Tool
OT risk prioritisation
A consequence-first score for a single finding. Use it to argue priority with engineering in language they recognise.
Reachability
Process consequence if exploited
Exploitation status
Compensating controls
Recovery difficulty
Priority score
60
High priorityRecommended action
- Schedule remediation in the next maintenance window with vendor validation
- Restrict reachability now via firewall or zone changes
- Document the interim risk acceptance with an owner and review date
This is a prioritisation aid, not a risk assessment. Decisions stay with the asset owner and process engineering.