> ## Content Index
> Fetch the complete content index at: https://www.cybrsecmedia.com/llms.txt
> Use this file to discover other available public pages before exploring further.

# The IT/OT Pen Test Greatest Hits Why Your Findings Report Looks Like on Repeat
- URL: https://www.cybrsecmedia.com/the-it-ot-pen-test-greatest-hits-why-your-findings-report-looks-like-on-repeat/
- Published: 2026-04-13T11:57:41.000Z
- Updated: 2026-04-13T14:11:54.000Z
- Author: Lauren Andrus
- Tags: OT.SEC.CON. 2026, video, OT Security

**Presenter:**

[Dd Budiharto](https://www.linkedin.com/in/dd-budiharto-cissp-cisa-cism/?ref=cybrsecmedia.com)

The talk argues that **penetration testing reports—especially in IT/OT environments—keep surfacing the same issues over and over**, which signals deeper systemic problems rather than isolated vulnerabilities.

[Subscribe to the CYBR.SEC.Media newsletter](#/portal/signup/free)

## **Key takeaways**

- **“Same findings, different day” problem**  
Pen test reports are repetitive because organizations aren’t fixing root causes—just patching symptoms.
- **Common recurring issues**
  - Weak or reused credentials
  - Poor network segmentation (especially IT ↔ OT bleed)
  - Excessive privileges and lack of least-privilege controls
  - Outdated systems that can’t easily be secured
  - Misconfigurations that persist across environments
- **OT makes everything worse**
  - Legacy systems + uptime requirements = security tradeoffs
  - Flat networks and remote access paths create easy attack routes
  - Visibility is limited, so issues linger undetected
- **The real problem isn’t technical—it’s operational**
  - Security findings don’t get prioritized or owned
  - Teams lack alignment between IT, OT, and leadership
  - Risk is accepted implicitly rather than consciously
- **Reports aren’t driving change**
  - Pen test outputs often become **checkbox exercises**
  - Without accountability and follow-through, nothing improves

[![](https://storage.ghost.io/c/ab/67/ab676516-71e3-473d-8f73-9e0692f5aaee/content/images/2026/02/Screenshot-2026-02-27-at-8.47.35---AM.png)](https://www.cybrsecmedia.com/conference/)