D
Dan Ricci
2
APPEARANCES
2
PODCASTS
012
DEC 30
JAN 6
JAN 13
JAN 20
JAN 27
FEB 3
FEB 10
FEB 17
FEB 24
MAR 3
MAR 10
MAR 17
MAR 24
MAR 31
APR 7
APR 14
APR 21
APR 28
MAY 5
MAY 12
MAY 19
MAY 26
JUN 2
JUN 9
JUN 16
JUN 23
JUN 30
JUL 7
JUL 14
JUL 21
JUL 28
AUG 4
AUG 11
AUG 18
AUG 25
SEP 1
SEP 8
SEP 15
SEP 22
SEP 29
OCT 6
OCT 13
OCT 20
OCT 27
NOV 3
NOV 10
NOV 17
NOV 24
DEC 1
DEC 8
DEC 15
DEC 22
DEC 29
JAN 5
JAN 12
JAN 19
JAN 26
FEB 2
FEB 9
FEB 16
FEB 23
MAR 2
MAR 9
MAR 16
MAR 23
MAR 30
APR 6
APR 13
APR 20
APR 27
MAY 4
MAY 11
MAY 18
MAY 25
JUN 1
JUN 8
JUN 15
JUN 22
JUN 29
JUL 6
JUL 13
JUL 20
JUL 27
AUG 3
AUG 10
AUG 17
AUG 24
AUG 31
SEP 7
SEP 14
SEP 21
SEP 28
OCT 5
OCT 12
OCT 19
OCT 26
NOV 2
NOV 9
Jul 2, 2026
Dan Ricci on OT/CPS Visibility and Risk Reduction
1:25
1:44
1:52
1:57
2:13
M
1:21MichaelHOST
How do you view the two in terms of differences?

Dan RicciGUEST
Well, an asset list is your basic enumeration of your devices, the IP addresses assigned to those devices if they're assigned static IP addresses, the physical location, device type, whether it's PLC, HMI, historian, vendor model.

Dan RicciGUEST
But when you start to get into the asset inventory side, that starts to have a highly more complex contextual data.

Dan RicciGUEST
Now we're looking at, you know, the firmware and software version is associated with it.

Dan RicciGUEST
Are there specific advisories, vendor vulnerability advisories attached to that that are applicable to that asset? Are they been patched or not, right? What the patched asset are, or they're not going to patch it.

Dan RicciGUEST
What are the compensated controls that are in place to protect it? What is the communications relationship between that asset, you know, the data flow? between that device and the rest of the OT environment, whether it's communicating with another PLC or communicates only directly with the SCADA server.
7 MINS LATER
M
9:48MichaelHOST
and so just kind of as a last thought i mean how do you how continuous is this in terms of as a process as an exercise how do you keep it from being just kind of a point in time thing that really isn't useful how how just give me some advice on that in that direction
Dan Ricci on OT/CPS Visibility and Risk Reduction
1:25
1:44
1:52
1:57
2:13
9:48

Dan RicciGUEST
Well, an asset list is your basic enumeration of your devices, the IP addresses assigned to those devices if they're assigned static IP addresses, the physical location, device type, whether it's PLC, HMI, historian, vendor model.

Dan RicciGUEST
But when you start to get into the asset inventory side, that starts to have a highly more complex contextual data.

Dan RicciGUEST
Now we're looking at, you know, the firmware and software version is associated with it.

Dan RicciGUEST
Are there specific advisories, vendor vulnerability advisories attached to that that are applicable to that asset? Are they been patched or not, right? What the patched asset are, or they're not going to patch it.

Dan RicciGUEST
What are the compensated controls that are in place to protect it? What is the communications relationship between that asset, you know, the data flow? between that device and the rest of the OT environment, whether it's communicating with another PLC or communicates only directly with the SCADA server.
7 MINS LATER

Mike MimosoHOST
and so just kind of as a last thought i mean how do you how continuous is this in terms of as a process as an exercise how do you keep it from being just kind of a point in time thing that really isn't useful how how just give me some advice on that in that direction