m\u016f\u017ee spr\u00e1vn\u011b navr\u017een\u00e1 gateway zajistit bezpe\u010dn\u00fd a \u0159\u00edzen\u00fd tok dat mezi OT a IT.<\/p>\n\n\n\n

1. Purdue model a pro\u010d je st\u00e1le d\u016fle\u017eit\u00fd<\/h2>\n\n\n\n

Purdue Enterprise Reference Architecture (PERA) a jej\u00ed adaptace v ISA-95 a ISA\/IEC 62443 jsou ji\u017e v\u00edce ne\u017e dv\u011b desetilet\u00ed de facto referen\u010dn\u00edm modelem pro segmentaci pr\u016fmyslov\u00fdch s\u00edt\u00ed. Rozd\u011bluje pr\u016fmyslov\u00e9 prost\u0159ed\u00ed do jednotliv\u00fdch \u00farovn\u00ed \u2013 od Level 0 (fyzick\u00fd proces) a Level 1 (z\u00e1kladn\u00ed \u0159\u00edzen\u00ed, PLC\/RTU), p\u0159es Level 2 (dohledov\u00e9 \u0159\u00edzen\u00ed, SCADA\/HMI) a Level 3 (v\u00fdrobn\u00ed operace, MES\/historian), a\u017e po demilitarizovanou z\u00f3nu (DMZ) a Levels 4\u20135 (podnikov\u00e9 IT, ERP a dal\u0161\u00ed business syst\u00e9my).<\/p>\n\n\n\n

\"Purdue<\/figure><\/div>\n\n\n\n

Hlavn\u00ed bezpe\u010dnostn\u00ed p\u0159\u00ednos tohoto modelu nespo\u010d\u00edv\u00e1 pouze v rozd\u011blen\u00ed do jednotliv\u00fdch vrstev, ale p\u0159edev\u0161\u00edm v \u201evynucen\u00e9 hranici\u201c<\/strong> mezi OT (Levels 0\u20133) a IT (Levels 4\u20135). Syst\u00e9my na \u0159\u00eddic\u00ed vrstv\u011b by nem\u011bly nikdy komunikovat p\u0159\u00edmo s podnikovou s\u00edt\u00ed bez pr\u016fchodu \u0159\u00edzenou a monitorovanou DMZ.<\/p>\n\n\n\n

ISA\/IEC 62443, hlavn\u00ed standard pro kybernetickou bezpe\u010dnost pr\u016fmyslov\u00fdch automatiza\u010dn\u00edch a \u0159\u00eddic\u00edch syst\u00e9m\u016f (IACS), tuto hranici formalizuje pomoc\u00ed konceptu bezpe\u010dnostn\u00edch z\u00f3n a komunika\u010dn\u00edch cest (conduits). Ka\u017ed\u00e1 datov\u00e1 cesta p\u0159ekra\u010duj\u00edc\u00ed hranici z\u00f3ny by m\u011bla b\u00fdt jasn\u011b identifikov\u00e1na, vyhodnocena z hlediska rizik a \u0159\u00edzena.<\/p>\n\n\n\n

Praktickou v\u00fdzvou je, \u017ee iniciativy Industry 4.0 \u2013 prediktivn\u00ed \u00fadr\u017eba, cloudov\u00e9 historiza\u010dn\u00ed syst\u00e9my, integrace v\u00fdrobn\u00edch dat s ERP nebo vzd\u00e1len\u00fd monitoring za\u0159\u00edzen\u00ed \u2013 vy\u017eaduj\u00ed pr\u00e1v\u011b takov\u00fd tok dat z Levels 0\u20133 do Levels 4\u20135, kter\u00fd m\u011bl Purdue model p\u016fvodn\u011b kontrolovat, nikoli eliminovat. Tlak na konvergenci je re\u00e1ln\u00fd a nebude mizet. Kl\u00ed\u010dovou ot\u00e1zkou proto je, jak tento po\u017eadavek naplnit, ani\u017e bychom oslabili hranici, kterou maj\u00ed PERA a ISA\/IEC 62443 chr\u00e1nit.<\/strong><\/p>\n\n\n\n

2. Pro\u010d p\u0159\u00edm\u00e9 propojen\u00ed nen\u00ed spr\u00e1vn\u00fdm v\u00fdchoz\u00edm \u0159e\u0161en\u00edm<\/h2>\n\n\n\n
\"\"<\/figure><\/div>\n\n\n\n

Jedn\u00edm z nej\u010dast\u011bj\u0161\u00edch probl\u00e9m\u016f p\u0159i projektech OT\/IT konvergence je to, co bezpe\u010dnostn\u00ed audity \u010dasto ozna\u010duj\u00ed jako \u201eerozi hranice\u201c<\/strong>: PLC nebo historian z\u00edsk\u00e1 cestu \u2013 n\u011bkdy ofici\u00e1ln\u011b schv\u00e1lenou, jindy vytvo\u0159enou jako neform\u00e1ln\u00ed workaround \u2013 p\u0159\u00edmo ke cloudov\u00e9mu endpointu nebo aplikaci na IT vrstv\u011b, \u010d\u00edm\u017e se efektivn\u011b obejde DMZ.<\/p>\n\n\n\n

