S
We know very little about what security controls and consequence reduction actions reduce the number and impact of incidents that includes an OT cyber component. Read that again. We have hypotheses. I have hypotheses, and wrote a book on the topic A Year In OT Security. It’s an approach of understanding your situation and prioritizing […]
Dale Peterson: ICS Security Catalyst (dale-peterson.com)
Dale Peterson asks: where is the evidence OT asset inventory reduces incidents?
We spent weeks chasing infected OT assets across global sites because we did not have one. After building it with ownership and criticality mapped, the same scenario took minutes.
Asset inventory did not prevent the malware. It made timely incident response possible at enterprise scale. In a global organisation with separate IT, OT, and outsourced teams, you cannot coordinate a response without knowing what you have, who owns it, and what it means to the business.
Some controls lack published incident statistics not because they are unproven, but because their value sits in operational coordination, not prevention.
#OTSecurity #IncidentResponse #AssetManagement #CyberSecurity
