Topic starter
23/10/2026 12:45 am
TL;DR: Most organisations still confuse asset lists and network diagrams with real OT visibility, leaving firmware, credentials, configuration changes, and supply chain weaknesses outside effective control, according to Dragos. For practitioners, the issue is no longer discovery alone but whether exposure management spans IT, cloud, IoT, and compiled software risk before incidents become operational failures.
Editorial analysis by NHI Mgmt Group, based on content published by Dragos: “Visibility Was Never the Finish Line”.
Key questions
Q: What breaks when OT asset inventory is incomplete?
A: Incomplete OT asset inventory breaks segmentation, vulnerability prioritisation, and incident response because security teams cannot reliably tell which devices exist, where they are, or what they connect to.
Q: Why do hidden credentials and access paths increase xOT risk?
A: Because process impact is often created by who can change devices, not just which devices exist.
Q: What signs show OT visibility is still incomplete?
A: Common signs include unknown assets, stale spreadsheets, missing firmware data, and a gap between what the network team sees and what the process owners can explain.
Practitioner guidance
- Expand asset discovery into exposure management Track firmware version, patch level, configuration drift, and operator access alongside make and model so asset records support risk decisions.
- Map xOT identities and credentials Inventory service accounts, embedded credentials, and administrative touchpoints that can alter PLCs, HMIs, and connected devices.
- Add software and firmware assurance Use SBOMs, binary analysis, and provenance checks to identify unsafe dependencies and hidden code paths before deployment.
Bottom line: OT visibility fails when teams stop at inventory and network diagrams, because the real exposure is also in firmware, access, and configuration.
Explore further
View Full Forum → | NHI Foundation Course → | Our Services → | Read the full analysis →