# Passive OT monitoring and anomaly review · Process scope and review authority

Blank workpaper, not completed testing or approval. Do not include secrets or real personal data.

## Plant case / model revision / process scope

[ ] Complete; add evidence and owner.

## Written authorization, scope and stop contact

[ ] Complete; add evidence and owner.

## Process / asset / zone / dependency / source

[ ] Complete; add evidence and owner.

## Assumptions / prerequisites / exclusions

[ ] Complete; add evidence and owner.

## Module-specific evidence

- Coverage/time/loss/retention matrix.
- Observation, alternative-explanation and missing-evidence record.