Purdue Model/PERA architecture, IT/OT segmentation, IEC 62443, CIS hardening, secure remote access
The unmanaged TeamViewer problem, why machine-builder VPNs bypass your segmentation, and a reference design for recorded, MFA-enforced, time-boxed vendor access.
Why Level 1 profiles are the right default, the settings most likely to break HMI and engineering software, and how to document deviations so auditors accept them.
Cloud MES, SaaS labeling platforms, and IIoT sensors don’t break the Purdue Model — they raise the stakes for Level 3.5. How to route every modern IT/OT integration through an industrial DMZ without slowing the business down.
Practical network segmentation for manufacturing environments — IT/OT boundaries, conduit design, and how to satisfy auditors without touching a running line.