---
sourceDocument: Australia Operational Technology Management
sourceDocumentLink: https://servicenow-prod.fluidtopics.net/r/operational-technology

 Release :

    - australia

ft:locale :

    - en-US

ft:publication_title :

    - Australia Operational Technology Management

ft:clusterId :

    - optm

bundleId :

    - optm

workflow :

    - Technology


---

# IT Discovery for Operational Technology (OT) Networks

# IT Discovery for Operational Technology (OT) Networks {#ariaid-title1}

Release version: Australia  
Updated March 12, 2026  
![](https://www.servicenow.com/docs/portal-asset/ico-clock) 2 minutes to read
Summarize  
![AI sparkle icon](https://servicenow.com/docs/portal-asset/ai-sparkle-icon) Summarized using AI  
This content was generated using new OpenAI-powered functionality. Results are provided on an as is basis and are not guaranteed to be accurate or complete.  

## Summary of IT Discovery for Operational Technology (OT) Networks

IT Discovery for Operational Technology (OT) Networks enables ServiceNow customers to discover IT-class OT devices within their Industrial Control System (ICS) networks.
These devices include switches, routers, and computers located in designated Purdue levels, particularly in factory and data center environments.
This capability helps organizations identify and manage hardware components that bridge traditional IT and OT environments.
Show full answer Show less  

## Key Features

* **Targeted Purdue Levels:** Unlike standard Discovery that operates primarily at Purdue levels 4 (site business and IT) and 5 (enterprise network), IT Discovery for OT Networks focuses on Purdue levels 3.5 (Demilitarized Zone or Industrial DMZ) and 3 (site operations). Level 3.5 typically contains both IT and OT devices, making it ideal for discovery without risking disruption to critical control systems at levels 0-2.
* **Discovery Process:** The process targets assigned IP addresses to discover all hardware items. Upon discovering a configuration item (CI), it triggers an internal event to check and update corresponding OT entity records in the Configuration Management Database (CMDB). If no OT entity exists, it creates one and synchronizes key attributes such as location.
* **Application Detection:** The discovery process also creates OT entity records for applications installed on discovered OT devices. These can be reviewed within the Industrial Workspace under the Applications list within Operational Technology.
* **Scheduling and Execution:** Customers can create OT Discovery schedules to orchestrate when and how discovery runs. Options include immediate Quick Discoveries or full OT Discovery runs, providing flexibility in managing network visibility.

## Practical Benefits for ServiceNow Customers

* Enables comprehensive visibility of IT-class OT devices in critical ICS network zones, improving asset management and operational awareness.
* Supports safe discovery practices by targeting appropriate Purdue levels that minimize risk to industrial operations.
* Automates updating and creation of OT entity records, ensuring the CMDB remains accurate and reflective of the real environment.
* Facilitates integrated management of both hardware and application components within OT devices, enhancing operational intelligence.
* Provides flexible scheduling to align discovery activities with operational needs and maintenance windows.  
You can use the IT Discovery for Operational Technology (OT) Networks function to discover IT class OT devices. These devices are located in designated Purdue levels within your Industrial Control System (ICS) networks. IT class items include
switches, routers, and computers that exist both in data centers and in your factories.

## Where standard Discovery processing takes place {#discovery-for-operational-technology__section_dbc_p1v_vpb}

The IT Discovery for OT Networks process operates in a manner that is similar to the standard Discovery processes.
Figure 1. Targeted Purdue levels in standard and IT Discovery for OT Networks Discovery   

Standard Discovery processing in the ServiceNow AI Platform® normally
takes place in the following Purdue levels in your enterprise:  
{#discovery-for-operational-technology__table_dp3_dr5_vpb__entry__2}

| Purdue Level | Description |
|-|-|
| 4 | Site business and logistics, such as all Information Technology (IT) functions. |
| 5 | Enterprise Network, where Enterprise Resource Planning (ERP) functions take place. |
[Table 1. Processed Purdue levels]

{#discovery-for-operational-technology__table_dp3_dr5_vpb}  
Note:  
To learn more about Purdue levels in Industrial Control Systems, see <https://subscription.packtpub.com/book/networking_and_servers/9781788395151/1/ch01lvl1sec10/the-purdue-model-for-industrial-control-systems>.

