DOC-800 · Library
OT and ICS security testing guides
Four long-form, primary-sourced guides for the people who have to sign the permit: what can be tested on a running plant, what the law asks for, which part of IEC 62443 is yours, and how to write rules of engagement that a process engineer will accept.
DOC-810 · All guides
All guides
- What can safely be tested on a live OT network The methods that run while the process runs, the ones that never should, and the honest limits of each. Open guide
- NIS2 and OT security testing: what Article 21 actually requires Which industrial sectors are in scope, what the directive really says about assessment, and why nobody has to run an annual pentest of the control network. Open guide
- IEC 62443: which part applies to you The series has four groups and three audiences. Knowing which one you are removes most of the reading. Open guide
- Rules of engagement for an OT security test The permit-to-work model applied to security testing: authority, abort, exclusions, rollback, and the deliverable most reports leave out. Open guide