Judgment, published.
Not why cybersecurity matters. What we actually check, in what order, and which findings turn out to be expensive later.
The seven things we check first when reviewing remote vendor access into an OT environment
Remote vendor access is the single most common way an OT environment is reachable from outside, and the most consistently under-documented. Here is the order we work through it.
Why a Purdue diagram isn’t an OT segmentation strategy
A Purdue model drawing describes what your systems are for. It says nothing about what they can reach. Those are different documents, and only one of them is enforceable.
Five IEC 62443 findings that look minor on paper but become expensive during implementation
The finding is one line in a report. The remediation is a licence purchase, an outage window and a firmware upgrade nobody budgeted for. Five that catch people out.
What we’d ask before connecting a new production line to an existing plant network
Commissioning is the cheapest moment in an asset’s life to get its security architecture right, and the moment when everyone is most incentivised to defer it. Eight questions to ask first.