Operational Technology Manager

As an OT Admin or CMDB Integration Admin, view system properties related to the Service Graph Connector for Microsoft Excel.

You must activate the agentic workflow from the AI Agent Studio. The Operational Technology (OT) Manager Foundation agent included with the application and used in the agentic workflows is active by default.

If you have the admin role, you can configure the Operational Technology (OT) Manager Foundation so that teams can use the OT Configuration Management Database (CMDB) search feature in the Industrial Workspace.

Use the Service Graph Connector for Microsoft Defender for IoT (Azure) to import Operational Technology (OT) devices discovered through the Standard mode of discovery from Microsoft Defender for IoT.

Add a column to the SG-OT Excel Pre Import table that matches the custom column on the staging table, giving the imported value a source field for mapping.

Add a custom column to the SG OT Excel Stagings (sg_ot_excel_staging) table to store an additional value imported from the Microsoft Excel spreadsheet.

Customize the validation for your OT devices.

Add an Operational Technology (OT) device to an OT system service to create a relationship between the equipment model entity that the device belongs to and the OT system service.

With the Service Graph Connector for Microsoft Excel, add a custom field to the staging table and map the custom field to the configuration item (CI) field.

Customize the base system classification of an device based on the type, os_version, and firmware_version.

There are 2 APIs used for handling refresh workflow scenarios for converting IT to Operational Technology (OT) and vice versa with the OT Asset Management application.

Assign roles to your users so that you can control their access to the features, capabilities, and data in the Operational Technology Manager application.

Assign roles to the users  or user groups so that you can manage the Service Graph Connector for Microsoft Excel staging table and ETL.

The following tables describe the attribute mapping and classification for sensors and devices.

The following tables describe the attribute mapping and classification for sensors and devices.

Create a scheduled job that automatically converts your IT hardware to Operational Technology (OT) devices by using the Bulk Update Ruleset for Reassigning IT to OT feature. This scheduled job adds OT entity details to all the IT hardware that you want to convert at once.

Bulk edit your Operational Technology (OT) devices to remove the OT device details. Then convert your OT devices to IT hardware devices.

Choose multiple IT hardware devices and convert them to OT devices in a bulk edit so that you can edit your records more quickly and efficiently.

Validate multiple NIDS sensors at once through a bulk validation so that you can edit your records more quickly and efficiently.

Operational Technology Manager adds these Configuration Management Database (CMDB) configuration item (CI) classes that are part of the CMDB CI Class Models application.

Upload an updated Microsoft Excel spreadsheet to populate the custom column and complete the import.

Configure the Robust Transform Engine (RTE) mapping for the Extract Transform Load (ETL). The ETL process transfers custom column data from the import set to the target Configuration Management Database (CMDB) class.

Several types of components may be installed with activation of the Operational Technology Manager application, including user roles.

Configure the features and agentic workflows available for the Operational Technology (OT) Manager Foundation.

Configure the Operational Technology Manager application so that you can create the data foundation for the ServiceNow Operational Technology solution.

Configure the Service Graph Connector for Microsoft Excel to import your existing Operational Technology data from a populated Microsoft Excel flat-file spreadsheet.

Use the guided setup for Service Graph Connector Integration for Claroty CTD to lead you through the integration steps.

Use the guided setup for the Service Graph Connector for Microsoft Defender for IoT (Azure) to lead you through the integration steps.

Use the Guided Setup for the Service Graph Connector for Microsoft Defender for IoT (On-premises Management Console) to lead you through the integration steps.

If you've identified IT hardware devices that belong to the OT network, you can convert these IT Configuration Items (CI) into OT devices.

Create an import task for the Service Graph Connector for Microsoft Excel to handle the import of Operational Technology (OT) device data from your Microsoft Excel spreadsheet.

Create an Operational Technology (OT) device in the Industrial Workspace.

Create an Operational Technology (OT) system service to model a distributed control system (DCS) and all of its related components, such as control modules and programming logic controls (PLCs).

After running validations for the Operational Technology (OT) device data imported with the Service Graph Connector for Microsoft Excel, optionally create a remediation task to resolve invalid staging records.

Create and use the Operational Technology (OT) device naming strategy to create unique names for your OT devices.

There are differences in how the Configuration Management Database (CMDB) handles the devices located in Operational Technology networks and those in standard Information Technology (IT) networks.

Edit the protection policy for an Operational Technology (OT) View Rule to edit the View Rule as needed.