## Where and how IT Discovery for OT Networks processing takes place {#discovery-for-operational-technology__section_h1m_p1v_vpb}

In contrast, IT Discovery for OT Networks processing can take place in the following Purdue levels, depending on which you select when you create an OT discovery schedule:{#discovery-for-operational-technology__table_qdz_gr5_vpb__entry__2}

| Purdue Level | Description |
|-|-|
| 3.5 | Demilitarized Zone (DMZ) or Industrial Demilitarized Zone (IDMZ). Similar to a traditional (IT) DMZ, the OT-oriented IDMZ enables you to securely connect networks with different security requirements. |
| 3 | Site operations where plant or site-wide control and monitoring functions reside. |
[Table 2. Processed Purdue levels]

{#discovery-for-operational-technology__table_qdz_gr5_vpb}You typically run IT Discovery for OT Networks in the DMZ (or IDMZ, Purdue Level 3.5) of your ICS networks. This Purdue level is where there are usually IT and OT class computers and servers to discover and manage.  
Note:  
To avoid the possibility of disrupting your industrial operations, you should not run Discovery processes against Purdue levels 0 through 2 in your ICS networks.
Figure 2. IT Discovery for OT Networks processing   

When you run an OT discovery schedule, it performs the following processing:

1. Proceeds through the assigned IP addresses and discovers all hardware items that exist in it.
2. When it completes discovery of a configuration item (CI), it internally triggers a (discovery.device.complete) event. This logic checks if an OT entity (cmdb_ot_entity) record exists for it in the Configuration Management Database (CMDB).
   * If one exists, and any related attributes have changed for the discovered item, it updates the OT Entities that are related to that CI.
   * If one does not exist, it creates one for it.
   {#discovery-for-operational-technology__ul_qjb_ww5_vpb}
3. And the location attribute, it also pushes the defined attributes from the OT discovery schedule to the CI and to the related OT entity records.
4. It also creates OT entity records for the applications installed on discovered OT devices. To view the applications that have OT entity records created through IT Discovery for OT Networks, navigate to the Industrial Workspace list view and open the Applications list under Operational Technology (OT).
{#discovery-for-operational-technology__ol_v5z_nw5_vpb}
* **[IT Discovery for OT Networks related links and lists](https://servicenow-prod.fluidtopics.net/7pXe3NiNkPU3vq~1tQtzOQ)**   
  IT Discovery for OT Networks contains several related links and lists.
* **[Create an OT Discovery schedule and run the Discovery process](https://servicenow-prod.fluidtopics.net/KGpPrc4hXzc~OZ8jgvgcYw)**   
  Define Operational Technology (OT) Discovery schedules that orchestrate how and when the Discovery for an OT function should run. You can also perform an immediate Quick Discovery or an actual OT Discovery run.

**Related topics**   

* [Operation Technology (OT) extension classes](https://www.servicenow.com/docs/access?context=cmdb-ci-class-models-operation-technology&version=australia&pubname=australia-servicenow-platform&ft:locale=en-US)
* [MID Server](https://www.servicenow.com/docs/access?context=mid-server-landing&version=australia&pubname=australia-servicenow-platform&ft:locale=en-US)
* [Discovery](https://www.servicenow.com/docs/access?context=r-discovery&version=australia&pubname=australia-it-operations-management&ft:locale=en-US)
* [Horizontal discovery process flow with probes and sensors](https://www.servicenow.com/docs/access?context=c_DiscoProcessFlows&version=australia&pubname=australia-it-operations-management&ft:locale=en-US)
* [Schedule a horizontal discovery](https://www.servicenow.com/docs/access?context=t_CreateADiscoverySchedule&version=australia&pubname=australia-it-operations-management&ft:locale=en-US)