Obvykle k tomu doch\u00e1z\u00ed postupn\u011b. Konkr\u00e9tn\u00ed analytick\u00fd projekt pot\u0159ebuje p\u0159\u00edstup ke zdroji dat, ve firewallu se otev\u0159e pravidlo jako do\u010dasn\u00e9 \u0159e\u0161en\u00ed a toto \u201edo\u010dasn\u00e9\u201c opat\u0159en\u00ed z\u016fstane zachov\u00e1no, proto\u017ee jeho odstran\u011bn\u00ed by naru\u0161ilo proces, kter\u00fd se na n\u011bm mezit\u00edm stal z\u00e1visl\u00fdm.<\/p>\n\n\n\n

Riziko je dob\u0159e zdokumentov\u00e1no ve v\u00fdzkumu zam\u011b\u0159en\u00e9m na bezpe\u010dnost ICS i v anal\u00fdz\u00e1ch skute\u010dn\u00fdch incident\u016f. Za\u0159\u00edzen\u00ed na \u0159\u00eddic\u00ed vrstv\u011b s p\u0159\u00edmou cestou k internetu nebo do podnikov\u00e9 IT s\u00edt\u011b p\u0159eb\u00edr\u00e1 \u010d\u00e1st \u00fato\u010dn\u00e9 plochy IT prost\u0159ed\u00ed \u2013 nap\u0159\u00edklad prost\u0159ednictv\u00edm later\u00e1ln\u00edho pohybu po phishingov\u00e9m \u00fatoku, kompromitovan\u00fdch p\u0159ihla\u0161ovac\u00edch \u00fadaj\u016f nebo zranitelnost\u00ed v IT softwaru. P\u0159itom nemus\u00ed m\u00edt k dispozici stejn\u00e9 ochrann\u00e9 mechanismy, kter\u00e9 jsou b\u011b\u017en\u00e9 v IT prost\u0159ed\u00ed, nap\u0159\u00edklad pravideln\u00fd patch management, endpoint detection nebo s\u00ed\u0165ov\u00fd monitoring p\u0159izp\u016fsoben\u00fd IT provozu.<\/p>\n\n\n\n

Za\u0159\u00edzen\u00ed na \u0159\u00eddic\u00ed vrstv\u011b nav\u00edc \u010dasto z\u016fst\u00e1vaj\u00ed dlouhou dobu bez aktualizac\u00ed kv\u016fli provozn\u00edm omezen\u00edm pr\u016fmyslov\u00fdch syst\u00e9m\u016f. Po\u017eadavky na dostupnost nemus\u00ed umo\u017e\u0148ovat prov\u00e1d\u011bt aktualizace tak \u010dasto jako v IT. P\u0159\u00edm\u00e9 vystaven\u00ed proto m\u016f\u017ee p\u0159edstavovat v\u00fdrazn\u011b vy\u0161\u0161\u00ed riziko ne\u017e obdobn\u00e9 vystaven\u00ed b\u011b\u017en\u00e9ho IT za\u0159\u00edzen\u00ed.<\/p>\n\n\n\n

3. Architektury zalo\u017een\u00e9 na gateway<\/h2>\n\n\n\n
\"\"<\/figure><\/div>\n\n\n\n

Architektura, kter\u00e1 podporuje jak OT\/IT konvergenci, tak bezpe\u010dnostn\u00ed z\u00f3ny a komunika\u010dn\u00ed cesty definovan\u00e9 v ISA\/IEC 62443, vyu\u017e\u00edv\u00e1 \u0159\u00edzenou gateway um\u00edst\u011bnou v DMZ nebo v jej\u00ed bezprost\u0159edn\u00ed bl\u00edzkosti<\/strong>. Gateway funguje jako jedin\u00e1 autorizovan\u00e1 komunika\u010dn\u00ed cesta mezi OT a IT vrstvou. Jednotliv\u00e9 implementace se mohou li\u0161it v n\u011bkolika d\u016fle\u017eit\u00fdch vlastnostech:<\/p>\n\n\n\n

3.1 P\u0159eklad protokol\u016f na hranici<\/h3>\n\n\n\n

Nam\u00edsto sm\u011brov\u00e1n\u00ed nativn\u00edch OT protokol\u016f (Modbus, EtherNet\/IP, propriet\u00e1rn\u00ed protokoly v\u00fdrobc\u016f) do IT s\u00edt\u011b gateway ukon\u010duje OT p\u0159ipojen\u00ed lok\u00e1ln\u011b a na IT stran\u011b data znovu publikuje prost\u0159ednictv\u00edm IT protokol\u016f a form\u00e1t\u016f, jako jsou REST API, MQTT s TLS nebo OPC UA s integrovan\u00fdmi bezpe\u010dnostn\u00edmi mechanismy.<\/p>\n\n\n\n

IT syst\u00e9my tak nikdy nevytv\u00e1\u0159ej\u00ed p\u0159\u00edm\u00e9 spojen\u00ed na \u00farovni protokolu se za\u0159\u00edzen\u00edmi na Levels 0\u20132.<\/p>\n\n\n\n

