SOLUTION BRIEF (TRIPWIRE)

Bridging the IT/OT Cybersecurity Gap
Tripwire Enterprise and Asset Discovery Integrations
With notable industrial cyber events on the rise, the 2020s are shaping up to be achallenging time for operational technology (OT) operators concerned with thesafety, security, and compliance of their operational technology networks. To protect
their OT environments, everyone from plant managers to CISOs is facing increased
pressure to deploy effective cybersecurity solutions. However, professionals in thecybersecurity industry are continuously developing new technology to try to keep upwith advancements in illegal cyber activity, and there are a growing number of ways
to apply security controls to both your IT and OT environments.
Fortra's tried-and-true file integrity management (FIM) and security configuration
monitoring (SCM) suite, Tripwire® Enterprise, extends across both the IT and OT sidesof your organization. And in order to help organizations bridge the IT/OT gap, it now
integrates with other asset discovery and inventory solutions with specific industrial
use cases in mind.
Together, these integrated solutions provide organizations with advanced IT/OTKey Integration Benefits• Get alerted on
misconfigurations across IT andOT without risk to production• View one asset inventory thatcovers both IT and OT• Detect configuration drift for
both IT and OT• Leverage agentless monitoring
for IT devices within OTenvironments• Stay ahead of emerging
industrial compliance policy
mandates

asset inventory, vulnerability management, and other key controls required to keepindustrial systems secure and compliant. This integration mitigates cybersecurity and production risk for both IT and OT assets.

The IT/OT Challenge

Industrial environments are a complex mix of traditional IT assets (control system management server for example) as well as
unique industrial OT assets (PLCs, robots, conveyor systems, etc.). Bridging the IT/OT gap helps organizations gain budgetary andresource efficiencies in managing one combined asset inventory.
Traditionally, disparate network types like Ethernet and Fieldbus didn’t mix—but that is no longer the case. Industrial controlsystems (ICS) are now increasingly intertwined with IT devices and business processes, multiplying the risk of compromise to theircommand and control functions. This situation is accelerating due to the rapid proliferation of IIoT (industrial internet of things)
devices that connect to IT networks.
To stay a step ahead of malicious actors, organizations need to begin taking a more holistic cybersecurity approach wherein bothIT and OT environments get the same level of scrutiny and investment from their cybersecurity leadership.

Tripwire Enterprise

Tripwire Enterprise is a cybersecurity suite that provides fully integrated solutions for policy, file integrity, and remediation
management for IT and OT assets. It provides an innovative approach for industrial organizations to assess configurations,security, and status in their environments. With a single interface management system, Tripwire Enterprise offers operators anagentless security workflow that can be accessed from virtually anywhere, providing a comprehensive picture of security issues

Fortra.com

Page 1Fortra Solution Brief

Bridging the IT/OT Cybersecurity Gap

across the entire infrastructure. Tripwire Enterprise gives
operators the ability to identify and remediate configuration
issues, such as a PLC that has been left in a risky state likeremote-program mode.

Addressing OT ComplianceWith automated, continuous monitoring across different
types of operating systems, industrial devices, andapplications, industrial organizations rely on it as a simplified
and cost-effective solution for maintaining systemhardening and continual proof of compliance for standards
such as:• International Electrotechnical Commission (IEC) 62443• International Organization for Standardization (ISO)27001• North American Electric Reliability Corporation Critical
Infrastructure Protection (NERC CIP)
• National Institute of Standards and Technology (NIST)• Center for Internet Security Industrial Control System
Critical Security Controls (CIS ICS CSC)

Tripwire Enterprise Report Viewer displaying a Remote Node Check.

Asset Discovery and Inventory

Organizations with both IT and OT assets to monitor can do

Tripwire Enterprise integrates with security tools specificallybuilt for OT in order to protect ICS networks by providing
extreme visibility, continuous threat and vulnerability
monitoring, and deep insights into ICS devices and networks.
The use of passive deep packet inspection (DPI) technology
specifically designed to ensure safe, secure, and reliable
operations in complex industrial networks—ensuring minimal
impact to the underlying operational processes along withimproved cyber resiliency.
It is designed to tap into the native protocols on the OT
network in such a way that it extracts data without affecting
operations that may be sensitive to latency and bandwidthchange. Our deep understanding of the many protocols
used by OT systems makes this possible.

Summary

so using the integration between Tripwire Enterprise andasset discovery and inventory solutions. Using these twoadvanced solutions together bridges the cybersecurity
gap common in industrial organizations. You can now
apply the same stringent cybersecurity controls to your OT
environment that you may have traditionally thought of as IT
processes, such as SCM, asset inventory and management,
vulnerability management, and others. This integration not
only serves to protect your organization against breaches
and human error—it also helps industrial operators prove
compliance with the industrial compliance standards onwhich they may be audited. It also aligns systems to bestpractice frameworks like the CIS ICS CSC. Get unmatchedvisibility into the configuration and vulnerability states ofboth the IT and OT sides of your organization at once.

About Fortra
Fortra is a cybersecurity company like no other. We’re creating a simpler, stronger future for ourcustomers. Our trusted experts and portfolio of integrated, scalable solutions bring balance andFortra.com

control to organizations around the world. We’re the positive changemakers and your relentless ally toprovide peace of mind through every step of your cybersecurity journey. Learn more at fortra.com.

© Fortra, LLC and its group of companies. All trademarks and registered trademarks are the property of their respective owners.

(fta-tw-ds-0623-r1-hm)