What does OT stand for?
OT stands for Operational Technology. Operational technology: systems that monitor and control physical processes, such as ICS and SCADA. Availability and safety usually come first, and patching is often limited.
OT is the hardware and software that monitors and controls physical equipment: production lines, pumps, valves, power distribution, building systems. Its priorities differ from office IT. Safety and continuous operation come first, equipment stays in service for decades, and a system often cannot be restarted or patched without stopping production. For that reason OT networks are separated from the business network and the links between the two are tightly controlled.
OT in practice: an example
A vulnerability scanner used every week on the office network is pointed at the plant network for the first time. Two old controllers stop responding to the unexpected traffic and a packaging line halts. After that, the plant is scanned passively, by listening to traffic, and active tests wait for planned maintenance.
What OT is confused with
OT vs IT: what is the difference?
Information technology handles data and puts confidentiality high. OT controls physical processes and puts safety and availability first. The same patch that is routine on a laptop may need a planned shutdown on a controller.
OT vs IoT: what is the difference?
IoT devices are connected consumer and business gadgets such as cameras and sensors. OT controls industrial and infrastructure processes, where a failure can stop production or endanger people. What IoT stands for
Which exams cover OT?
OT is on the official CompTIA acronym list for three of the four exams covered here.
- Security+ SY0-801: 2.3 (Threats, Vulnerabilities, and Attacks); 3.1 (Security Architecture).
- CySA+ CS0-004: 1.1 (Security Operations).
- Network+ N10-009: 4.0 (Network Security).
Each number is a CompTIA exam objective and the name in brackets is its domain. The exam puts the term in a scenario; it does not ask you to recite the expansion.
Check yourself: two practice questions
Written by CertSprint for this page. They are not taken from any exam.
1. Which security property usually has the highest priority in an OT environment?
- Confidentiality of marketing data
- Availability and safety of the physical process
- Password length
- Email retention
Show the answer
B. Availability and safety of the physical process. An OT failure can stop production or cause physical harm, so keeping the process running safely outranks the other goals.
2. A plant controller cannot be patched until the yearly maintenance shutdown. Which compensating control is most appropriate?
- Connect it directly to the internet for vendor access
- Isolate it on a segmented network with strictly limited access
- Give all staff the administrator password
- Disable logging
Show the answer
B. Isolate it on a segmented network with strictly limited access. When the weakness cannot be removed, reducing who and what can reach the device lowers the risk until the patch can be applied.
Sources: NIST SP 800-82 Rev. 3, Guide to Operational Technology (OT) Security; NIST glossary: operational technology. The acronym and its expansion come from CompTIA's official acronym lists, linked from each exam glossary above. The explanation, example and questions are CertSprint's own, checked against these sources on 11 November 2026.