OT cybersecurity best practices

We want to list some of the industry-leading best practices regarding OT cybersecurity. These are by no means exhaustive, and the nature of adoption depends on each solution and its implementation:

• The strong presence of a continuous security program
• Commitment from all stakeholders to uphold the best practices for security
• Knowledge sharing and security training for all stakeholders
• Standard network design with structure documentation
• Clear inventory of assets and a program to refresh them periodically (hardware and software)
• High availability and resilience by design
• The DMZ is the only mechanism for data traversal from IT to OT networks and vice versa
• Application of specific tools for the five CSF processes of identification, protection, detection, response, and recovery
• Use of logical network segmentation and isolation where possible
• Implementation of multi-factor authentication, zero-trust, and defense...