Categories Level 1
IT and OT groups recognize the
IT and OT groups in the facility do not existence of the other group. Limited
Overall communicate directly. Each blames
the other during a crisis.
Multiple independent networks.
Network Process control and business
networks are not connected.
Process control hardware purchased Control system hardware purchased
as part of control systems.
Hardware Servers, workstations and network
equipment not common with
business systems in plants.
Many different configurations of
Software operating systems. No data is shared
between systems.
Hardware and software for process
control and business systems not
common and little, if any, cross-
Maintenance training. Maintenance contracts
developed with outside vendors
or integrators with service level
agreements.
No sharing of firewalls or firewall
System rules. Each different process control
Security system is protected independently
or not at all.
2021 I Practical Guide for Remote Access to Plant Equipment
Level 2
sharing of knowledge and design. One
group will overpower the other for
control of overall plant system design.
Multiple independent networks.
Process control and business networks
share some standard connections and
hardware.
as part of control systems. Servers,
workstations and network equipment
may be the same manufacturer as the
business systems in the plant.
Common operating systems are selected
but may be modified and/or configured
by vendors of process control systems to
best work with individual vendor system
configuration.
Some control system parts may be
available on the plant site. Systems
may share a common software backup
system. Elements from the IT business
space can be adapted to replace OT
control systems (excessive time to
reconfigure and test)
A plant may have a common “firewall”
to protect, but limited control access
to individuals. Once inside the plant, a
program or individual can jump from
system to system.
16