NOVEMBER: Asset Inventory And Metrics
You will tackle two topics this month: asset inventory and metrics. Hopefully you’ve learned that the common saying “you can’t protect what you don’t know” is wrong. It’s become an OT security mantra because the vast majority of OT security solution marketing money has been spent by companies that sell OT asset inventory products.
It is fair to say, “you can provide better protection if you know what you’re protecting”. This month you will learn and document the current status of your OT cyber asset inventory. And then you will document what you’re committing to achieve with your OT cyber asset inventory this year.
After you complete the asset inventory work, you’ll determine how you did in preventing OT cyber incidents from impacting key mission metrics last month and identify some additional metrics for this year.
Week 42: Evaluate OT Cyber Asset Inventory
Many OT security standards and guideline documents have creating an OT cyber asset inventory as one of the first tasks that should be tackled; one of the key critical controls. As you can tell from this book, I disagree with this. An OT cyber asset inventory is not a...
Week 43: Develop An OT Cyber Asset Inventory Plan
Creating an OT cyber asset inventory is not a one week task, and it may not be the right thing for you to do at this time. This week’s task is to determine what OT cyber asset inventory you are committed to achieving and maintaining over the next year, and, at a high...
Week 44: Identify OT Security’s Impact On Key Mission Metrics
You identified three to five of your company’s key mission metrics in Week 10 of last year. This week consider if any OT security incidents affected these key mission metrics in 2025. If possible, determine the percentage impact of the OT security incidents to all...
Week 45: Create And Track Leading Indicators
Warning: This is the most difficult task in this book for most people. OT cyber incidents and their consequences are lagging indicators. The bad event that caused the impact has already happened. While it is important to capture and present the information you...