Patch management in an operational technology (OT)/industrial control system (ICS) setting is full of challenges. From proprietary hardware and software to a lack of staff, inadequate or non-existent testing equipment, and regulatory reporting and system maintenance, many organizations struggle to determine what is in scope. This results in unpatched systems, lack of visibility to risk status, compliance fines, significant labor costs, or , worst of all, shut downs due to unplanned IT patching of OT systems.
To combat the challenges with OT vulnerability and patch management, Verve Industrial developed a comprehensive approach to optimize the OT patch management process. This whitepaper outlines some of the challenges and how we have helped clients address them with a “Think Global: Act Local” approach to vulnerability and patch management of OT systems.