Establish OT security and safety authority
Define operating context and authority
On critical path
Demo data. Any changes do not save and are reset on refresh.
OT/ICS Security Improvement
- Organization
- Demo
- Unit
- Not attached
- Site
- Not attached
PERT
Critical pathComplete→Dependencies
Define the system under consideration
Define operating context and authority
On critical path
Map critical physical functions and consequences
Define operating context and authority
Approve the OT risk and acceptance method
Define operating context and authority
Establish the authoritative OT inventory
Establish OT inventory and architecture
On critical path
Partition the system into zones and conduits
Establish OT inventory and architecture
On critical path
Approve target security levels and requirements
Establish OT inventory and architecture
On critical path
Govern OT identity and remote access
Govern access and supplier operations
Set service-provider security profiles
Govern access and supplier operations
Approve legacy and maintenance constraints
Govern access and supplier operations
On critical path
Implement zone and conduit security requirements
Protect and monitor OT safely
On critical path
Control secure change and vulnerability treatment
Protect and monitor OT safely
On critical path
Operate OT monitoring and detection
Protect and monitor OT safely
Prepare trusted OT restoration assets
Protect and monitor OT safely
On critical path
Prepare OT incident response
Respond and recover safely
Approve degraded operation and safe-state strategies
Respond and recover safely
On critical path
Demonstrate restoration and safety acceptance
Respond and recover safely
On critical path
Exercise cyber-physical response and recovery
Exercise and accept operation
On critical path
Close corrective actions and residual risk
Exercise and accept operation
On critical path
Approve operation and periodic review
Exercise and accept operation
On critical path
Critical path
14 remaining, Establish OT security and safety authority, Next, December 18, 2026
Dependencies
No handoffs need review
Next handoff
Establish OT security and safety authority, Asset-owner executive, November 9, 2026
Recommendations
| Actions | ||||||
|---|---|---|---|---|---|---|
| No active recommendations for this view. | ||||||
- No active recommendations for this view.