ICS Vulnerability Management demo

Which advisories affect our substations? Answered today. 1:15

What the demo shows

A system solution for OT security teams that matches ICS advisories to the assets you own.

Six agents read every national advisory and vendor bulletin as it lands, match each affected version range to the exact firmware installed, place the real exposures on a matrix of severity against exposure and draft a dated mitigation plan; the vulnerability management lead confirms and signs.

Transcript

  1. ICS Vulnerability Management matches control system advisories to the assets an OT team owns.
  2. Most vendor bulletins never reach the national feed, so real exposures are missed.
  3. At 6.52, Corvain publishes a critical RTU flaw.
  4. No national advisory yet.
  5. LENA runs the match.
  6. Of 212 RTUs, only 14 on firmware 3.2 are affected.
  7. The 14 move into the high-exposure cell, critical and reachable for the network.
  8. The exposure shows each substation, the open path, and a dated plan.
  9. Lean assigns firewalls restricted Thursday, firmware 3.2.7 in outages by December.
  10. Real exposures, named the same day, each with a dated plan an auditor can follow.
  11. Build on Botminds, agents, data, screens, and governance on one platform.

Transcribed from the film’s narration. Captions are on the player.