Stay Ahead of Drift Across Your xOT Environment
Summary: Dragos introduced a configuration drift report that tracks the gap between an organization's approved device settings and what is actually running, drawing on a single device record built from more than 2 million devices across 1,341 vendors, 84 device types, and 4,748 configuration fields. The report covers devices from IP cameras and printers to PLCs, controllers, routers, and switches, and maps policies to NERC CIP, IEC 62443 Part 4-2, NIST SP 800-53 Rev. 5, CIS Controls v8, NIS2, the HIPAA Security Rule, and PCI DSS v4.0.
What you should know: Adversaries probe constantly for the open port nobody closed, the default credential nobody rotated, and the setting nobody reset after maintenance, while most organizations check on a schedule of once a quarter or once a year. A PLC left in program mode after a maintenance window trips no alarm, and that gap stays open until someone finds it first.
Read the original at Dragos Blog ↗
- Topics
- OT / ICS & Critical Infrastructure
- Related
- Siemens RUGGEDCOM APE1808 Cyber Risks · Nov 12, 2026How to Assess OT Incident Response Preparedness Cyber Risks · Nov 10, 2026Three China-Nexus Espionage Campaigns Linked Through Sparrow Malware Ecosystem Cyber Risks · Nov 10, 2026