CISA is treating more ICS/SCADA vulnerabilities like IT vulnerabilities, with remediation deadlines that assume you can just patch. Here’s how to document compensating controls that hold up when you can’t.
Read MoreWhen You Can’t Patch the PLC: A Compensating-Controls Playbook for CISA’s KEV Push into OT
