Vulnerability management

Vulnerability management is the ongoing process of identifying, assessing, and addressing known weaknesses (tracked as CVEs, Common Vulnerabilities and Exposures) in a system before an attacker can exploit them. It's substantially harder in OT than in IT: patching a control system often requires taking it offline, which can mean halting a physical process, and many OT devices run for decades on hardware and software that vendors no longer actively update.