Rockwell opens Singapore SOC to secure Asia Pacific OT

Rockwell Automation has opened a Security Operations Centre (SOC) in Singapore, expanding its managed cybersecurity services for industrial customers across Asia Pacific.

Located within Rockwell's Asia Pacific headquarters, the facility is part of its global managed security services network. It provides 24/7 monitoring and incident response for operational technology (OT) environments, which often run alongside corporate IT systems in manufacturing and critical infrastructure.

Regional SOC

The Singapore centre will serve as a regional hub for managed detection and response, delivering real-time monitoring, threat detection, and rapid incident response through Rockwell's SecureOT Security Monitoring and Response service.

Industrial firms in the region continue to face sustained attention from cybercriminals and other threat actors. Disruption at a single facility can ripple through supply chains, particularly where plants connect production systems with business applications and remote access tools.

The facility is designed for converged IT and OT environments. As factories and plants connect more devices and services, the number of potential entry points for attackers increases.

How it works

The SOC ingests security data from multiple sources and vendors, adds threat intelligence, and applies risk-based prioritisation. This ranks alerts and vulnerabilities, reducing time spent on lower-value notifications in complex environments.

The service also includes incident handling and remediation guided by Rockwell cybersecurity specialists. Many industrial organisations use a mix of legacy systems and newer connected platforms, which can make patching and configuration changes harder than in office IT-especially where downtime affects production.

The SOC uses Security Orchestration, Automation and Response (SOAR) technology to coordinate response actions and automate parts of triage and containment. Rockwell says the platform combines automation, AI, and analytics.

The service provides a single "pane of glass" view of incidents and response actions across sites. Large manufacturers may run dozens of plants across different countries, with some monitoring more than 100 locations.

Customer access

Rockwell will use the Singapore site for workshops and customer simulations focused on OT threats. These exercises typically replicate attack stages such as initial compromise, lateral movement, and disruption attempts. In industrial settings, scenarios can involve engineering workstations, programmable controllers, and the networks that connect them.

The centre also connects to the broader SecureOT Solution Suite, which Rockwell says spans strategic advisory, managed industrial networking and infrastructure, asset management, risk and vulnerability management, and incident response.

Singapore has positioned itself as a regional hub for cybersecurity services and skills development. Many companies based in the city-state manage regional operations and supply chains across Asia Pacific, making it a practical base for security coordination.

Rockwell says the facility aligns with Singapore's ambition to build a secure digital economy and complements its collaboration with the Cyber Security Agency of Singapore and other partners. The company also says it has onboarded young professionals with cybersecurity majors and plans further skills development focused on industrial security.

Threat landscape

Manufacturers across Asia Pacific report rising concerns about ransomware, extortion, and data theft. Criminal groups have increasingly targeted industrial organisations in part because outages are costly and can increase pressure to pay. Remote access and the adoption of connected sensors and analytics systems have also reshaped the attack surface in many plants.

Rockwell cited its 10th Annual 2025 State of Smart Manufacturing Report, which found cybersecurity ranked as the second most critical external risk for manufacturers in Asia Pacific. Nearly half of respondents said they plan to deploy AI and machine learning for cybersecurity use cases within the next year.

These plans reflect a broader push to improve detection speed and reduce response times. In OT environments, teams must balance protection with safety requirements and operational continuity. System changes often require careful planning, and tolerance for disruption is low.

Rockwell's move adds another option for companies that prefer managed services over building a full in-house security operations team. It also increases the number of regional SOCs focused on industrial environments, which have distinct requirements from corporate IT monitoring.

Marcelo Tarkieltaub, regional director for Southeast Asia at Rockwell Automation, described the launch as part of a broader shift in industrial digitisation.

"Cybersecurity is now inseparable from digital transformation," said Marcelo Tarkieltaub, regional director, Southeast Asia, Rockwell Automation. "Our new regional SOC hub in Singapore reflects our commitment to helping manufacturers connect, automate, and protect their operations end-to-end. Having multiple capabilities under one roof allows for deeper collaboration and faster response, delivering stronger protection for our customers' critical operations. It enables them to test and engage with our capabilities firsthand, an important step for organisations evaluating the right partners for their cybersecurity journey."

The Singapore SOC will support customers across Asia Pacific with 24/7 monitoring and response as part of Rockwell's managed detection and response offering.