Operational Technology Artificial Intelligence - NIST Compliance Tool (OTAI-NCT)

We propose the Operational Technology (OT) Artificial Intelligence (AI) - NIST Compliance Tool (OTAI-NCT), an innovative solution that addresses critical gaps contributing to major risks in critical infrastructure resilience, national security, and public safety in OT/Industrial Control System (ICS) devices. OTAI-NCT builds on the NIST OT Security Project and Risk Management Frameworks (RMF). OTAI-NCT streamlines vulnerability analysis of OT/ICS devices through automated vulnerability binary code scans from industrial asset owners, device manufacturers, and contributors. OpenAPI integration allows the OT/ICS cybersecurity community (e.g., facility managers, red teams, systems integrators, process managers, network managers, and compliance providers) to integrate existing vulnerability and risk assessment tools into the OTAI-NCT platform to automatically map vulnerability analysis scan results to NIST controls. OTAI-NCT can automatically predict NIST controls from cybersecurity analysis results, perform consensus analysis and historical analysis, improve control mappings, and assess patches and vulnerability assessments. Mapping of mitigations-to-controls would provide OTAI-NCT end-users with intelligent suggestions to address risks without changes to the physical devices. OTAI-NCT bridges the gap among the OT/ICS cybersecurity community by providing a platform to automatically detect, upload, share, aggregate, and analyze OT/ICS cybersecurity compliance issues for remediation in priority of risk to resilience, national security, and public safety.