--- sourceDocument: Yokohama Operational Technology Management sourceDocumentLink: https://servicenow-prod.fluidtopics.net/r/yokohama/operational-technology Release : - yokohama ft:locale : - en-US ft:publication_title : - Yokohama Operational Technology Management ft:clusterId : - optm bundleId : - optm workflow : - Technology --- # Automated mapping of OT devices to the Equipment Model # Automated mapping of OT devices to the Equipment Model {#ariaid-title1} Release version: Yokohama Updated January 30, 2025 ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 2 minutes to read Summarize ![AI sparkle icon](https://servicenow.com/docs/portal-asset/ai-sparkle-icon) Summarized using AI This content was generated using new OpenAI-powered functionality. Results are provided on an as is basis and are not guaranteed to be accurate or complete. ## Summary of Automated mapping of OT devices to the Equipment Model The automated mapping feature enables ServiceNow customers to automatically associate Operational Technology (OT) devices with the ISA equipment model entities that represent production processes. This mapping provides crucial context for OT managers to understand device-to-process relationships, which is essential for prioritizing vulnerability management and workflow involving OT devices. Show full answer Show less The feature supports importing OT subnet data from authoritative sources and uses IP addresses within these subnets to assign OT devices to corresponding equipment model entities. Note that only one subnet range per site is supported; if multiple subnets exist within the same range at one site, manual mapping is recommended. ## Key Features * **Subnet Import and Storage:** Upload OT subnets from sources like NetDB or firewalls and store them as records within ServiceNow. * **Automated Device Assignment:** Automatically map OT devices to equipment model entities based on IP addresses and subnet mappings. * **Support for Private IP Reuse:** Minimizes issues caused by reuse of private IP address ranges across different sites by associating subnets with specific equipment model entities. * **Role-based Access:** Different personas have defined roles in managing the mapping: * **System Admin:** Imports subnet mapping data and manages scheduled mapping flows. * **ISA Admin:** Triggers automated mapping processes manually or via scheduled jobs. * **ISA Editor:** Performs manual device and subnet mappings on demand. * **Plugin Requirements:** Requires activation of the Operational Technology Manager and Industrial Process Manager plugins. * **Guided Setup and Workflow:** Includes guided setup for configuration, scheduled flows for continuous automated mapping, and user interface actions for manual mapping. * **Device and Subnet Visibility:** Provides views for unmapped OT devices, devices not assigned to sites, mapped OT devices, and subnet mappings associated with equipment model entities. * **Configurable System Properties:** System administrators can configure properties to tailor the mapping behavior. ## Practical Use for ServiceNow Customers By implementing this automated mapping feature, customers can: * Gain immediate insight into how OT devices relate to specific production equipment and processes. * Streamline vulnerability management and operational workflows by understanding device context. * Reduce manual effort and errors in assigning OT devices to production assets. * Maintain an organized and up-to-date model of OT device distribution across sites and processes. * Leverage role-based controls to delegate mapping tasks efficiently across system administrators, ISA admins, and editors. ## Next Steps * Ensure the required Operational Technology Manager and Industrial Process Manager plugins are installed and activated. * Import OT subnet data from reliable sources into ServiceNow. * Use the guided setup to configure and enable automated mapping workflows. * Assign appropriate roles to users to manage and maintain OT device mappings. * Monitor mapped and unmapped OT devices regularly to maintain accurate device-to-process relationships. Automate mapping of OT devices to the production process.​ When OT managers experience vulnerabilities or need to manage workflow involving OT devices, the context of how the OT device connects to the production process it automates is critical to prioritizing work.  Automatic mapping of OT devices to ISA equipment model entities enables the view of device-to-process relationships. Note: Only one subnet range per site is supported. Two different sites can have the same subnet; for example, 192.168.101.0/24. But multiple subnets of the same range are not supported for the same site. It is recommended that you use manual mapping in this scenario. ## Key benefits {#automate-mappings-between-ot-assets-and-equipment-model-entity__section_ufr_fpp_mtb} * Upload and store OT subnets from authoritative sources (such as NetDB or Firewalls) as records in a ServiceNow instance. * Automate assignment of OT devices to ISA entity using IP addresses and OT subnet * Minimize issues with reuse of private IP address ranges across multiple sites {#automate-mappings-between-ot-assets-and-equipment-model-entity__ul_pg5_wjx_ktb} Industrial networks use subnets to divide the private IP address space with a single subnet often aligned to a part of the production process, or the equipment model entity. For example: A canning line runs on a 192.168.101.0/24 network in which all the equipment was programmed by the integrator. The IPs used by the control systems, or OT devices, are often hard coded into the automation software used to run the line. If the subnet maps to the canning line in the Atlanta site, a manager can automatically map a detected PLC with IP 192.168.101.66 to the canning line. The mapping feature relates each subnet to an equipment model entity, enabling you to automatically map OT devices to the subnets associated with the equipment model entity based on the IP address that was reported upon import from an OT Certified integration or ServiceNow® [Discovery for OT](https://servicenow-prod.fluidtopics.net/FITbW0L_QP1FBtHbM072iQ "You can run the IT Discovery for OT Networks function to discover IT class Operational Technology (OT) devices in designated Purdue levels in your Industrial Control System (ICS) networks. IT class items include switches, routers, and computers that exist both in data centers and in your factories.").