The Challenges of Vulnerability Management in OT Environments
Summary: A SANS Institute study cited by Dragos found that more than 91% of organizations include on-premises IT assets in their existing or planned vulnerability programs, while just 23% do the same for OT assets. Dragos also reports that public vulnerability severity scores are often inaccurate, incomplete, and lack context, and that many organizations lack even a detailed inventory of their OT assets.
What's compelling: Roughly three-quarters of organizations are not managing vulnerabilities on the OT systems that control physical processes, and the public severity scores many teams rely on are, by Dragos's field validation, often wrong - so effort goes to the wrong flaws while the ones that matter go untracked.
Read the original at Dragos Blog ↗
- Topics
- OT / ICS & Critical Infrastructure
- Related
- Siemens RUGGEDCOM APE1808 Cyber Risks · Nov 12, 2026How to Assess OT Incident Response Preparedness Cyber Risks · Nov 10, 2026Three China-Nexus Espionage Campaigns Linked Through Sparrow Malware Ecosystem Cyber Risks · Nov 10, 2026