The OT/ICS Security Assessment skill is designed for professionals involved in the security evaluation of Operational Technology (OT) and Industrial Control Systems (ICS). This skill provides a structured approach to assessing security within industrial environments, focusing on the Purdue model zoning, PLC/SCADA exposure, and industrial protocol discovery. It emphasizes a passive-first evaluation strategy to minimize risks during assessments, ensuring that operations are not disrupted while identifying vulnerabilities.

The skill outlines a clear workflow divided into phases that guide users through the assessment process. Starting with asset identification and zoning based on the Purdue model, it helps users create a comprehensive map of the industrial environment. Subsequent phases focus on passive and read-only techniques for gathering data, such as using Wireshark for traffic analysis and conducting offline audits of configuration files. This careful approach is crucial in environments where missteps can lead to physical hazards.

For security professionals, this skill is a valuable resource that combines best practices with specific tools and methodologies tailored for OT/ICS environments. It includes detailed instructions on what actions are permissible and emphasizes the importance of obtaining written authorization before proceeding with any active assessments. By adhering to the outlined safety rules and workflows, users can effectively identify and document vulnerabilities without compromising system integrity.

This skill is particularly suited for security engineers, penetration testers, and IT/OT convergence specialists who need to conduct thorough assessments while adhering to strict safety protocols. It is a practical tool for ensuring that security assessments are both effective and compliant with regulatory standards.