Foundations for OT Cybersecurity: Asset Inventory Guidance for Owners and Operators
Publish Date
This guidance was developed to provide operational technology (OT) owners and operators across all critical infrastructure sectors with a systematic approach for creating and maintaining an OT asset inventory and supplemental taxonomy—essential for identifying and securing critical assets, reducing the risk of cybersecurity incidents, and ensuring the continuity of the organization's mission and services. By following the outlined process, organizations can enhance their overall security posture, improve maintenance and reliability, and ensure the safety and resilience of their OT environments. This guidance was created by CISA in partnership with:
- U.S. Environmental Protection Agency
- U.S. National Security Agency
- U.S. Federal Bureau of Investigation
- Australian Signals Directorate’s Australian Cyber Security Centre
- Canadian Centre for Cyber Security
- Germany’s Federal Office for Information Security
- Netherlands’ National Cyber Security Centre
- New Zealand’s National Cyber Security Centre