Summary: The article presents issues related to the cybersecurity architecture of industrial systems, with particular emphasis on the energy sector. The impact of digital transformation, integration of IT and OT environments and the implementation of cloud solutions on the growth of the attack surface of critical infrastructure is discussed. It was pointed out that the specificity of OT systems, resulting from the need to ensure the continuity of technological processes and the limitations associated with the operation of long-standing devices and older communication protocols, requires the use of dedicated protection mechanisms. The importance of a multi-layered security architecture was highlighted, including network segmentation, access control, traffic monitoring, anomaly detection, and systems backup and recovery procedures. The role of architectural models, such as Purdue and Security by Design, is also presented, and the importance of legal regulations, in particular NIS2 and the Cyber Resilience Act, for risk management and supply chain security is discussed. In conclusion, it was indicated that the development of cyber-physical resilience of industrial systems will be based on the selective implementation of the Zero Trust concept, the use of artificial intelligence and machine learning methods, and close cooperation between IT and OT teams.