Resources

OT Access Checklist: Can Your VPN Meet the Minimum Requirements for OT Access?

A practical self-assessment for teams evaluating VPN-based OT access

Many organizations still rely on VPNs to give employees, vendors and contractors access to OT systems. Use these seven questions to evaluate whether your current VPN-based approach gives you the control, visibility and security your operations require.

What the checklist covers

  • Proving who is connected to a critical asset, by name
  • Access that expires when the job is done
  • Credential handling when vendors are offboarded
  • What a compromised laptop can reach
  • Inspection of files before they reach the control network
  • Stopping a live session, not just reviewing it afterward
  • Consistent controls across every OT access path