Cyber Risks · Dragos Blog

Defining xOT: What Is Extended Operational Technology?

Summary: Dragos announced Extended Operational Technology, or xOT, defined as every system, regardless of classification, ownership, or protocol, that can influence a control loop or physical process. The company argues that device-type categories miss context, citing a Windows-based human-machine interface that controls a physical process but is inventoried, patched, and managed as an IT asset.

Key Takeaway: Dragos states that an AI-assisted adversary can map an internal environment, identify OT-adjacent infrastructure, and develop a targeted access path in hours rather than days, and that the systems most likely to fall outside an OT program's scope are analytics platforms, building automation, and remote access infrastructure.

Read the original at Dragos Blog ↗

Topics
OT / ICS & Critical Infrastructure
Related
Siemens RUGGEDCOM APE1808 Cyber Risks · Nov 12, 2026