Cybersecurity Database

Guideline / framework / standard

Foundations for OT Cybersecurity: Asset Inventory Guidance for Owners and Operators

In force since 13 August 2025Record checked against the official source on 28 October 2026 · Methodology

Official source: https://www.cisa.gov/resources-tools/resources/foundations-ot-cybersecurity-asset-inventory-guidance-owners-and-operators

Official sourceDownload PDF (official source)
Date adopted

Summary

The CISA guide, co-sealed with NSA, EPA, FBI and the agencies of Australia, Canada, Germany, the Netherlands and New Zealand, explains to OT owners and operators how to build and maintain an asset inventory, the basis of any defensible architecture. It sets out a five-step process: define scope and objectives, identify assets and collect attributes (location, protocols, firmware, criticality, connections), create a taxonomy by function and criticality, manage and verify the data, and keep the inventory up to date. It includes example taxonomies for oil and gas, electricity and water, and draws on the zones and conduits concepts of the ISA/IEC 62443 series.

Information

Jurisdiction
United States
Issuing body
Cybersecurity and Infrastructure Security Agency (CISA)
Type
Guideline / framework / standard
Available languages
English
Topics
Notes
Joint guidance also co-sealed by agencies of other allied countries.
Related technical standards

Record details

Original title
Foundations for OT Cybersecurity: Asset Inventory Guidance for Owners and Operators
Title in other languages
  • Fondamenti di cybersecurity OT: guida all’inventario degli asset per proprietari e gestori
  • Fondamentaux de la cybersécurité OT : guide d’inventaire des actifs pour les propriétaires et exploitants
  • Fundamentos de la ciberseguridad OT: guía de inventario de activos para propietarios y operadores
  • Grundlagen der OT-Cybersicherheit: Leitfaden zur Bestandsaufnahme der Assets für Eigentümer und Betreiber
Licence / terms of use
Public domain / official act – US federal government publication (TLP:CLEAR), not subject to copyright in the United States.
Collected from
manual entry
Last verified
(verified via web)

How to cite

APA

Cybersecurity and Infrastructure Security Agency (CISA). (2025). Foundations for OT Cybersecurity: Asset Inventory Guidance for Owners and Operators. https://www.cisa.gov/resources-tools/resources/foundations-ot-cybersecurity-asset-inventory-guidance-owners-and-operators

Chicago

Cybersecurity and Infrastructure Security Agency (CISA). "Foundations for OT Cybersecurity: Asset Inventory Guidance for Owners and Operators." 13 August 2025. https://www.cisa.gov/resources-tools/resources/foundations-ot-cybersecurity-asset-inventory-guidance-owners-and-operators.

BibTeX

@misc{us_cisa_ot_asset_inventory_guidance_2025,
  author       = {{Cybersecurity and Infrastructure Security Agency (CISA)}},
  title        = {{Foundations for OT Cybersecurity: Asset Inventory Guidance for Owners and Operators}},
  year         = {2025},
  url          = {https://www.cisa.gov/resources-tools/resources/foundations-ot-cybersecurity-asset-inventory-guidance-owners-and-operators},
  urldate      = {2026-10-28}
}

Metadata and summary: CC BY 4.0 · JSON