domains / families / security / performing-ot-network-security-assessment

performing-ot-network-security-assessment

separate

'This skill covers conducting comprehensive security assessments of Operational

When to use

• When conducting an initial security baseline of an OT/ICS environment for a new client
• When evaluating the security posture of a facility after an IT/OT convergence initiative
• When preparing for IEC 62443 or NERC CIP compliance audits
• When assessing risk following a merger or acquisition involving industrial facilities
• When investigating whether an OT network has been compromised or has unmonitored pathways to corporate IT

When not to use

• IT-only network assessments without OT components
• application-layer vulnerability scanning of IT web applications
• active exploitation of live OT systems without explicit authorization and safety controls

Skill page

Source