Comply with the DoW Zero Trust for OT Activities and Outcomes

The ZT for OT guidance requires accurate inventories of users, devices, applications, workloads, data flows and behaviors. Nozomi delivers:

• Passive and safe active discovery of OT assets and Non-Person Entities (NPEs)
• Detailed network flow mapping and operational baselining to support segmentation, policy creation, and access governance
• Continuous monitoring of controller logic changes, remote configuration attempts and process critical activity

These features support large portions of the Device, Network, Application and Visibility & Analytics pillars.

The ZT for OT guidance places heavy emphasis on user and entity behavior analytics (UEBA), user access management (UAM), anomaly detection and environmental baselining to identify threats early, before they escalate. The Nozomi platform provides:

• OT-aware AI/ML that learns normal behaviors and flags deviations
• Event correlation tied to specific Person Entities and Non-Person Entities to accelerate incident triage
• Integration of data flows, asset context, threat intelligence and baselines to create precise threat profiles aligned with ZT for OT expectations

This gives organizations the analytics depth required by the guidance while avoiding alert fatigue.

ZT is inherently an ecosystem strategy. Nozomi acts as the central OT intelligence layer powering enterprise controls by integrating with:

• Active Directory, multi-factor authorization (MFA) and credentialing services (User pillar)
• Cisco ISE/Aruba ClearPass for dynamic network access control and Identity, credential and access management (NAC/ICAM) and isolation (User/Device/Network pillars).
• Dispel and other privileged access management (PAM) and secure remote access (SRA) solutions
• Tanium, Carbon Black, Microsoft Defender and our own Arc sensor for OT-optimized endpoint detection and response and extended detection and response (EDR/XDR)
• SIEM/SOAR platforms (security information and event management/security orchestration, automation and response) to orchestrate response with human-in-the-loop safety

These integrations make Nozomi the connective tissue that turns ZT policy into actionable enforcement in OT environments.

The ZT for OT guidance stresses that OT environments require careful, risk-aware rollouts and must avoid operational disruption. Nozomi meets this requirement through: 

• A passive-first approach to monitoring
• Safe active scanning engineered to avoid process impact
• Architecture that functions even in isolated or air-gapped systems
• Features built specifically around programmable logic controllers (PLCs), remote terminal units (RTUs), historians, operator workstations and industrial protocols

This ensures ZT implementation enhances mission operations rather than jeopardizing them 

Nozomi provides strong, moderate or supportive coverage across six of the seven pillars. Where Nozomi is not the enforcement tool (e.g., PKI, ABAC, DRM/DLP and SDN policy engines), the platform still provides the critical telemetry and analytics these controls depend on.