3.2 Validace a sanitizace dat<\/h3>\n\n\n\n

Spr\u00e1vn\u011b navr\u017een\u00e1 gateway nen\u00ed jen transparentn\u00edm pr\u016fchodem pro data. P\u0159ed jejich publikov\u00e1n\u00edm je validuje, transformuje a filtruje podle definovan\u00e9ho sch\u00e9matu.<\/p>\n\n\n\n

T\u00edm se sni\u017euje riziko, \u017ee se po\u0161kozen\u00e1 nebo \u0161kodliv\u00e1 data dostanou d\u00e1l do IT prost\u0159ed\u00ed, a z\u00e1rove\u0148 je zaji\u0161t\u011bno, \u017ee budou zp\u0159\u00edstupn\u011bny pouze tagy skute\u010dn\u011b pot\u0159ebn\u00e9 pro konkr\u00e9tn\u00ed IT aplikaci. Jde o praktick\u00e9 uplatn\u011bn\u00ed principu nejmen\u0161\u00edch opr\u00e1vn\u011bn\u00ed (least privilege)<\/strong> nejen na \u00farovni s\u00edt\u011b, ale tak\u00e9 na \u00farovni dat.<\/p>\n\n\n\n

3.3 Sm\u011brov\u00e1n\u00ed dat<\/h3>\n\n\n\n

Pro sc\u00e9n\u00e1\u0159e s nejvy\u0161\u0161\u00edmi po\u017eadavky na bezpe\u010dnost \u2013 nap\u0159\u00edklad bezpe\u010dnostn\u00ed instrumentovan\u00e9 syst\u00e9my nebo kritickou infrastrukturu \u2013 poskytuj\u00ed jednosm\u011brn\u00e9 gatewaye (data diody) hardwarov\u011b vynucenou, fyzicky jednosm\u011brnou datovou cestu z OT do IT. T\u00edm se eliminuje mo\u017enost zp\u011btn\u00e9 komunikace bez ohledu na softwarovou konfiguraci.<\/p>\n\n\n\n

Pro \u0161ir\u0161\u00ed \u0161k\u00e1lu sc\u00e9n\u00e1\u0159\u016f OT\/IT konvergence \u2013 nap\u0159\u00edklad dashboardy, analytiku, integraci s ERP nebo vzd\u00e1len\u00fd monitoring \u2013 kde je z provozn\u00edch d\u016fvod\u016f nutn\u00e1 ur\u010dit\u00e1 m\u00edra obousm\u011brn\u00e9 interakce (nap\u0159\u00edklad vzd\u00e1len\u00e1 zm\u011bna parametr\u016f nebo potvrzovac\u00ed workflow), je b\u011b\u017en\u011bj\u0161\u00edm a flexibiln\u011bj\u0161\u00edm \u0159e\u0161en\u00edm \u0159\u00edzen\u00e1 obousm\u011brn\u00e1 gateway. Na hranici p\u0159itom prob\u00edh\u00e1 p\u0159\u00edsn\u00fd p\u0159eklad protokol\u016f, autentizace a logov\u00e1n\u00ed.<\/p>\n\n\n\n

To samoz\u0159ejm\u011b p\u0159edpokl\u00e1d\u00e1, \u017ee je gateway um\u00edst\u011bna v DMZ a nen\u00ed vyu\u017e\u00edv\u00e1na jako d\u016fvod k odstran\u011bn\u00ed samotn\u00e9 DMZ.<\/p>\n\n\n\n

3.4 No-Code\/Low-Code konfigurace jako bezpe\u010dnostn\u00ed vlastnost<\/h3>\n\n\n\n

Jedn\u00edm z \u010dasto p\u0159ehl\u00ed\u017een\u00fdch aspekt\u016f architektury zalo\u017een\u00e9 na gateway je vztah mezi \u0159\u00edzen\u00edm zm\u011bn a bezpe\u010dnost\u00ed.<\/p>\n\n\n\n

Gatewaye, kter\u00e9 pro ka\u017ed\u00e9 nov\u00e9 mapov\u00e1n\u00ed dat vy\u017eaduj\u00ed vlastn\u00ed programov\u00e1n\u00ed, mohou vytv\u00e1\u0159et tlak na slu\u010dov\u00e1n\u00ed zm\u011bn nebo odkl\u00e1d\u00e1n\u00ed aktualizac\u00ed a testov\u00e1n\u00ed. Vizu\u00e1ln\u00ed no-code vrstvy pro mapov\u00e1n\u00ed a transformaci dat naopak umo\u017e\u0148uj\u00ed legitimn\u00ed zm\u011bny konektivity zav\u00e1d\u011bt rychleji a jednodu\u0161eji.<\/p>\n\n\n\n

V praxi to m\u016f\u017ee sn\u00ed\u017eit motivaci vytv\u00e1\u0159et neform\u00e1ln\u00ed a neautorizovan\u00e1 \u201edo\u010dasn\u00e1\u201c p\u0159\u00edm\u00e1 propojen\u00ed, kter\u00e1 postupn\u011b oslabuj\u00ed bezpe\u010dnostn\u00ed hranici.<\/p>\n\n\n\n

4. Praktick\u00e9 aspekty nasazen\u00ed<\/h2>\n\n\n\n

\u00dasp\u011b\u0161n\u00e9 architektury OT\/IT konvergence maj\u00ed obvykle t\u0159i spole\u010dn\u00e9 vlastnosti:<\/p>\n\n\n\n

