Integration at a glance
| Item | Detail |
|---|---|
| Partner product | Dragos Platform |
| Integration method | DeRISK reads Dragos Platform data through its API. The API connection needs no manual effort and keeps the data current for analysis. Manual import of API JSON output files is also supported, so the OT environment never needs a standing connection to DeRISK in the cloud. |
| Data used | Asset inventory, vulnerabilities, network zones, communication links |
| Built and supported by | DeNexus. Listed by Dragos as partner-supported. |
| DeRISK grades supported | Level 4 · Evidence-Grade (facility data) and Level 5 · Engineering-Grade (zone data), as each grade becomes available |
The challenge
Dragos helps teams decide which OT vulnerabilities need action now, next or never. Leaders still need to know what the remaining risk could cost and where budget does the most good. That calls for a financial measure.
How it works
The Dragos Platform discovers OT assets, maps their communications and finds vulnerabilities.
DeRISK CRQ reads that data on a schedule through the Dragos API.
DeRISK combines it with threat intelligence and each facility’s business data.
DeRISK simulates how likely (frequency) and how severe (magnitude) cyber incidents could be, and reports the results in dollars.
What you get together
Risk in financial terms.
Expected annual loss and loss at higher confidence levels, by facility and company.
Vulnerabilities ranked by dollar impact.
Add business impact to operational priority.
Projects compared before you spend.
Test mitigation options and see the risk reduction of each.
Requirements
- Dragos Platform
- A Dragos API account for DeRISK
- For automatic collection, a network path from DeRISK to the Dragos Platform (not needed for manual JSON import)
- A DeRISK CRQ subscription at Evidence-Grade or Engineering-Grade, as each grade becomes available
About Dragos
Dragos was founded by cybersecurity experts trusted across governments and industries to investigate and respond to history’s most significant cyber attacks on industrial control systems. Dragos brings unmatched real-world experience to every challenge.
We make the industry’s most intelligent and intuitive cybersecurity platform for Extended Operational Technology (xOT). Customers gain visibility, monitoring, and threat management for the OT, IT, and IoT assets within industrial environments, powered by continuous insights from Dragos’s threat intelligence and services team.