# OT vulnerability, patch and change management · Process scope and review authority

Blank workpaper, not completed testing or approval. Do not include secrets or real personal data.

## Plant case / model revision / process scope

[ ] Complete; add evidence and owner.

## Written authorization, scope and stop contact

[ ] Complete; add evidence and owner.

## Process / asset / zone / dependency / source

[ ] Complete; add evidence and owner.

## Assumptions / prerequisites / exclusions

[ ] Complete; add evidence and owner.

## Module-specific evidence

- CVE/asset/prerequisite/impact assessment.
- Versioned change, test and time-bound exception record.