Getting Started: Default Password and Internet Connected Devices

Improving OT cybersecurity can feel overwhelming, especially for resource-limited organizations. With so many best practices for risk management and incident response, it’s easy to get stuck wondering where to start. That’s why we recommend a simple, step-by-step approach: crawl, walk, then run. Focus on the basics first—don’t stress about advanced tactics right away. While there’s no silver bullet in security, simple actions like changing default passwords can significantly reduce risks, especially for internet-exposed systems. Identifying these devices is a critical first step.

Use the Getting Started: Default Password and Internet Connected Devices guide so you’re not an easy target for adversaries. The guide outlines the types of OT assets and types of security credentials to be considered, how to identify devices and default credentials, and how to remediate. It also covers how to identify devices that are connected to the internet.