OT Segmentation Validation
Summary: Dragos reports that 81% of its architecture reviews found poor IT/OT segmentation, and its Segmentation product reads firewall, router, and switch configurations from more than 25 vendors to map which zones are permitted to communicate and trace each permitted path to the exact rule and source file behind it. The product, an evolution of NP-View following Dragos's 2024 acquisition of Network Perception, generates Segmentation, Best Practice, and NERC CIP-005 PDF reports from current configurations and runs on a Dragos SiteStore without sensors or traffic on the OT network.
Key Takeaway: With 81% of reviewed architectures showing poor IT/OT segmentation, the boundary most organizations assume they have is often not the one their configurations enforce - and Dragos notes FERC approved CIP-015-2 in August 2026, extending internal monitoring to EACMS and PACS, which only means something if you know what traffic is supposed to be there.
Read the original at Dragos Blog ↗
- Topics
- OT / ICS & Critical Infrastructure
- Related
- Siemens RUGGEDCOM APE1808 Cyber Risks · Nov 12, 2026How to Assess OT Incident Response Preparedness Cyber Risks · Nov 10, 2026Three China-Nexus Espionage Campaigns Linked Through Sparrow Malware Ecosystem Cyber Risks · Nov 10, 2026