An update is a controlled change
A security patch may improve protection while changing operational behaviour. OT maintenance needs both security and engineering judgement.
In 30 seconds
- Check vendor support, compatibility and the approved version for the installed system.
- Plan testing, a maintenance window and a verified rollback or recovery method.
- Where immediate patching is unsuitable, assess temporary controls and record the remaining risk with the responsible team.
Make it concrete
An office laptop and an engine controller both show an update. Explain why their change procedures may differ.
- 01Assess
- 02Test / approve
- 03Verify operation
Check your understanding
Should every OT update be installed immediately without checking operational compatibility?
- Check vendor support, compatibility and the approved version for the installed system.
- Plan testing, a maintenance window and a verified rollback or recovery method.
- Where immediate patching is unsuitable, assess temporary controls and record the remaining risk with the responsible team.
Go to the source
- Course notes · ThS. Nguyễn Duy Hiếu · An ninh mạng trên tàu biển cho thuyền viên ↗
- NIST SP 800-82 Rev.3 · Guide to Operational Technology Security ↗
Sources reviewed: 13.09.2026