Industrial security / 03

OT audit

Prepare an evidence-based audit that protects production and safety.

This work is currently open on this device. Sign in to save it and continue on another device.

In OT, availability, physical processes and safety must be assessed together. A suitable office-network scan can have unacceptable control-system consequences. NIST SP 800-82 Rev. 3 is the final reference. The September 2026 Rev. 4 is an initial public draft; do not present draft proposals as binding requirements. This pack does not instruct attacks or unapproved production tests.

Map the process

0 / 5 steps reviewed.

Step 1 / 5

Define boundaries and safety

Agree scope with production, safety and OT engineering. Record critical functions, outage effects and prohibited audit actions. Explicitly assign authority to stop risky activity.

Expected evidence

Approved scope and stop authority

One control, three perspectives

Could the audit affect production?

Validate passive methods and stop conditions.

Maintenance approval and test boundary

Evaluate evidence

Claim: Remote maintenance is controlled.

Weak support

A firewall is drawn on the diagram.

Stronger support

What evidence would you request before closing this claim?

Decision desk

The plant inventory is incomplete and production is running.

What comes first?

Worked example

This record is fictional. Do not treat sample results as evidence for your own work.

Asset	Critical process	Safety impact	Access path	Observation	Control	Owner	Retest
OT-001	Example filling line	Unplanned stop risk	Supplier maintenance gateway	Second persistent path	Approved window and isolation	Plant OT owner	Passive flow + session check

Closure checklist

0 / 4

Checks on this screen last for this session only; they do not create closure evidence or compliance approval. Keep organizational records in the downloaded workpaper.

Plant and safety approval exists.Active methods separately authorized.All remote-access paths reviewed.Recovery is not inferred from file presence.

Take it to work

Files in the selected language. The workbook includes blank records, a worked example and a checklist.

Complete workpackZIP · EN Editable workpaperXLSX · EN Printable workpaperPDF · EN Blank record templateCSV · EN Full guide and scenarioMD · EN

Keep learning

Explore related Academy courses

Sources and edition

Checked: 2026-10-21 · Edition 2026.10