Self-Reflection Time: The OSINT Collection Risk Framework

This Dragos guidance explains how publicly and semi-publicly available information (OSINT) can be leveraged by adversaries to target Industrial Control Systems (ICS) and outlines a structured, consequence-driven OSINT risk assessment framework for defenders, covering asset mapping, source identification, risk scoring, remediation actions, and cross-functional coordination to reduce the operationalization of exposed data.