OT Vulnerability Management & Security Compliance Lab
Saqib Majeed
Built a segmented IT/OT security lab using OpenPLC, pfSense, Nessus, Wazuh, and GLPI to practice vulnerability management without disrupting simulated operational systems. Implemented risk-based remediation, compensating network controls, remediation tracking, and NIST CSF 2.0/CIS-mapped compliance evidence.
% ---------------- OT VULNERABILITY MANAGEMENT & SECURITY COMPLIANCE LAB ---------------- \begin{onecolentry} \textbf{\hrefWithoutArrow{https://saqibmajeed.com/projects/ot-vulnerability-management-security-compliance-lab}{\color{black}{OT Vulnerability Management & Security Compliance Lab}}} \end{onecolentry}
\begin{onecolentry} \begin{highlights} \item Built a segmented IT/OT security lab using OpenPLC, pfSense, Nessus, Wazuh, GLPI, and VLANs to inventory assets, safely assess vulnerabilities, monitor security events, and track remediation through a vulnerability register and CMDB. \item Prioritized OT vulnerabilities by risk and remediation SLA, implemented compensating firewall controls where patching posed operational risk, and validated remediation through rescanning, alert testing, risk treatment plans, and NIST CSF 2.0/CIS-mapped audit evidence. \end{highlights} \end{onecolentry}
