Asset Inventory in the OT Environment
THE FIRST STEP ON THE PATH TO SECURE YOUR OT ENVIRONMENT
We hear it all the time, “I don’t have an asset inventory” or “I didn’t even know that was connected to the network.” Asset inventory and baselining is not the exciting part of cyber security, we get it, but a cyber security plan is woefully incomplete without a total picture of what you’re trying to secure. This is easier said than done, which holds especially true for the world of Operational Technology and Industrial Control Systems, where using traditional methods of automated asset discovery can be either ineffective or even detrimental to operations. Why is Asset Identification so much different in the OT world? For two main reasons, assets are very different, and operational impact.