Modernizing critical infrastructure is not simply a matter of installing new technology. In environments that deliver power, water, transportation, communications, healthcare, and other essential services, every technical decision can affect safety, reliability, continuity, and the people who depend on those systems.
That reality shaped the inaugural episode of Mission Signals, OSC Global’s new web channel exploring Technology. Leadership. Mission Impact. The conversation brought together John Roach, President of OSC Technical Solutions, and James Cervini, Eng.D., Director and Principal Architect for OT Cybersecurity at OSC Technical Solutions, to examine a challenge that extends across high-consequence missions: how do we introduce new capabilities without disrupting the systems that must continue operating?
The answer begins by changing where modernization conversations start.
Modernization Is Not a Technology Refresh
Organizations often begin with a platform, product, or compliance requirement. In operational technology environments, that approach can create more risk than it solves. OT interacts with physical equipment and industrial processes, and many of those systems cannot be paused, patched, or replaced as easily as traditional information technology.
Before selecting a solution, leaders need to understand the operating environment: what the system does, which processes cannot be interrupted, where dependencies exist, and what failure would mean. Operators, engineers, cybersecurity professionals, mission owners, and technology partners each see a different part of that picture. Bringing them together early produces better decisions than asking one discipline to solve the problem alone.
This is also why institutional knowledge matters. The people closest to the work often recognize operational risk first. Their experience should inform modernization strategy, not be consulted only after major decisions have already been made.
Security Belongs in the Design
Advanced nuclear technologies provide a timely example. Smaller reactor designs and microreactors could create new deployment models and important mission capabilities. They also create an opportunity to integrate cybersecurity into the engineering process from the beginning.
Secure by Design and Cyber-Informed Engineering move security upstream. Instead of applying controls after a system is largely complete, engineers and cybersecurity professionals evaluate risk as architecture, instrumentation, connectivity, and operating procedures are developed. Early collaboration can reduce costly redesign, improve assurance, and make the final system more resilient.
The lesson applies beyond nuclear energy. Every new connection creates capability, but it may also create a dependency or attack path. Responsible innovation does not mean slowing progress. It means understanding those tradeoffs before they become operational problems.
AI Needs a Mission and Boundaries
Artificial intelligence raises a similar question. The important issue is not whether an offering includes AI; it is whether the capability solves a defined mission problem and can operate safely within the environment where it is placed.
High-consequence systems require clear boundaries around AI behavior, data, access, and decision-making. Leaders should ask what value the technology provides, what new risks or dependencies it introduces, how unexpected behavior will be detected, and where human judgment must remain in control. In these settings, adoption should be deliberate, appropriately constrained, and supported by people who understand both the technology and the physical mission.
Resilience Extends Beyond the Fence Line
No critical-infrastructure organization operates alone. Water systems depend on electricity. Energy systems may depend on water, communications, transportation, fuel, vendors, and specialized equipment. A risk assessment focused only on assets inside an organization’s boundary can miss the dependencies most likely to disrupt operations.
Resilience therefore depends on relationships as much as technology. Organizations need trusted channels for information sharing, coordination, and decision-making before an incident occurs. They also need teams that understand how engineering, cybersecurity, operations, workforce readiness, and leadership affect one another.
This is the larger signal from the conversation: technology can strengthen resilience, but it cannot create resilience by itself. The strongest modernization efforts begin with the mission, include the people who understand the environment, and treat risk as an engineering and leadership responsibility throughout the system lifecycle.
Continuing the Mission Signals Conversation
Mission Signals was created to bring forward perspectives from across the OSC Global enterprise and the broader mission community. Future episodes will explore the technologies, leadership decisions, workforce demands, and partnerships shaping high-consequence environments.
Watch the inaugural episode for the full conversation with John Roach, James Cervini, and moderator Pete Tseronis, including their perspectives on OT cybersecurity, advanced nuclear systems, artificial intelligence, workforce readiness, and cross-sector resilience.
Watch the full Mission Signals webcast here: