ICS network boundaries are consistently maintained and cross-boundary traffic is strictly controlled
Continuously controlling the IT/OT boundary, reviewing cross-boundary rules and removing unneeded connections, keeps A.8.20's segmentation intact in production environments.
The process facet keeps the IT/OT boundary controlled, reviewing cross-boundary traffic and removing connections that no longer have a reason, the recurring check A.8.22's ICS scope needs.