OT security maturity

Asset inventory

Do you know every OT asset, its function and its criticality?

Network architecture

Are zones, conduits and an industrial DMZ defined and enforced?

Access control

Named accounts, MFA, least privilege and managed vendor access.

Remote access

Brokered, approved, time-bound and logged sessions only.

Monitoring & detection

Passive OT visibility with protocol-aware detection.

Vulnerability management

Advisory intake, applicability, consequence-based decisions.

Backup & recovery

Tested, offline backups of logic, projects and configurations.

Incident response

OT-specific plan, exercised with operations.

Threat hunting

Baselines exist and structured hunts run on a cadence.

Governance & culture

Ownership, budget, metrics and engineering partnership.