Edit the trigger words used in the Operational Technology (OT) Configuration Management Database (CMDB) search feature to optimize OT search results.

These troubleshooting actions can help resolve common issues when importing your Operational Technology devices or data. Access the System Log to troubleshoot for these errors.

The Operational Technology (OT) Manager Foundation plugin uses generative AI to help streamline processes in the Industrial Workspace related to your OT device data. You can search for OT devices with the OT Configuration Management Database (CMDB) search feature and use an agentic workflow to automate the OT device import process.

Learn how you can use the Operational Technology Manager application to create the foundational data and relationships that enable your enterprise to use the ServiceNow Operational Technology solution.

The Industrial Core plugin contains the class mappings needed for the Operational Technology (OT) certified Service Graph Connectors.

You must install the Operational Technology (OT) extension classes that are the foundation of the Operational Technology Manager.

If you have the admin role, you can install the Operational Technology Manager application. The application includes demo data and installs that are related ServiceNow Store applications and plugins, if they are not already installed.

The installed software for the Operational Technology Management solution comes from IT Discovery for Operational Technology (OT) Networks or from the OT-certified Service Graph Connectors that support installed software.

Integrate Microsoft Defender for IoT with the ServiceNow Operational Technology Manager application to automate import of OT devices and sensor appliances.

Integrate Microsoft Defender for IoT (On-premises Management Console) with the ServiceNow Operational Technology Manager application to automate import of sensor appliances, OT devices, and network connections.

If you have the cmdb_nids_admin or admin role, you can assign metadata attributes to Network Intrusion Detection System (NIDS) class records from the NIDS menu in the ServiceNow AI Platform.

Validation enables you to review and manage the imported data in the staging table.

Map the custom source field on the pre-import table to the target field on the staging table so the imported value transforms into the correct staging column.

You can use the SyncIPAddressToOT scheduled job to update and synchronize the IP address information for all the available OT devices. The SyncIPAddressToOT scheduled job acquires the IP address information from the IP address (cmdb_ci_ip_address) table and adds it to the IP address field of the CI.

Map an Operational Technology (OT) system service to an ISA equipment model entity by enabling a scheduled job. When the relationship between an OT device and an equipment model entity changes, the scheduled job recomputes the relationship between the OT system service and the equipment model entity.

When configuration items (CIs) are created in the CMDB, asset records are created. The asset record contains the model category for the CI.

You can model an Operational Technology (OT) system service to create other control systems, such as a distributed control system (DCS).

The Operational Technology (OT) Manager Foundation AI agent operates within agentic workflows to complete tasks autonomously.

The Import OT device spreadsheet into OT CMDB agentic workflow automates the upload, validation, and import of OT device data into the OT CMDB.

Reference topics provide additional information about the Operational Technology Manager application.

The Operational Technology Manager application creates the foundational data and relationships that enable your organization to use the ServiceNow Operational Technology solution. Operational Technology Manager supports the use of the Configuration Management Database (CMDB), Service Graph Connectors, and Discovery applications in the ServiceNow AI Platform.

Multiple methods are available for uploading your existing Operational Technology device data into the ServiceNow AI Platform.

Use the Operational Technology (OT) device form to edit the detailed information for the OT devices in your enterprise.

The All OT Devices, All OT Devices by IP Address, and All OT Devices by CI menu options contain several related items and lists.

Create a CMDB Data Certification Policy for Operational Technology (OT) to validate and maintain accurate configuration item (CI) data.

Operational Technology Manager uses Operational Technology (OT) configuration item (CI) extension classes that extend the CMDB class hierarchy as shown in the following figure.

The following tables describe the application dependencies required for Operational Technology (OT) device management and OT vulnerability management.

Enhanced Access Control for OT implements data filters, deny unless access control rules (ACLs), and ACL query rules to help promote system security. Granular access control extends these protections to the Equipment Model Entity (EME) level, so you can restrict access from the site level to individual plants, lines, areas, and other ISA 95 hierarchy nodes.

The Operational Technology Manager use cases are described in this section.

Following the CSDM framework ensures that you meet your primary goal of consistent accuracy in reporting and analytics so that you can effectively manage your Operational Technology (OT) environment.

Terms related to managing business applications with elements of CSDM.

You might have questions while implementing the CSDM framework.

Operational Technology manages and uses CSDM tables. Several ServiceNow products benefit from and add value to Operational Technology.

