Water-treatment OT controllers and office laptops share a vulnerability management program. How should patching be handled?
Select an answer to reveal the explanation.
Short Explanation
Laptops and pump controllers do not live on the same patch calendar. Prioritize by risk, push what you can, and formally track OT exceptions when you cannot move fast. Blind OT reboots at peak flow are how availability becomes the incident.
Full Explanation
Patch and vulnerability management prioritize remediation by risk while recognizing that OT and other constrained systems may require compensating controls and documented exceptions. Reckless identical treatment of OT without change consideration can cause safety or availability harm, while ignoring IT endpoints or vendor advisories leaves known weaknesses open. Exception tracking is part of responsible operations.