4.1 Um\u00edst\u011bn\u00ed je stejn\u011b d\u016fle\u017eit\u00e9 jako funkce<\/h3>\n\n\n\n

Gateway um\u00edst\u011bn\u00e1 na Level 3.5 (DMZ)<\/strong> podle terminologie ISA-95\/Purdue zachov\u00e1v\u00e1 model bezpe\u010dnostn\u00edch z\u00f3n a komunika\u010dn\u00edch cest.<\/p>\n\n\n\n

Stejn\u00fd software nasazen\u00fd uvnit\u0159 Level 2\/3 s p\u0159\u00edmou cestou k internetu v\u0161ak vytv\u00e1\u0159\u00ed p\u0159esn\u011b ten probl\u00e9m s naru\u0161en\u00edm hranice, kter\u00fd m\u011bl p\u016fvodn\u011b \u0159e\u0161it. Technologie sama o sob\u011b nem\u016f\u017ee nahradit spr\u00e1vn\u00e9 um\u00edst\u011bn\u00ed v s\u00ed\u0165ov\u00e9 architektu\u0159e.<\/p>\n\n\n\n

4.2 Edge nasazen\u00ed m\u016f\u017ee sn\u00ed\u017eit latenci i \u00fato\u010dnou plochu<\/h3>\n\n\n\n

Provoz gateway funkce na dedikovan\u00e9m edge hardwaru um\u00edst\u011bn\u00e9m spole\u010dn\u011b s \u0159\u00eddic\u00edmi za\u0159\u00edzen\u00edmi, nam\u00edsto odes\u00edl\u00e1n\u00ed nezpracovan\u00fdch OT dat do vzd\u00e1len\u00e9 nebo cloudov\u00e9 media\u010dn\u00ed vrstvy, udr\u017euje \u010dasov\u011b citliv\u00e1 data lok\u00e1ln\u011b a z\u00e1rove\u0148 sni\u017euje mno\u017estv\u00ed nekontrolovan\u00e9ho OT provozu, kter\u00fd mus\u00ed proch\u00e1zet p\u0159es WAN.<\/p>\n\n\n\n

4.3 Auditovatelnost nen\u00ed dopln\u011bk, ale po\u017eadavek<\/h3>\n\n\n\n

Model komunika\u010dn\u00edch cest podle ISA\/IEC 62443 p\u0159edpokl\u00e1d\u00e1, \u017ee provoz na hranic\u00edch bezpe\u010dnostn\u00edch z\u00f3n je logov\u00e1n a monitorov\u00e1n.<\/p>\n\n\n\n

P\u0159i hodnocen\u00ed gateway \u0159e\u0161en\u00ed by proto m\u011bly b\u00fdt mo\u017enosti logov\u00e1n\u00ed a auditu posuzov\u00e1ny stejn\u011b pe\u010dliv\u011b jako propustnost nebo podpora jednotliv\u00fdch protokol\u016f.<\/p>\n\n\n\n

5. Z\u00e1v\u011br<\/h2>\n\n\n\n

OT\/IT konvergence u\u017e nen\u00ed pro organizace, kter\u00e9 cht\u011bj\u00ed vyu\u017e\u00edvat analytiku Industry 4.0 ve v\u011bt\u0161\u00edm m\u011b\u0159\u00edtku, voliteln\u00e1. Tlak na propojen\u00ed dat z \u0159\u00eddic\u00ed vrstvy s podnikov\u00fdmi syst\u00e9my bude nad\u00e1le r\u016fst.<\/p>\n\n\n\n

\"\"<\/figure><\/div>\n\n\n\n

Kl\u00ed\u010dovou ot\u00e1zkou, kterou je t\u0159eba \u0159e\u0161it v\u011bdom\u011b a systematicky \u2013 nikoli postupn\u00fdm p\u0159id\u00e1v\u00e1n\u00edm v\u00fdjimek ve firewallu \u2013 je kde k tomuto propojen\u00ed doch\u00e1z\u00ed a co ho zprost\u0159edkov\u00e1v\u00e1.<\/strong><\/p>\n\n\n\n

Gateway um\u00edst\u011bn\u00e1 na hranici DMZ, kter\u00e1 zaji\u0161\u0165uje p\u0159eklad protokol\u016f, validaci dat a tam, kde je to vhodn\u00e9, tak\u00e9 hardwarov\u011b vynucen\u00fd jednosm\u011brn\u00fd tok dat, umo\u017e\u0148uje vyu\u017e\u00edt v\u00fdhody OT\/IT konvergence a z\u00e1rove\u0148 zachovat model bezpe\u010dnostn\u00edch z\u00f3n a komunika\u010dn\u00edch cest nam\u00edsto jeho postupn\u00e9ho oslabov\u00e1n\u00ed jednotliv\u00fdmi v\u00fdjimkami.<\/p>\n\n\n\n

Nyn\u00ed, kdy\u017e v\u00edte, pro\u010d je bezpe\u010dn\u00fd p\u0159enos dat d\u016fle\u017eit\u00fd, p\u0159ich\u00e1z\u00ed dal\u0161\u00ed ot\u00e1zka: <\/p>\n\n\n\n

