CISA Launches Program to Secure Internet-Exposed OT Assets

• •CISA's Installed Base Program targets vulnerable internet-exposed OT assets.
• •The program helps identify asset owners using open-source tools and subpoenas.
• •Thousands of vulnerable assets have been secured through CISA's notifications.

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has launched the Installed Base Program to assist original equipment manufacturers (OEMs) in identifying and securing vulnerable operational technology (OT) assets exposed to the internet. This initiative aims to address the challenge of identifying asset ownership, as publicly available data typically only reveals the internet service provider (ISP) associated with these assets. By leveraging open-source scanning tools and its administrative subpoena authority, CISA can identify and notify organizations operating these vulnerable assets. The program has already helped remove thousands of vulnerable assets from internet exposure, and participating OEMs have reported significant reductions in such assets. CISA's efforts focus on building partnerships, sharing actionable information, and providing mitigation guidance to enhance cybersecurity across critical infrastructure sectors.