{"version":"0.12.1","built_at":"2026-10-12T10:56:26.035Z","license":"CC BY 4.0 © Mike Reams","canonical":"https://catalog.mikereams.com","category":{"id":"TR-130.30","name":"OT & ICS Security","description":"Security controls specific to control networks, which must protect equipment that cannot be patched or scanned like IT systems.","aliases":["OT Security","ICS Security","Industrial Cybersecurity","IEC 62443"],"in_scope":["Passive monitoring of control-network traffic","OT asset discovery and inventory","Zone and conduit segmentation","Protocol-aware firewalls and data diodes"],"out_of_scope":["Enterprise security event monitoring and response (see TR-100.40)","Identity and privileged access (see TR-100.20)"],"capability_ids":["BC-1580.40","BC-1580.40.10"],"examples":["IEC 62443","Claroty","Nozomi Networks","Dragos"],"domain_id":"TR-130","domain":"Operational Technology","page_url":"https://catalog.mikereams.com/technology/TR-130.30","business_capabilities":[{"id":"BC-1580.40","name":"Critical Infrastructure Protection Compliance"},{"id":"BC-1580.40.10","name":"Covered Asset Categorization"}],"technology_ids":[]},"domain":{"id":"TR-130","name":"Operational Technology","description":"The systems that monitor and control physical processes in real time, in plants and across networks, and the communications and security they depend on.","category_ids":["TR-130.10","TR-130.20","TR-130.30","TR-130.40"],"page_url":"https://catalog.mikereams.com/technology#TR-130"},"technologies":[]}