Selected Node
OT Assessment
oticsmethodology
Purpose
Perform OT/ICS assessment using safety-first scoping, passive discovery, approved active discovery, protocol awareness, architecture review, attack-path mapping, and operational-impact reporting.
Why It Matters
OT assessments are not normal IT pentests. Availability, safety, process integrity, and operational impact matter more than exploit volume.
If You See This
- •Industrial environment.
- •Production/safety constraints.
- •ICS protocols.
- •Engineering workstations, historians, PLCs, HMIs, or jump hosts.
Rabbit Holes
- •Aggressive scanning against fragile assets.
- •Treating PLCs like normal servers.
- •Ignoring process impact.
- •Jumping to exploitation without safety approval.
Evidence to Capture
- •Scope
- •Rules of engagement
- •Critical assets
- •Safety constraints
- •Testing windows