Jak ho zajistit bez zbyte\u010dn\u00fdch n\u00e1klad\u016f a slo\u017eitosti?<\/strong><\/p>\n\n\n\n

Bezpe\u010dn\u00fd p\u0159enos dat nemus\u00ed b\u00fdt komplikovan\u00fd. Pod\u00edvejte se, jak m\u016f\u017eete sv\u00e1 data chr\u00e1nit za f\u00e9rovou cenu \u2013 bez skryt\u00fdch poplatk\u016f a zbyte\u010dn\u00fdch funkc\u00ed. Objevte na\u0161e \u0159e\u0161en\u00ed:<\/p>\n\n\n\n

\n
DataTalk – OT\/IT Gateway<\/div><\/a><\/div><\/div>\n<\/div><\/div>\n\n\n\n

<\/p>\n\n\n\n

\n
St\u00e1hnout OT\/IT Gateway zdarma (Win)<\/div><\/a><\/div><\/div>\n<\/div><\/div>\n\n\n\n

—<\/p>\n\n\n\n

**References for further reading** ISA\/IEC 62443 series, *Security for Industrial Automation and Control Systems*; ISA-95 \/ IEC 62264, *Enterprise-Control System Integration*; NIST SP 800-82 Rev. 3, *Guide to Operational Technology (OT) Security*.<\/p>\n\n\n\n

<\/p>\n","protected":false},"excerpt":{"rendered":"

