Creating and Maintaining a Definitive View of Your Operational Technology (OT) Architecture

CISA and the Federal Bureau of Investigation collaborated with the UK National Cyber Security Centre and five international partners to develop new joint guidance: Creating and Maintaining a Definitive View of Your Operational Technology (OT) Architecture. Modern connectivity between OT and enterprise systems further elevates the need for well-designed, context-aware security measures. This guidance, which builds on the recently released Foundations for OT Cybersecurity: Asset Inventory Guidance for Owners and Operators, defines how cybersecurity professionals working in OT organizations across greenfield and brownfield deployments can use their asset inventories and other data sources to establish a continually updated “definitive record” of OT assets. This definitive record enables organizations to assess risks holistically and apply proportionate, effective protections across their environments.

Integrators and device manufacturers can also use these principles to ensure their solutions enable effective asset and configuration management.