OT / ICS (Industrial Control Systems) Security Baseline

A comprehensive set of foundational security controls for industrial control systems (SCADA/DCS/PLC/HMI) and operational technology (OT) environments: IEC 62443 zone-conduit segmentation and IT/OT DMZ, secure remote access, HMI/EWS endpoint hardening (application allowlisting, removable media control), ICS-specific patching/compensating controls, OT-aware passive monitoring, ICS security governance, and safety/physical security. Availability and safety are the priority; changes must be vendor-approved and performed within maintenance windows. Framework: IEC 62443 / NIST SP 800-82 Rev 3 / CISA ICS / CIS Controls v8.