OT network architecture¶

Most OT security incidents do not exploit novel vulnerabilities. They exploit architecture: routes that were never meant to exist, boundaries that were never enforced, and remote access that was added for convenience and never revisited. Understanding the reference models and the design decisions that follow from them is the prerequisite for evaluating what is actually in place.