OT Cybersecurity Best Practices for SMBs: How to Implement Change Management

This monthly Dragos OT-CERT blog provides practical OT cybersecurity guidance for small and medium businesses, emphasizing the importance of a structured change management process. It outlines recommended tracker attributes (unique change ID, change manager, description, notifications, stakeholders, testing pass/fail, implementation and completion dates, and notes), explains testing and production workflows, and directs readers to downloadable templates and free OT-CERT resources to help under-resourced organizations build or improve their OT security programs.