The Operational Technology Manager application includes support for third-party integrations.

Find more information about the Network Intrusion Detection System (NIDS) extension class, OT extension classes, and related applications.

Prepare your spreadsheet by positioning your existing data in the correct columns is crucial to the success of your upload.

Preview existing Operational Technology (OT) device records in the Configuration Management Database (CMDB) before you import any new records from the staging table. By previewing existing records, you can avoid reconciling or merging unrelated records.

Review and update the class mappings available for the Service Graph Connector for Microsoft Excel.

Validate the imported staging records from your import task to find missing, duplicate, and invalid data.

The Operational Technology Manager plugin installs the following script includes.

Search for Operational Technology (OT) configuration items (CIs) and OT device information available in an OT CMDB table.

The Service Graph Connector for Microsoft Excel function enables you to import your existing Operational Technology data from a populated Microsoft Excel flat-file spreadsheet. You use it in the Integration Hub Extract Transform Load (ETL) to upload this data to the Configuration Management Database (CMDB).

When you complete the setup tasks, you can configure the integration periodically to pull data from Claroty CTD. The data is saved in tables that extend from the Configuration item [cmdb_ci] table.

You can access the connection details of the Service Graph Connector Integration for Claroty CTD in a single view using the common connection framework (CCF) included within the Integration Commons for CMDB (sn_cmdb_int_util) store app.

Integrate Claroty Continuous Threat Detection (CTD) with the ServiceNow Operational Technology Manager application to import detected devices and Claroty CTD sites (sensor or Network Intrusion Detection System appliances).

You can access the connection details of the Service Graph Connector for Microsoft Defender for IoT (Azure) in a single view using the common connection framework (CCF) included within the Integration Commons for CMDB (sn_cmdb_int_util) store app.

When you complete the guided setup, you can configure the integration to periodically pull data from a Service Graph Connector for Microsoft Defender for IoT (Azure) (Azure) project. The data is saved in tables that extend from the Configuration item [cmdb_ci] table.

When you complete the guided setup, you can configure the integration to periodically pull data from a Microsoft Defender for IoT (On-premises Management Console) project. The data is saved in tables that extend from the Configuration item [cmdb_ci] table.

Review language model support, user interfaces, and skill availability for the Operational Technology (OT) Manager Foundation.

Trigger a Configuration Management Database (CMDB) import for your valid staging records to directly import them into the CMDB

To transfer the custom column data to the Configuration Management Database (CMDB), update the column mapping script to add the corresponding entry to the importSetColumnsVsStagingColumnsMap object.

Chat with an AI agent in the ServiceNowOtto panel to begin the process for uploading, validating, and importing your Operational Technology (OT) device data into the OT CMDB.

Use Configuration Management Database (CMDB) groups to group IT configuration items (CIs) based on additional information, like installed software. Then you can add Operational Technology (OT) context to the IT CIs.

With the Service Graph Connector for Microsoft Excel, you can create import tasks that handle the upload, validation, and import of staging records for your OT device data into the Configuration Management Database (CMDB).

You can search for Operational Technology (OT) configuration items (CIs) and OT device information using the Operational Technology (OT) Manager Foundation.

After completing setup tasks, perform the following tasks to create foundational data and relationships for the ServiceNow Operational Technology solution.

Validate the Network IDS (NIDS) sensors once they're imported to prepare for device import. The sensors can only pass the validation if they aren't in learning mode as such sensors aren't eligible for device import.

Validate the Network IDS (NIDS) sensors once they're imported to prepare for the device import. Sensors only pass the validation if they aren't in learning mode as such sensors are not eligible for device import.

Validate the NIDS to import the devices from the ETL that were detected by the sensor. The sensors can only pass the validation if they aren't in learning mode as such sensors aren't eligible for device import.

View the dependency map for an Operational Technology (OT) system service to see the graphical representation of the hierarchical structure of the selected OT system service and its relationship with other entities in the production process.

View and edit device-to-device connections for your Operational Technology (OT) devices using the Device to Device Connections list in the Industrial Workspace.

You can view the Operational Technology (OT) applications that you have installed on your instance for better visibility of how you can use the Operational Technology Management solution.

Use the options on the Operational Technology (OT) menu to edit or view detailed information for the OT devices in your enterprise.

As an admin, view the script includes related to the Service Graph Connector for Microsoft Excel