domains / families / security / implementing-patch-management-for-ot-systems

implementing-patch-management-for-ot-systems

separate

'Implements a structured patch management program for OT/ICS environments

When to use

• When establishing a formal OT patch management program for the first time
• When responding to critical ICS-CERT advisories affecting deployed OT systems
• When preparing for NERC CIP-007-6 or IEC 62443 patch management compliance audits
• When planning patch deployment during limited maintenance windows in continuous operations
• When evaluating compensating controls for systems that cannot be patched

When not to use

• IT-only patch management without OT considerations
• emergency patching during active cyber incidents
• firmware upgrades that change PLC functionality

Skill page

Source