ICT

ICT stands for Information and Communication Technology. It commonly refers to the combined set of technologies, systems, and services used to create, process, store, secure, transmit, and display information. ICT includes both information technology (IT) components, such as servers and applications, and communication technologies, such as networks and telecommunications.

Scope in industrial and regulated environments

In manufacturing and other regulated operations, ICT typically includes:

• Enterprise IT systems such as ERP, MES, LIMS, QMS, PLM, and document management platforms
• Network infrastructure, including wired and wireless LANs, WAN links, VPNs, and internet connectivity
• Communication systems used for voice, video, and collaboration, such as VoIP, conferencing tools, and messaging platforms
• Data centers and cloud services that host business and manufacturing applications
• End-user devices such as workstations, laptops, mobile devices, and thin clients used on shop floors and in offices

In this context, ICT is often discussed alongside operational technology (OT). ICT systems support business processes, planning, quality management, and regulatory reporting, while OT systems directly monitor and control physical processes and equipment on the manufacturing line. The two domains increasingly interconnect, which raises additional cybersecurity, safety, and compliance considerations.

ICT and supply chain risk

Standards and frameworks that address supply chain risk, such as NIST SP 800-53, commonly use the term ICT supply chain to describe the full lifecycle of information and communication technology products and services. This includes hardware, software, firmware, cloud services, and supporting components sourced from external suppliers and integrated into enterprise and manufacturing environments.

In this sense, ICT supply chain risk management covers:

• Selection, evaluation, and monitoring of ICT vendors and service providers
• Risks from third-party software, firmware, and hardware components used in IT and networked systems
• Dependency on external cloud platforms, managed service providers, and connectivity partners
• Potential impacts of compromised or unreliable ICT components on business and manufacturing operations

Common confusion

ICT vs. IT: Information technology (IT) usually refers to computing systems and data processing. ICT is a broader term that explicitly includes communication and networking technologies, though in many organizations the two terms are used interchangeably.

ICT vs. OT: ICT primarily covers digital and communication systems that support information processing and business functions. Operational technology (OT) covers systems that directly monitor or control physical equipment and processes, such as PLCs, SCADA systems, and DCS. In modern plants, ICT and OT overlap where production equipment is networked and integrated with business systems.

Operational use

In operational and compliance documentation, ICT may appear in:

• Policies and procedures for cybersecurity, access control, and incident response
• Risk assessments that distinguish between ICT and OT assets and networks
• Supplier and procurement requirements for ICT products and services
• Architecture diagrams that show how enterprise, plant, and cloud systems communicate

Using the term ICT helps emphasize that both computing and communication capabilities are in scope when analyzing risks, dependencies, and controls across manufacturing and regulated operations.