Operational Technology

The configuration should be ‘secure by default’. This can include using a setup ‘wizard’ to guide a user towards choosing configuration options that will encourage secure configuration of your OT system to meet the aims of this document.

Security options should be easy to find and ideally be displayed in a logical manner to ensure that the user will not inadvertently miss any security-critical settings. Each setting should include an explanation, for example a tooltip, which clearly explains to the user how the setting changes the system.

The interface should be as easy to use as possible to minimise the risk of misconfiguration and any security setting should include positive acknowledgement of changes to prevent inadvertent setting changes.