Skip to main content

Dan Ricci

Jul 2, 2026

MichaelHOST
1:21
How do you view the two in terms of differences?
1:25
Well, an asset list is your basic enumeration of your devices, the IP addresses assigned to those devices if they're assigned static IP addresses, the physical location, device type, whether it's PLC, HMI, historian, vendor model.
1:44
But when you start to get into the asset inventory side, that starts to have a highly more complex contextual data.
1:52
Now we're looking at, you know, the firmware and software version is associated with it.
1:57
Are there specific advisories, vendor vulnerability advisories attached to that that are applicable to that asset? Are they been patched or not, right? What the patched asset are, or they're not going to patch it.
2:12
That's fine too.
2:13
What are the compensated controls that are in place to protect it? What is the communications relationship between that asset, you know, the data flow? between that device and the rest of the OT environment, whether it's communicating with another PLC or communicates only directly with the SCADA server.

7 MINS LATER

MichaelHOST
9:48
and so just kind of as a last thought i mean how do you how continuous is this in terms of as a process as an exercise how do you keep it from being just kind of a point in time thing that really isn't useful how how just give me some advice on that in that direction
1:21
How do you view the two in terms of differences?
1:25
Well, an asset list is your basic enumeration of your devices, the IP addresses assigned to those devices if they're assigned static IP addresses, the physical location, device type, whether it's PLC, HMI, historian, vendor model.
1:44
But when you start to get into the asset inventory side, that starts to have a highly more complex contextual data.
1:52
Now we're looking at, you know, the firmware and software version is associated with it.
1:57
Are there specific advisories, vendor vulnerability advisories attached to that that are applicable to that asset? Are they been patched or not, right? What the patched asset are, or they're not going to patch it.
2:12
That's fine too.
2:13
What are the compensated controls that are in place to protect it? What is the communications relationship between that asset, you know, the data flow? between that device and the rest of the OT environment, whether it's communicating with another PLC or communicates only directly with the SCADA server.

7 MINS LATER

9:48
and so just kind of as a last thought i mean how do you how continuous is this in terms of as a process as an exercise how do you keep it from being just kind of a point in time thing that really isn't useful how how just give me some advice on that in that direction

We value your privacy

We use cookies to understand how you use our platform and to improve your experience. Click “Accept All” to consent, or “Decline non-essential” to opt out of non-essential cookies. Read our Privacy Policy.