OT Access Checklist

A practical self-assessment for teams evaluating VPN-based OT access

Many organizations still rely on VPNs to give employees, vendors and contractors access to OT systems. Use these seven questions to evaluate whether your current VPN-based approach gives you the control, visibility and security your operations require.

What the checklist covers

• Proving who is connected to a critical asset, by name
• Access that expires when the job is done
• Credential handling when vendors are offboarded
• What a compromised laptop can reach
• Inspection of files before they reach the control network
• Stopping a live session, not just reviewing it afterward
• Consistent controls across every OT access path