P\u0159edstavuje Purdue Enterprise Reference Architecture jako z\u00e1kladn\u00ed bezpe\u010dnostn\u00ed model, vysv\u011btluje, pro\u010d p\u0159\u00edm\u00e9 propojen\u00ed OT s cloudem tento model naru\u0161uje, a zab\u00fdv\u00e1 se architekturami zalo\u017een\u00fdmi na gateway\u00edch \u2013 v\u010detn\u011b jednosm\u011brn\u00fdch a \u0159\u00edzen\u00fdch obousm\u011brn\u00fdch \u0159e\u0161en\u00ed \u2013 jako praktickou cestou ke konvergenci, kter\u00e1 zachov\u00e1v\u00e1 segmentaci s\u00edt\u011b.<\/p>\n","protected":false},"author":5,"featured_media":9379,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_uag_custom_page_level_css":"","_swt_meta_header_display":false,"_swt_meta_footer_display":false,"_swt_meta_site_title_display":false,"_swt_meta_sticky_header":false,"_swt_meta_transparent_header":false,"footnotes":""},"categories":[116,75],"tags":[],"class_list":["post-9481","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-blog-cs","category-novinky"],"yoast_head":"\nOT\/IT Konvergence: Jak bezpe\u010dn\u011b propojit data z v\u00fdroby s IT?<\/title>\n<meta name=\"description\" content=\"Zjist\u011bte, jak bezpe\u010dn\u00e9 propojen\u00ed OT a IT umo\u017e\u0148uje integraci dat v r\u00e1mci Industry 4.0, ani\u017e by byla naru\u0161ena segmentace s\u00edt\u011b a jej\u00ed bezpe\u010dnost.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/data-talk.eu\/cs\/ot-it-convergence-secure-data-flow\/\" \/>\n<meta property=\"og:locale\" content=\"cs_CZ\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"OT\/IT Konvergence: Jak bezpe\u010dn\u011b propojit data z v\u00fdroby s IT?\" \/>\n<meta property=\"og:description\" content=\"Zjist\u011bte, jak bezpe\u010dn\u00e9 propojen\u00ed OT a IT umo\u017e\u0148uje integraci dat v r\u00e1mci Industry 4.0, ani\u017e by byla naru\u0161ena segmentace s\u00edt\u011b a jej\u00ed bezpe\u010dnost.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/data-talk.eu\/cs\/ot-it-convergence-secure-data-flow\/\" \/>\n<meta property=\"og:site_name\" content=\"data-talk.eu\" \/>\n<meta property=\"article:published_time\" content=\"2026-09-09T09:26:42+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-09-14T09:16:01+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/data-talk.eu\/wp-content\/uploads\/2026\/09\/OT_IT-Convergence-Cover-1024x1024.png\" \/>\n\t<meta property=\"og:image:width\" content=\"1024\" \/>\n\t<meta property=\"og:image:height\" content=\"1024\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"DataTalk\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Napsal(a)\" \/>\n\t<meta name=\"twitter:data1\" content=\"DataTalk\" \/>\n\t<meta name=\"twitter:label2\" content=\"Odhadovan\u00e1 doba \u010dten\u00ed\" \/>\n\t<meta name=\"twitter:data2\" content=\"7 minut\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/data-talk.eu\\\/cs\\\/ot-it-convergence-secure-data-flow\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/data-talk.eu\\\/cs\\\/ot-it-convergence-secure-data-flow\\\/\"},\"author\":{\"name\":\"DataTalk\",\"@id\":\"https:\\\/\\\/data-talk.eu\\\/#\\\/schema\\\/person\\\/0b92f5798b28821246d98b96a67161a8\"},\"headline\":\"OT\\\/IT Konvergence: Jak bezpe\u010dn\u011b propojit data z v\u00fdroby s IT?\",\"datePublished\":\"2026-09-09T09:26:42+00:00\",\"dateModified\":\"2026-09-14T09:16:01+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/data-talk.eu\\\/cs\\\/ot-it-convergence-secure-data-flow\\\/\"},\"wordCount\":1766,\"commentCount\":0,\"image\":{\"@id\":\"https:\\\/\\\/data-talk.eu\\\/cs\\\/ot-it-convergence-secure-data-flow\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/data-talk.eu\\\/wp-content\\\/uploads\\\/2026\\\/09\\\/OT_IT-Convergence-Cover.png\",\"articleSection\":[\"Blog\",\"Novinky\"],\"inLanguage\":\"cs\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/data-talk.eu\\\/cs\\\/ot-it-convergence-secure-data-flow\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/data-talk.eu\\\/cs\\\/ot-it-convergence-secure-data-flow\\\/\",\"url\":\"https:\\\/\\\/data-talk.eu\\\/cs\\\/ot-it-convergence-secure-data-flow\\\/\",\"name\":\"OT\\\/IT Konvergence: Jak bezpe\u010dn\u011b propojit data z v\u00fdroby s IT?\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/data-talk.eu\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/data-talk.eu\\\/cs\\\/ot-it-convergence-secure-data-flow\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/data-talk.eu\\\/cs\\\/ot-it-convergence-secure-data-flow\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/data-talk.eu\\\/wp-content\\\/uploads\\\/2026\\\/09\\\/OT_IT-Convergence-Cover.png\",\"datePublished\":\"2026-09-09T09:26:42+00:00\",\"dateModified\":\"2026-09-14T09:16:01+00:00\",\"author\":{\"@id\":\"https:\\\/\\\/data-talk.eu\\\/#\\\/schema\\\/person\\\/0b92f5798b28821246d98b96a67161a8\"},\"description\":\"Zjist\u011bte, jak bezpe\u010dn\u00e9 propojen\u00ed OT a IT umo\u017e\u0148uje integraci dat v r\u00e1mci Industry 4.0, ani\u017e by byla naru\u0161ena segmentace s\u00edt\u011b a jej\u00ed bezpe\u010dnost.