SekitCrosswalk
ENES
Start now
Sekit CSF · Family

OT/ICS Security

15 controls in 5 topics, each seen through the policy, process and technical lenses.

Policy

RCF-0427IR for ICS5 mappingsIncident response procedures specific to operational technology environments are formally definedRCF-0421Network segmentation (ICS)4 mappingsIndustrial control systems are formally required to be separated from corporate IT networksRCF-0418OT asset inventory3 mappingsAll operational technology and industrial control system assets are formally required to be identified and recordedRCF-0424Patch/compensating controls (ICS)5 mappingsA formal approach manages security vulnerabilities in OT systems where traditional patching is not possibleRCF-0430Safety alignment4 mappingsCybersecurity requirements are formally aligned with operational safety and physical process requirements

Process

RCF-0428IR for ICS5 mappingsICS-specific incident response procedures are consistently followed when operational systems are affectedRCF-0422Network segmentation (ICS)4 mappingsICS network boundaries are consistently maintained and cross-boundary traffic is strictly controlledRCF-0419OT asset inventory3 mappingsOT and ICS assets are consistently inventoried and changes to the OT environment are trackedRCF-0425Patch/compensating controls (ICS)4 mappingsOT vulnerabilities are consistently assessed and compensating controls are applied where patching is not feasibleRCF-0431Safety alignment3 mappingsSecurity decisions in OT environments consistently take into account the impact on operational safety

Technical

RCF-0429IR for ICS5 mappingsTechnical tools support safe detection and response to incidents in OT environments without disrupting operationsRCF-0423Network segmentation (ICS)5 mappingsTechnical controls enforce network separation between ICS and IT environments through firewalls and unidirectional gatewaysRCF-0420OT asset inventory4 mappingsTechnical tools passively discover and maintain an inventory of OT and ICS devices without disrupting operationsRCF-0426Patch/compensating controls (ICS)6 mappingsTechnical compensating controls such as network monitoring and application whitelisting protect unpatched OT systemsRCF-0432Safety alignment4 mappingsTechnical security controls are designed and validated to avoid interfering with safety-critical operational processes

This family in ISO/IEC 27001:2022

Every framework item the family's controls map to, most-connected first — grouped by Sekit CSF family, never by the framework's own index.

A.8.9 Configuration managementA.5.9 Inventory of information and other associated assetsA.8.8 Management of technical vulnerabilitiesA.8.20 Networks securityA.5.26 Response to information security incidentsA.8.22 Segregation of networksA.8.16 Monitoring activitiesA.5.24 Information security incident management planning and preparationA.5.1 Policies for information securityA.5.37 Documented operating proceduresA.5.31 Legal, statutory, regulatory and contractual requirementsA.5.4 Management responsibilitiesA.8.27 Secure system architecture and engineering principles

This family in NIST CSF 2.0

PR.AA-05 Access permissions managedPR.PS-02 Software maintainedPR.IR-01 Networks protected from unauthorized accessID.AM-05 Assets prioritized by criticalityID.RA-05 Inherent risk understoodRS.MA-02 Incident reports triagedID.AM-01 Hardware inventory maintainedRS.MA-01 Incident response plan executedGV.OC-04 Critical objectives and services understoodGV.RM-03 Cyber risk in enterprise risk managementRS.MA-03 Incidents categorized and prioritized

This family in Cyber Essentials

CE3.2 Apply critical updates within 14 daysCE1.3 Block unauthenticated inbound trafficCE5.2 Restrict execution to approved software
Ask Sekura: “What evidence proves OT/ICS Security?”
Also via MCP, free with account