A practical self-assessment for teams evaluating VPN-based OT access
Many organizations still rely on VPNs to give employees, vendors and contractors access to OT systems. Use these seven questions to evaluate whether your current VPN-based approach gives you the control, visibility and security your operations require.
What the checklist covers
- Proving who is connected to a critical asset, by name
- Access that expires when the job is done
- Credential handling when vendors are offboarded
- What a compromised laptop can reach
- Inspection of files before they reach the control network
- Stopping a live session, not just reviewing it afterward
- Consistent controls across every OT access path