Rethinking Visibility: The Challenges of Passive Network-Based Monitoring in OT Cybersecurity
In OT cybersecurity, passive network-based monitoring is often considered essential for visibility. However, this approach has notable limitations, from incomplete insights on device details to the complexity of monitoring lower-level traffic. Additionally, it isn’t as risk-free as some claim. While useful, passive monitoring should be viewed as a complementary tool, not the main line of defense for securing industrial control systems.