FORT MEADE, Md. - The National Security Agency (NSA) is joining the Cybersecurity and Infrastructure Security Agency (CISA) and others to release the Cybersecurity Technical Report (CTR), “Foundations for OT Cybersecurity: Asset Inventory Guidance for Owners and Operators.”
As a vital part of critical infrastructure, operational technology (OT) is often targeted by malicious cyber actors seeking to degrade our way of life, disrupt or destroy systems and services, or conduct nefarious activities such as extortion. This guidance outlines the process to create an OT asset inventory, develop a taxonomy of OT systems, and create a modern defensible architecture by providing net defenders with digestible foundational elements and best practices.
Using the processes outlined, organizations are encouraged to build an asset inventory to aid in risk identification, vulnerability management, and incident response. Additionally, the CTR details steps OT owners and operators should take to best use, maintain, and improve their asset inventory to protect vital assets, enhance their overall security posture, and ensure the safety of their OT environments.
This is especially relevant in defending the operation OT systems and services across National Security Systems (NSS), the Department of Defense (DoD), and the Defense Industrial Base (DIB).
Read the full report here.
Visit our full library for more cybersecurity information and technical guidance.
NSA Media Relations
MediaRelations@nsa.gov
443-634-0721