top of page
OT Knowledge Hub
Plain-language guides to OT and ICS security: how industrial systems work, the standards that apply, and the lessons from real-world attacks. Browse by topic below.
Why Passive-First Assessments Are the Safe Way to Look at OT Networks
Active scanning can upset fragile control devices. Here is why passive-first assessments are the safer way to understand an OT network.
Remote Access: The Number One Way Into OT
Vendor VPNs, shared accounts and ad hoc remote tools are a common way into OT. Here is how to bring remote access under control.
You Can't Protect What You Can't See: Building an OT Asset Inventory
An accurate OT asset inventory underpins vulnerability management, segmentation and incident response. Here is how to build one and keep it current.
Patching in OT: Compensating Controls When You Can't Patch
Patching OT systems is slow and sometimes impossible. Here is how to prioritize by risk and use compensating controls to reduce exposure meanwhile.
Network Segmentation for OT Without Stopping Production
A phased, low-risk approach to segmenting an OT network, from mapping real traffic flows to enforcing firewall rules without disrupting operations.
Incident Response for OT: Why Your IT Playbook Won't Work
Isolate, wipe and restore works in IT. On the plant floor, safety, operations and evidence come first. Here is how to build an OT-ready response plan.
PLC and HMI Backups: The Forgotten Part of Resilience
Control system backups are often incomplete, untested or missing. Here is what to back up, how to protect it and how to know you can actually recover.
Insider Risk in OT: USB Drives, Laptops and Maintenance Windows
Most insider incidents in OT are accidents, not sabotage. Here is how to manage USB drives, contractor laptops and maintenance windows sensibly.
bottom of page