Foundations
Physical Security for OT
Prevent physical access to control equipment that would bypass network controls entirely.
Defensive guide
Why should I care?
Serial buses, keyswitches and engineering ports assume physical protection.
How to implement it
- Locked cabinets and rooms
- Access records for control rooms and substations
- Panel inspection during rounds
What good looks like
- Keyswitch positions checked and recorded
- Cabinet access controlled and logged
Common failure modes
- Unlocked panels in publicly accessible areas
- Keys stored on the panel
How to verify it
- Walkdown audit of a sample of panels