Rockwell opens Singapore hub for industrial cyber defence

Rockwell Automation has opened a Security Operations Centre (SOC) in Singapore, positioning it as a regional hub for round-the-clock monitoring and incident response for industrial organisations across Asia Pacific.

The site is part of Rockwell's global managed security services operation and focuses on operational technology (OT) environments, where cyber incidents can disrupt physical processes as well as IT systems. Exposure has increased as factories and critical infrastructure connect more equipment to enterprise networks and cloud services.

The Singapore SOC provides 24/7 monitoring, advanced threat detection, and rapid incident response through Rockwell's SecureOT Security Monitoring and Response service. It is designed for customers running mixed technology estates, with equipment and software from multiple suppliers.

Regional hub

Located inside Rockwell's Asia Pacific headquarters, the SOC serves as a regional base for managed detection and response services. It ingests security data from multiple sources and applies threat intelligence and risk prioritisation across customer environments.

Industrial security teams often need to decide which alerts to investigate first, particularly when multiple sites operate under different local conditions. Rockwell's service is intended to help prioritise vulnerabilities and provide remediation guidance through its security specialists.

"Cybersecurity is now inseparable from digital transformation," said Marcelo Tarkieltaub, Regional Director, Southeast Asia, Rockwell Automation.

"The opening of our regional SOC reinforces Singapore's role as a cybersecurity hub for the region. We look forward to deepening our collaboration with local agencies, academia and partners to strengthen industrial resilience and upskill new cybersecurity talent. In fact, we've recently onboarded several young professionals with cybersecurity majors, building their expertise to support global clients in the industrial security space," he said.

Threat landscape

Ransomware, extortion, and data theft remain prominent risks for manufacturers and other industrial operators in Asia Pacific. The region's role in global supply chains, and its concentration of electronics, chemicals, energy, and logistics assets, have made it a frequent target for criminal groups seeking financial gain and leverage through disruption.

Rockwell cited findings from its 10th Annual 2025 State of Smart Manufacturing Report, which found cybersecurity ranked as the second most critical external risk for manufacturers in Asia Pacific. Nearly half of respondents planned to deploy artificial intelligence and machine learning for cybersecurity use cases within the next year.

Industrial security teams also face constraints that differ from conventional IT operations. Plants can run continuously, and downtime can have safety, quality, and production implications. Asset lifecycles are often long, with older equipment still in use. These factors can complicate patching and system changes, placing greater emphasis on monitoring and response.

Automation platform

The Singapore SOC uses Security Orchestration, Automation and Response (SOAR) technology. Rockwell said the platform combines automation, AI, and analytics to speed incident response, and presents incidents and response steps in a single view across multiple sites.

Global manufacturers may need to monitor estates spread across countries and time zones. Some customers run more than 100 locations, increasing the need for standardised triage and response processes.

Local ecosystem

Rockwell linked the opening to Singapore's broader ambition to build a secure digital economy, and said the facility complements its collaboration with the Cyber Security Agency of Singapore and industry partners on industrial cybersecurity maturity.

The SOC will also host training workshops and simulation exercises, exposing participants to OT threat scenarios. Such programmes are becoming more common as organisations develop skills in incident handling, network visibility, and coordination between IT and engineering teams.

The Singapore centre extends Rockwell's SecureOT portfolio, which groups services across strategic advisory, managed industrial networking and infrastructure, asset management, risk and vulnerability management, and incident response.

Rockwell said the Singapore SOC gives regional customers a point of contact aligned with local working hours and language needs, while connecting into its global managed security services network.