OT zones and conduits: segmentation that follows IEC 62443
How to divide a plant network into zones, control what crosses between them, and why flat OT networks keep making incident reports.
Core OT cybersecurity standard series.
The ISA/IEC industrial cybersecurity standard series: risk assessment, zones and conduits, component requirements, and lifecycle practices for industrial automation and control systems. The reference behind most OT security programs.
See also: Zones and conduits · OT
Use the concept: Subnet calculator · OT asset inventory template · OT backup & restore test template
How to divide a plant network into zones, control what crosses between them, and why flat OT networks keep making incident reports.
Inventory the files and dependencies needed to recover a control system, set recovery objectives, and test restoration on an isolated target.
Build an OT incident response plan that respects process safety — roles, containment without shutdowns, backups that restore, and tested playbooks.