Truth in IT
    • Sign In
    • Register
        • Videos
        • Channels
        • Pages
        • Galleries
        • News
        • Events
        • All
Truth in IT Truth in IT
  • Data Management ▼
    • Converged Infrastructure
    • DevOps
    • Networking
    • Storage
    • Virtualization
  • Cybersecurity ▼
    • Application Security
    • Backup & Recovery
    • Data Security
    • Identity & Access Management (IAM)
    • Zero Trust
    • Compliance & GRC
    • Endpoint Security
  • Cloud ▼
    • Hybrid Cloud
    • Private Cloud
    • Public Cloud
  • Webinar Library
  • TiPs
  • DRAW

Why OT Security Requires a Different Approach Than IT

Forescout
04/14/2026
0 (0%)
Share
  • Comments
  • Download
  • Transcript
Report Like Favorite
  • Share/Embed
  • Email
Link
Embed

Transcript


fresh water, or the hospital you go to for a checkup is run on equipment that you can't even install antivirus on? It could be a camera, an MRI machine, or a system of actuators, sensors, and valves connected to an ancient computer that monitors how much bacteria there is in the water supply and how to clean it for our consumption. Our modern world is powered by this type of highly specialized equipment. These devices, once deployed, are not often updated, and as a result, many of them have vulnerabilities or fragile, sensitive network stacks. Forescout research for Dairy Labs has shown that these vulnerabilities can be exploited, and the only way to secure them is to understand where they are and partition or segment them on your network so that it only talks to known, good, necessary services. At Forescout, we passively find these and tell you what these devices are and what they're talking to. We selectively probe some of these with safe, active inspections, and this will tell us what these devices are and where they're connected to, and what they're communicating with, so that we can better identify the risks associated with these endpoints and detect any network-based threats. Whether the device is a sensor or an actuator at Purdue level zero, or it's controlling a workstation, Forescout can give you visibility into the entire OT stack and the relationship between these devices. See it, secure it, assure it.

TL;DR

  • Critical infrastructure like utilities and hospitals runs on specialized OT equipment that cannot support traditional security tools like antivirus software.
  • Many OT devices have known vulnerabilities and fragile network stacks because they are rarely updated after deployment.
  • Forescout uses passive discovery combined with safe active probing to identify OT devices and map their communication patterns across the network.

Summary

This explainer video addresses the unique security challenges facing operational technology environments in critical infrastructure. Forescout highlights that essential services like power utilities, water treatment facilities, and healthcare systems rely on specialized equipment that cannot accommodate traditional security tools such as antivirus software. These devices—ranging from MRI machines to industrial sensors and actuators—often run on legacy systems with known vulnerabilities and fragile network stacks. The video explains Forescout's approach to OT security, which combines passive discovery to identify devices and their communication patterns with selective active probing for deeper inspection. This methodology enables organizations to understand their complete OT asset inventory, map device relationships across the Purdue model from level zero sensors through control workstations, and implement network segmentation to isolate vulnerable devices from unnecessary services. The core message emphasizes that visibility across the entire OT stack is the foundation for effective security in environments where traditional endpoint protection simply cannot be deployed.

Chapters

0:00 - The OT Security Challenge
0:25 - Vulnerabilities in Critical Infrastructure
0:49 - Forescout's Discovery Approach
1:10 - Full OT Stack Visibility

Key Quotes

0:00 "Did you know the electricity that powers your home, or the water company that brings you fresh water, or the hospital you go to for a checkup is run on equipment that you can't even install antivirus on? ..."
0:40 "The only way to secure them is to understand where they are and partition or segment them on your network so that it only talks to known, good, necessary services."
1:22 "See it, secure it, assure it."

Categories:
  • » Webinar Library » Forescout
  • » Cybersecurity » Network Security
  • » Data Protection
Channels:
News:
Events:
Tags:
  • OT
  • IoT Security
  • Network Security
  • Getting Started
  • OT security
  • critical infrastructure protection
  • network segmentation
  • asset discovery
  • industrial control systems
  • Purdue model
  • vulnerability management
  • passive network monitoring
Show more Show less

Browse videos

  • Related
  • Featured
  • By date
  • Most viewed
  • Top rated
  •  

              Video's comments: Why OT Security Requires a Different Approach Than IT

              XStreaminars (watch here)

              • Sep
                03

                Verge.io: Can You Afford Your Next Storage Refresh?

                09/03/202601:00 PM ET
                More events

                Industry Events (Sponsor Hosted)

                • Sep
                  23

                  Understanding the Hidden Data Critical for Effective Protection

                  09/23/202601:00 PM ET
                  • Sep
                    29

                    Embracing AI Adoption While Prioritizing Security Concerns

                    09/29/202612:00 PM ET
                    More events

                    Upcoming Webinar Calendar

                    • 09/02/2026
                      12:00 PM
                      09/02/2026
                      Unified Data Security in Action: Uncover, Analyze, and Resolve Threats
                      https://www.truthinit.com/index.php/channel/2045/unified-data-security-in-action-uncover-analyze-and-resolve-threats/
                    • 09/03/2026
                      01:00 PM
                      09/03/2026
                      Verge.io: Can You Afford Your Next Storage Refresh?
                      https://www.truthinit.com/index.php/channel/2082/verge-io-can-you-afford-your-next-storage-refresh/
                    • 09/23/2026
                      01:00 PM
                      09/23/2026
                      Understanding the Hidden Data Critical for Effective Protection
                      https://www.truthinit.com/index.php/channel/2087/understanding-the-hidden-data-critical-for-effective-protection/
                    • 09/29/2026
                      12:00 PM
                      09/29/2026
                      Embracing AI Adoption While Prioritizing Security Concerns
                      https://www.truthinit.com/index.php/channel/2092/embracing-ai-adoption-while-prioritizing-security-concerns/
                    • 09/30/2026
                      04:00 AM
                      09/30/2026
                      AI Command Center: Optimizing Visibility and Control in Your Operations
                      https://www.truthinit.com/index.php/channel/2024/ai-command-center-optimizing-visibility-and-control-in-your-operations/
                    • 11/19/2026
                      01:00 PM
                      11/19/2026
                      360View: Govern, Secure & Recover Your Microsoft 365 Environment
                      https://www.truthinit.com/index.php/channel/2076/360view-govern-secure-recover-your-microsoft-365-environment/
                    Truth in IT
                    • Sponsor
                    • About Us
                    • Terms of Service
                    • Privacy Policy
                    • Contact Us
                    • Preference Management
                    Desktop version
                    Standard version