OT Defense Review

OT Defense Reviewhttps://otdefensereview.com/2026-07-19T12:00:00.000ZThe EU Cyber Resilience Act reaches its first 2026 application milestoneshttps://otdefensereview.com/news/eu-cra-application-milestones-2026/2026-07-19T12:00:00.000Z2026-07-19T12:00:00.000ZOT Defense Review Research Desk

Notified-body provisions began applying in June 2026 and vulnerability-reporting provisions follow in September, while the regulation's general application remains December 2027.

Accenture agrees to take a majority stake in Dragos and acquire runZero and NetRisehttps://otdefensereview.com/news/accenture-agrees-dragos-runzero-netrise-transactions-2026/2026-06-18T13:00:00.000Z2026-06-18T13:00:00.000ZOT Defense Review Research Desk

The June 2026 announcement would combine OT threat detection, asset intelligence, firmware analysis, services, and a large integrator—creating immediate product-boundary, data, neutrality, and roadmap questions.

ServiceNow completes its acquisition of Armishttps://otdefensereview.com/news/servicenow-completes-armis-acquisition-2026/2026-04-20T13:00:00.000Z2026-04-20T13:00:00.000ZOT Defense Review Research Desk

The April 2026 close moves a major cyber-asset intelligence platform inside ServiceNow and puts asset identity, exposure, workflow, data use, packaging, and remediation ownership on the diligence agenda.

Dragos publishes its 2026 OT cybersecurity year in reviewhttps://otdefensereview.com/news/dragos-publishes-2026-ot-year-in-review/2026-02-17T13:00:00.000Z2026-02-17T13:00:00.000ZOT Defense Review Research Desk

The provider's annual report supplies threat, vulnerability, ransomware, assessment, and incident-response observations—but its populations and methods must remain attached to every reported number.

NIST opens the SP 800-82 Rev. 4 pre-draft processhttps://otdefensereview.com/news/nist-opens-sp-800-82-r4-predraft-process/2026-01-22T13:00:00.000Z2026-01-22T13:00:00.000ZOT Defense Review Research Desk

The January 2026 notice begins a revision of the central U.S. OT security guide while leaving Rev. 3 as the current final publication.

IEC publishes guidance for applying the 62443 series to IIoThttps://otdefensereview.com/news/iec-publishes-62443-1-6-for-iiot/2025-12-19T13:00:00.000Z2025-12-19T13:00:00.000ZOT Defense Review Research Desk

IEC PAS 62443-1-6:2025 addresses changed communication channels and organizational models without treating IIoT as a separate security universe.

CISA releases eleven industrial-control-system advisories in one September batchhttps://otdefensereview.com/news/cisa-releases-eleven-ics-advisories-september-2025/2025-09-11T13:00:00.000Z2025-09-11T13:00:00.000ZOT Defense Review Research Desk

The release spans multiple Siemens and Schneider Electric product families and demonstrates why asset identity, version, vendor guidance, exposure, process consequence, and maintenance feasibility must stay connected.

CISA and international partners publish OT asset inventory guidancehttps://otdefensereview.com/news/cisa-partners-release-ot-asset-inventory-guidance/2025-08-13T13:00:00.000Z2025-08-13T13:00:00.000ZOT Defense Review Research Desk

The joint guide raises the baseline from a discovered device list to a maintained inventory and taxonomy connected to function, criticality, risk, architecture, and response.

FERC approves NERC CIP-015-1 for internal network security monitoringhttps://otdefensereview.com/news/ferc-approves-nerc-cip-015-1/2025-06-26T13:00:00.000Z2025-06-26T13:00:00.000ZOT Defense Review Research Desk

Order No. 907 creates a concrete network-data, anomaly-detection, evaluation, escalation, and evidence decision for covered bulk-power-system environments.

CISA and partners publish primary mitigations for exposed OThttps://otdefensereview.com/news/cisa-partners-publish-primary-ot-mitigations/2025-05-06T13:00:00.000Z2025-05-06T13:00:00.000ZOT Defense Review Research Desk

The May 2025 fact sheet emphasizes internet exposure, credentials, remote access, segmentation, inventory, monitoring, and recovery without turning public guidance into a site-specific response plan.

IEC publishes a security-protection-scheme specification for IACS asset ownershttps://otdefensereview.com/news/iec-publishes-62443-2-2-security-protection-scheme/2025-03-11T13:00:00.000Z2025-03-11T13:00:00.000ZOT Defense Review Research Desk

IEC PAS 62443-2-2:2025 organizes technical, physical, and process measures as a maintained protection scheme rather than a disconnected catalog of security products.

CISA partners publish Secure by Demand guidance for OT buyershttps://otdefensereview.com/news/cisa-partners-publish-secure-by-demand-for-ot-buyers/2025-01-13T13:00:00.000Z2025-01-13T13:00:00.000ZOT Defense Review Research Desk

The guide puts secure configuration, identity, logging, vulnerability handling, updates, support, and buyer evidence into product selection rather than leaving them for post-purchase remediation.