domains / families / security / implementing-purdue-model-network-segmentation

implementing-purdue-model-network-segmentation

separate

'Implement network segmentation based on the Purdue Enterprise Reference

When to use

• When designing or retrofitting network architecture for an ICS/SCADA environment
• When implementing IEC 62443 zone and conduit requirements in a brownfield plant
• When creating the IT/OT DMZ (Level 3.5) to control data flow between enterprise and control networks
• When remediating audit findings about flat OT networks or direct IT-to-OT connectivity
• When segmenting a converged IT/OT network after an acquisition or merger

When not to use

• micro-segmentation within a single Purdue level
• cloud-native environments without traditional ICS networks
• network segmentation in purely IT environments

Skill page

Source