How the 2022 National Defense Authorization Act (NDAA) Impacts ICS/OT Cybersecurity

**Executive Summary:** This Dragos webinar recap explains how the FY2022 National Defense Authorization Act (NDAA) increases federal attention and requirements for ICS/OT cybersecurity—emphasizing ransomware assessment and deterrence, updates to the National Cyber Incident Response Plan and exercises, CISA’s CyberSentry continuous monitoring initiative, DoD mapping of mission-relevant cyber terrain, mandated OT visibility and training for cyber forces, and the need for public–private coordination; the piece also outlines Dragos capabilities (continuous monitoring, professional services, and training) to help organizations meet these new requirements.