Step one in improving your OT security: "Know what you have"
The need for OT security is becoming bigger and bigger because of the digitization and automation of production processes. You can’t secure what you don’t know you have, therefore having an accurate and up-to-date asset inventory is crucial.
- all electronic hardware equipment in your factory which is in one way or the other connected to your network
- also having a list of all software used in your factory and factory-supporting processes is considered a large plus
As for the form: you can surely start with a spreadsheet or some database, or use a dedicated tool for this.
There are multiple ways of creating and maintaining an asset inventory:
There are tools that can assist you in the creation of an asset inventory. In many cases, these passively and continuously scan your network for activity and create an inventory out of the acquired data. To enrich its data, it will also actively probe the discovered systems for more information using vendors’ own communication protocols. This allows for anomalies, such as unauthorized devices, to be detected immediately as well as high data quality with minimal risk for impact on production.