Tenable OT Security

Deploy and License Tenable OT Security

To deploy Tenable OT Security:

1. Install the Tenable OT Security appliance according to the steps outlined in the Tenable OT Security User Guide.

2. (Optional) If you want to pair your sensors with the Industrial Core Platform (ICP), install the OT Security Sensor according to the steps outlined in the Tenable OT Security User Guide.

To license Tenable OT Security:

Follow the OT Security License Workflow outlined in the Tenable OT Security User Guide.

Link Tenable OT Security to Tenable One

Once you have downloaded and licensed Tenable OT Security, you can link the application to Tenable One.

1. Generate a Tenable OT Security Linking Key and determine your Cloud Site according to the steps outlined in the Tenable Vulnerability Management User Guide. Copy and save this information to link the connector to Tenable One.

2. Integrate your Tenable OT Security appliance with Tenable One according to the steps outlined in the Tenable OT Security User Guide.

You can expect to see your Tenable OT Security data in Tenable One within the following timeframes:

• It can take up to 2 hours to see your OT data in Asset Inventory.

• It can take up to 4 hours to see your OT data in Lumin Exposure View.

Once the initial sync completes, Tenable OT Security automatically syncs OT data with Tenable One every hour.

Onboarding Milestones

Tenable suggests you complete the following milestones to ensure your success before proceeding with your Tenable One deployment process:

• In Asset Inventory:

  • Review your OT assets to understand the strategic nature of the interface as compared to other cloud products. This should help set your expectations on what features to use within Asset Inventory, and when.

  • Create a new dynamic tag for your OT assets, where:

    • Operator = Host System Type

    • Value = PLC

• In Lumin Exposure View:

  • Review the Operational Technology exposure card.

  • Configure the exposure view settings to seta customized card target, and to configure your Remediation SLA and SLA Efficiency based on your company policy.

  • Create a custom exposure card based on business context, and include the new tag you created in Asset Inventory.