CISA-led OT asset inventory guidance for critical infrastructure operators
Defensive Guidance
Summary
Hide ▲
Show ▼
Cybersecurity agencies from the United States, Canada, Australia, New Zealand, the Netherlands, Germany, and the United Kingdom published follow-up guidance for OT owners and operators on building and maintaining continually updated definitive records of their systems. The document explains how to use asset inventories, SBOMs, and other data sources to assess risk, document connectivity, and manage third-party exposure. It matters because the guidance says teams cannot effectively detect vulnerabilities or respond to incidents without a clear view of what assets exist and how they are connected.
Related Happenings
CISA April 7 Rockwell Automation/Allen-Bradley PLC mitigation advisory
Advisory/Mitigation
First: 08.04.2026 11:15
Last: 08.04.2026 11:15
Sources 1
About this happening:
**CISA** and authoring agencies issued **April 7** mitigation guidance for **internet-facing OT assets**, warning that **US critical infrastructure** operators using **Rockwell Au...
CISA April 7 Rockwell Automation/Allen-Bradley PLC mitigation advisory
Advisory/MitigationAbout this happening: **CISA** and authoring agencies issued **April 7** mitigation guidance for **internet-facing OT assets**, warning that **US critical infrastructure** operators using **Rockwell Au...
CISA Emergency Directive 26-03 for Cisco SD-WAN
Public Sector Action
First: 25.02.2026 14:00
Last: 25.02.2026 14:00
Sources 1
About this happening:
**CISA** issued **Emergency Directive 26-03** and supplemental guidance to force immediate remediation of **Cisco SD-WAN** vulnerabilities across **Federal Civilian Executive Bran...
CISA Emergency Directive 26-03 for Cisco SD-WAN
Public Sector ActionAbout this happening: **CISA** issued **Emergency Directive 26-03** and supplemental guidance to force immediate remediation of **Cisco SD-WAN** vulnerabilities across **Federal Civilian Executive Bran...
CISA releases secure OT communications guide
Public Sector Action
First: 10.02.2026 14:00
Last: 10.02.2026 14:00
Sources 1
About this happening:
CISA released **Barriers to Secure OT Communications: Why Johnny Can’t Authenticate**, a new guide meant to help **OT owners and operators** adopt **secure communications** and re...
CISA releases secure OT communications guide
Public Sector ActionAbout this happening: CISA released **Barriers to Secure OT Communications: Why Johnny Can’t Authenticate**, a new guide meant to help **OT owners and operators** adopt **secure communications** and re...
CISA end-of-support edge device decommissioning mandate (BOD 26-02)
Advisory/Mitigation
First: 06.02.2026 10:41
Last: 06.02.2026 10:41
Sources 1
About this happening:
CISA's **BOD 26-02** now forces **U.S. federal agencies** to inventory, decommission, and replace **end-of-support edge devices** that no longer receive security updates. The dire...
CISA end-of-support edge device decommissioning mandate (BOD 26-02)
Advisory/MitigationAbout this happening: CISA's **BOD 26-02** now forces **U.S. federal agencies** to inventory, decommission, and replace **end-of-support edge devices** that no longer receive security updates. The dire...
CISA orders federal agencies to remediate end-of-support edge devices
Public Sector Action
First: 05.02.2026 14:00
Last: 05.02.2026 14:00
Sources 1
About this happening:
**CISA** issued **Binding Operational Directive 26-02** to require **FCEB agencies** to inventory, update, and remove **end-of-support edge devices** within a specified timeframe....
CISA orders federal agencies to remediate end-of-support edge devices
Public Sector ActionAbout this happening: **CISA** issued **Binding Operational Directive 26-02** to require **FCEB agencies** to inventory, update, and remove **end-of-support edge devices** within a specified timeframe....
Timeline
-
13.08.2025 15:00 2 articles · 9mo ago
CISA-led OT asset inventory guidance release
Industry Or Public Sector UpdateCISA and partner agencies released new guidance for operational technology owners and operators across critical infrastructure sectors to create and maintain comprehensive OT asset inventories and taxonomies, with the goal of improving asset visibility, reducing compromise risk, and supporting operational resilience and continuity of services.
Show sources
- CISA and Partners Release Asset Inventory Guidance to Strengthen Operational Technology Security — www.cisa.gov — 13.08.2025 15:00
- New Guidance Calls on OT Operators to Create Continually Updated System Inventory — www.securityweek.com — 30.09.2025 15:06