domains / families / security / performing-ot-vulnerability-scanning-safely

performing-ot-vulnerability-scanning-safely

separate

'Perform vulnerability scanning in OT/ICS environments safely using passive

When to use

• When conducting vulnerability assessments in OT environments with legacy controllers
• When implementing continuous vulnerability monitoring without impacting process availability
• When preparing for IEC 62443 or NERC CIP compliance audits requiring vulnerability data
• When evaluating risk-based patching priorities for OT assets
• When validating that compensating controls protect unpatched ICS devices

When not to use

• aggressive active scanning of production PLCs
• IT vulnerability scanning using standard Nessus profiles on OT networks
• penetration testing of live OT systems

Skill page

Source