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/data-talk.eu\\\/cs\\\/ot-it-convergence-secure-data-flow\\\/#breadcrumb\"},\"inLanguage\":\"cs\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/data-talk.eu\\\/cs\\\/ot-it-convergence-secure-data-flow\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"cs\",\"@id\":\"https:\\\/\\\/data-talk.eu\\\/cs\\\/ot-it-convergence-secure-data-flow\\\/#primaryimage\",\"url\":\"https:\\\/\\\/data-talk.eu\\\/wp-content\\\/uploads\\\/2026\\\/09\\\/OT_IT-Convergence-Cover.png\",\"contentUrl\":\"https:\\\/\\\/data-talk.eu\\\/wp-content\\\/uploads\\\/2026\\\/09\\\/OT_IT-Convergence-Cover.png\",\"width\":1254,\"height\":1254,\"caption\":\"OT\\\/IT Gateway\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/data-talk.eu\\\/cs\\\/ot-it-convergence-secure-data-flow\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Dom\u016f\",\"item\":\"https:\\\/\\\/data-talk.eu\\\/cs\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"OT\\\/IT Konvergence: Jak bezpe\u010dn\u011b propojit data z v\u00fdroby s IT?\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/data-talk.eu\\\/#website\",\"url\":\"https:\\\/\\\/data-talk.eu\\\/\",\"name\":\"data-talk.eu\",\"description\":\"DataTalk\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/data-talk.eu\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"cs\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/data-talk.eu\\\/#\\\/schema\\\/person\\\/0b92f5798b28821246d98b96a67161a8\",\"name\":\"DataTalk\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"cs\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/426a23f3fdd7d29cdb11bb518fdfe3945aaf9b6e7906a462687ab0bc0d37501c?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/426a23f3fdd7d29cdb11bb518fdfe3945aaf9b6e7906a462687ab0bc0d37501c?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/426a23f3fdd7d29cdb11bb518fdfe3945aaf9b6e7906a462687ab0bc0d37501c?s=96&d=mm&r=g\",\"caption\":\"DataTalk\"},\"url\":\"https:\\\/\\\/data-talk.eu\\\/cs\\\/author\\\/bplaminkova\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"OT\/IT Konvergence: Jak bezpe\u010dn\u011b propojit data z v\u00fdroby s IT?","description":"Zjist\u011bte, jak bezpe\u010dn\u00e9 propojen\u00ed OT a IT umo\u017e\u0148uje integraci dat v r\u00e1mci Industry 4.0, ani\u017e by byla naru\u0161ena segmentace s\u00edt\u011b a jej\u00ed bezpe\u010dnost.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/data-talk.eu\/cs\/ot-it-convergence-secure-data-flow\/","og_locale":"cs_CZ","og_type":"article","og_title":"OT\/IT Konvergence: Jak bezpe\u010dn\u011b propojit data z v\u00fdroby s IT?","og_description":"Zjist\u011bte, jak bezpe\u010dn\u00e9 propojen\u00ed OT a IT umo\u017e\u0148uje integraci dat v r\u00e1mci Industry 4.0, ani\u017e by byla naru\u0161ena segmentace s\u00edt\u011b a jej\u00ed bezpe\u010dnost.","og_url":"https:\/\/data-talk.eu\/cs\/ot-it-convergence-secure-data-flow\/","og_site_name":"data-talk.eu","article_published_time":"2026-09-09T09:26:42+00:00","article_modified_time":"2026-09-14T09:16:01+00:00","og_image":[{"width":1024,"height":1024,"url":"https:\/\/data-talk.eu\/wp-content\/uploads\/2026\/09\/OT_IT-Convergence-Cover-1024x1024.png","type":"image\/png"}],"author":"DataTalk","twitter_card":"summary_large_image","twitter_misc":{"Napsal(a)":"DataTalk","Odhadovan\u00e1 doba \u010dten\u00ed":"7 minut"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/data-talk.eu\/cs\/ot-it-convergence-secure-data-flow\/#article","isPartOf":{"@id":"https:\/\/data-talk.eu\/cs\/ot-it-convergence-secure-data-flow\/"},"author":{"name":"DataTalk","@id":"https:\/\/data-talk.eu\/#\/schema\/person\/0b92f5798b28821246d98b96a67161a8"},"headline":"OT\/IT Konvergence: Jak bezpe\u010dn\u011b propojit data z v\u00fdroby s IT?","datePublished":"2026-09-09T09:26:42+00:00","dateModified":"2026-09-14T09:16:01+00:00","mainEntityOfPage":{"@id":"https:\/\/data-talk.eu\/cs\/ot-it-convergence-secure-data-flow\/"},"wordCount":1766,"commentCount":0,"image":{"@id":"https:\/\/data-talk.eu\/cs\/ot-it-convergence-secure-data-flow\/#primaryimage"},"thumbnailUrl":"https:\/\/data-talk.eu\/wp-content\/uploads\/2026\/09\/OT_IT-Convergence-Cover.png","articleSection":["Blog","Novinky"],"inLanguage":"cs","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/data-talk.eu\/cs\/ot-it-convergence-secure-data-flow\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/data-talk.eu\/cs\/ot-it-convergence-secure-data-flow\/","url":"https:\/\/data-talk.eu\/cs\/ot-it-convergence-secure-data-flow\/","name":"OT\/IT Konvergence: Jak bezpe\u010dn\u011b propojit data z v\u00fdroby s IT?","isPartOf":{"@id":"https:\/\/data-talk.eu\/#website"},"primaryImageOfPage":{"@id":"https:\/\/data-talk.eu\/cs\/ot-it-convergence-secure-data-flow\/#primaryimage"},"image":{"@id":"https:\/\/data-talk.eu\/cs\/ot-it-convergence-secure-data-flow\/#primaryimage"},"thumbnailUrl":"https:\/\/data-talk.eu\/wp-content\/uploads\/2026\/09\/OT_IT-Convergence-Cover.png","datePublished":"2026-09-09T09:26:42+00:00","dateModified":"2026-09-14T09:16:01+00:00","author":{"@id":"https:\/\/data-talk.eu\/#\/schema\/person\/0b92f5798b28821246d98b96a67161a8"},"description":"Zjist\u011bte, jak bezpe\u010dn\u00e9 propojen\u00ed OT a IT umo\u017e\u0148uje integraci dat v r\u00e1mci Industry 4.0, ani\u017e by byla naru\u0161ena segmentace s\u00edt\u011b a jej\u00ed bezpe\u010dnost.","breadcrumb":{"@id":"https:\/\/data-talk.eu\/cs\/ot-it-convergence-secure-data-flow\/#breadcrumb"},"inLanguage":"cs","potentialAction":[{"@type":"ReadAction","target":["https:\/\/data-talk.eu\/cs\/ot-it-convergence-secure-data-flow\/"]}]},{"@type":"ImageObject","inLanguage":"cs","@id":"https:\/\/data-talk.eu\/cs\/ot-it-convergence-secure-data-flow\/#primaryimage","url":"https:\/\/data-talk.eu\/wp-content\/uploads\/2026\/09\/OT_IT-Convergence-Cover.png","contentUrl":"https:\/\/data-talk.eu\/wp-content\/uploads\/2026\/09\/OT_IT-Convergence-Cover.png","width":1254,"height":1254,"caption":"OT\/IT Gateway"},{"@type":"BreadcrumbList","@id":"https:\/\/data-talk.eu\/cs\/ot-it-convergence-secure-data-flow\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Dom\u016f","item":"https:\/\/data-talk.eu\/cs\/"},{"@type":"ListItem","position":2,"name":"OT\/IT Konvergence: Jak bezpe\u010dn\u011b propojit data z v\u00fdroby s IT?"