How to Prioritize Vulnerabilities in Your OT Environment with Risk-Based Vulnerability Management

This Dragos advisory promotes a risk-based approach to managing OT vulnerabilities, highlighting challenges unique to OT (legacy systems, continuous uptime, mixed IT/OT environments) and providing prioritized guidance for asset inventory, network mapping, vulnerability correlation, compensating controls, and monitoring. The document lists several sector-specific CVEs affecting electric, manufacturing, and oil & gas organizations and directs readers to infographics and a playbook for implementing risk-based vulnerability management.