​ A system administrator can import OT subnet mapping records. An ISA administrator can automatically create mappings of subnets to equipment model entities through a scheduled job flow. An ISA Editor can manually create mappings of an individual OT device on-demand. ## Automated mapping feature personas {#automate-mappings-between-ot-assets-and-equipment-model-entity__section_m41_drw_mtb} The automated mapping feature is aimed at the following personas.{#automate-mappings-between-ot-assets-and-equipment-model-entity__table_ivx_4nv_xbc__entry__2} | Persona | Description | |-|-| | System Admin | The System Administrator performs these tasks: * Imports data into the OT subnet to Equipment Model Entity Mapping table * Activates, schedules, or manually triggers the OT Subnet Mapping scheduled flow {#automate-mappings-between-ot-assets-and-equipment-model-entity__ul_hmz_pnv_xbc} | | ISA Admin | The ISA admin manually triggers the Map all OT devices UI action from the OT Subnet Mapping list view. | | ISA Editor | The ISA editor performs these tasks: * Manually creates and updates OT subnet mapping entries for specific sites * Maps individual OT devices to an equipment model entity from an OT device record * Maps multiple OT devices to an equipment model entity from an OT subnet mapping record {#automate-mappings-between-ot-assets-and-equipment-model-entity__ul_lmz_pnv_xbc} | [Table 1. Personas for automated mapping] {#automate-mappings-between-ot-assets-and-equipment-model-entity__table_ivx_4nv_xbc} ## Plugins {#automate-mappings-between-ot-assets-and-equipment-model-entity__section_g5x_sjv_mtb} Enabling the mapping feature requires the following plugins: * [Operational Technology Manager](https://servicenow-prod.fluidtopics.net/QN5FzvouYsVgzBRphHtBAw "The Operational Technology Manager application creates the foundational data and relationships that enable your organization to use the ServiceNow Operational Technology solution. Operational Technology Manager supports the use of the Configuration Management Database (CMDB), Service Graph Connectors, and Discovery applications in the ServiceNow AI Platform.") * [Industrial Process Manager](https://servicenow-prod.fluidtopics.net/E9Leo6bF5qXbmv8vqwBaGw "Use the Industrial Process Manager application to create the ISA-95 Equipment Model data foundation that is required for the ServiceNow Operational Technology solution. The Industrial Process Manager enables you to create your own version of the equipment models in each of your sites.") If the required plugins are installed, an ISA administrator can access the subnet mapping feature from the Industrial Process Manager application menu. * **[Workflow for the automated mapping feature](https://servicenow-prod.fluidtopics.net/5qDZSd~E~X2~T7OvQQuBRg)** The Industrial Process Manager includes an automated flow for the automated mapping feature. * **[Configure Automated Mapping of OT devices using guided setup](https://servicenow-prod.fluidtopics.net/SMBCMUIMOTWPoCm0PvfYXw)** Use the Industrial Process Manager guided setup to automatically map OT devices to the ISA equipment model entity. * **[Automatically map all OT devices to an equipment model entity](https://servicenow-prod.fluidtopics.net/L2TH97QifBBTcfmxImCeQA)** An Operational Technology (OT) Amazing admin can trigger automated mapping of all OT devices to the appropriate ISA equipment model entity. * **[View OT devices not assigned to a site](https://servicenow-prod.fluidtopics.net/A5nEtEG5zeFGbr01u1X_ag)** View the list of Operational Technology (OT) devices that aren't assigned to a site. * **[View unmapped OT devices](https://servicenow-prod.fluidtopics.net/YLD8w0wufrjp9WtwZmRD_w)** View a list of Operational Technology (OT) devices with IP addresses that aren't mapped to any equipment model entity. * **[Map an individual OT device to an equipment model entity](https://servicenow-prod.fluidtopics.net/cScKM3kM80Hp07ZiY73nVw)** Perform on-demand mapping of an OT device to the ISA equipment model entity for the sites that you have access to. * **[Configure the OT Subnet Mapping scheduled flow](https://servicenow-prod.fluidtopics.net/9DFsBah4vplk7LK0pkN5UA)** Configure the OT device mapping flow to automatically map OT devices to sites and equipment model entities. * **[View OT subnet mappings](https://servicenow-prod.fluidtopics.net/NjuWRUyYQOw0I_c3qtMWrQ)** View all mapped OT subnets assigned to an equipment model entity. * **[Create a new OT subnet mapping record](https://servicenow-prod.fluidtopics.net/M3yf~7oZ7LWZ8iHlSUNuxA)** Create a new OT subnet mapping to associate with an equipment model entity. * **[View all mapped OT devices](https://servicenow-prod.fluidtopics.net/dzovIVOTeWi7bk94kn7o_w)** View a list of all the Operational Technology (OT) devices that are mapped to an equipment model entity. * **[System properties used by the OT subnet mapping feature](https://servicenow-prod.fluidtopics.net/O5i4ruAcfwAxyYvMzdc30A)** An Amazing Admin can view and configure the system properties that support the OT subnet mapping feature. * **[Automated mapping components installed when Industrial Process Manager and Operational Technology Manager are both installed](https://servicenow-prod.fluidtopics.net/nwekPNg1q87ALDyrJcJzQQ)** Several types of automated mapping components will be installed with activation of the Industrial Process Manager when Operational Technology Manager is also active, including tables, system properties, and scheduled flows.