Separate worlds for admin and shop floor
We lay out network zones, draft the rule set for your firewall and roll it out remotely. After that, a controller, an operator panel or a line computer can only reach the handful of systems it depends on. Our write-up follows IEC 62443 and is structured so it doubles as evidence for NIS2 and for audits by your own customers.