}]},{"@type":"WebSite","@id":"https:\/\/data-talk.eu\/#website","url":"https:\/\/data-talk.eu\/","name":"data-talk.eu","description":"DataTalk","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/data-talk.eu\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"cs"},{"@type":"Person","@id":"https:\/\/data-talk.eu\/#\/schema\/person\/0b92f5798b28821246d98b96a67161a8","name":"DataTalk","image":{"@type":"ImageObject","inLanguage":"cs","@id":"https:\/\/secure.gravatar.com\/avatar\/426a23f3fdd7d29cdb11bb518fdfe3945aaf9b6e7906a462687ab0bc0d37501c?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/426a23f3fdd7d29cdb11bb518fdfe3945aaf9b6e7906a462687ab0bc0d37501c?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/426a23f3fdd7d29cdb11bb518fdfe3945aaf9b6e7906a462687ab0bc0d37501c?s=96&d=mm&r=g","caption":"DataTalk"},"url":"https:\/\/data-talk.eu\/cs\/author\/bplaminkova\/"}]}},"spectra_blocks_featured_image_url":{"thumbnail":{"url":"https:\/\/data-talk.eu\/wp-content\/uploads\/2026\/09\/OT_IT-Convergence-Cover-150x150.png","width":150,"height":150},"medium":{"url":"https:\/\/data-talk.eu\/wp-content\/uploads\/2026\/09\/OT_IT-Convergence-Cover-300x300.png","width":300,"height":300},"medium_large":{"url":"https:\/\/data-talk.eu\/wp-content\/uploads\/2026\/09\/OT_IT-Convergence-Cover-768x768.png","width":768,"height":768},"large":{"url":"https:\/\/data-talk.eu\/wp-content\/uploads\/2026\/09\/OT_IT-Convergence-Cover-1024x1024.png","width":1024,"height":1024},"full":{"url":"https:\/\/data-talk.eu\/wp-content\/uploads\/2026\/09\/OT_IT-Convergence-Cover.png","width":1254,"height":1254}},"spectra_blocks_author_info":{"display_name":"DataTalk","avatar_url":"https:\/\/secure.gravatar.com\/avatar\/426a23f3fdd7d29cdb11bb518fdfe3945aaf9b6e7906a462687ab0bc0d37501c?s=96&d=mm&r=g","author_link":"https:\/\/data-talk.eu\/cs\/author\/bplaminkova\/","description":""},"uagb_featured_image_src":{"full":["https:\/\/data-talk.eu\/wp-content\/uploads\/2026\/09\/OT_IT-Convergence-Cover.png",1254,1254,false],"thumbnail":["https:\/\/data-talk.eu\/wp-content\/uploads\/2026\/09\/OT_IT-Convergence-Cover-150x150.png",150,150,true],"medium":["https:\/\/data-talk.eu\/wp-content\/uploads\/2026\/09\/OT_IT-Convergence-Cover-300x300.png",300,300,true],"medium_large":["https:\/\/data-talk.eu\/wp-content\/uploads\/2026\/09\/OT_IT-Convergence-Cover-768x768.png",768,768,true],"large":["https:\/\/data-talk.eu\/wp-content\/uploads\/2026\/09\/OT_IT-Convergence-Cover-1024x1024.png",1024,1024,true],"1536x1536":["https:\/\/data-talk.eu\/wp-content\/uploads\/2026\/09\/OT_IT-Convergence-Cover.png",1254,1254,false],"2048x2048":["https:\/\/data-talk.eu\/wp-content\/uploads\/2026\/09\/OT_IT-Convergence-Cover.png",1254,1254,false]},"uagb_author_info":{"display_name":"DataTalk","author_link":"https:\/\/data-talk.eu\/cs\/author\/bplaminkova\/"},"uagb_comment_info":0,"uagb_excerpt":"P\u0159edstavuje Purdue Enterprise Reference Architecture jako z\u00e1kladn\u00ed bezpe\u010dnostn\u00ed model, vysv\u011btluje, pro\u010d p\u0159\u00edm\u00e9 propojen\u00ed OT s cloudem tento model naru\u0161uje, a zab\u00fdv\u00e1 se architekturami zalo\u017een\u00fdmi na gateway\u00edch \u2013 v\u010detn\u011b jednosm\u011brn\u00fdch a \u0159\u00edzen\u00fdch obousm\u011brn\u00fdch \u0159e\u0161en\u00ed \u2013 jako praktickou cestou ke konvergenci, kter\u00e1 zachov\u00e1v\u00e1 segmentaci s\u00edt\u011b.","_links":{"self":[{"href":"https:\/\/data-talk.eu\/cs\/wp-json\/wp\/v2\/posts\/9481","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/data-talk.eu\/cs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/data-talk.eu\/cs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/data-talk.eu\/cs\/wp-json\/wp\/v2\/users\/5"}],"replies":[{"embeddable":true,"href":"https:\/\/data-talk.eu\/cs\/wp-json\/wp\/v2\/comments?post=9481"}],"version-history":[{"count":5,"href":"https:\/\/data-talk.eu\/cs\/wp-json\/wp\/v2\/posts\/9481\/revisions"}],"predecessor-version":[{"id":9492,"href":"https:\/\/data-talk.eu\/cs\/wp-json\/wp\/v2\/posts\/9481\/revisions\/9492"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/data-talk.eu\/cs\/wp-json\/wp\/v2\/media\/9379"}],"wp:attachment":[{"href":"https:\/\/data-talk.eu\/cs\/wp-json\/wp\/v2\/media?parent=9481"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/data-talk.eu\/cs\/wp-json\/wp\/v2\/categories?post=9481"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/data-talk.eu\/cs\/wp-json\/wp\/v2\/tags?post=9481"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}