OT Cybersecurity Best Practices for SMBs: Identity and Access Management in OT

### Executive Summary: This Dragos OT-CERT blog provides practical IAM guidance for OT environments, detailing the four IAM pillars (Identity Lifecycle Management, Access Control, Authentication and Authorization, and Identity Governance), offering OT-specific examples and recommendations (e.g., service-account handling, role-based access, MFA, conditional access, and enhanced auditing), and promoting free toolkits and resources targeted at under-resourced SMBs to improve their OT cybersecurity posture.