Ideas you can
put to work.
Practical guides and articles that connect security decisions with implementation and operation.
Zero Trust Implementation Guide
Practical guide · 18 pagesZero Trust Implementation Guide
Turn access decisions into a practical delivery plan.
Explore the guideIEC 62443-3-3 Mapping Guide
Practical guide · 20 pagesIEC 62443-3-3 Mapping Guide
Connect system requirements to controls and evidence.
Explore the guidePurdue, IEC 62443 and connected industry
Practical guide · 9 pagesPurdue, IEC 62443 and connected industry
Design boundaries and operating dependencies across OT, IoT, edge and cloud.
Explore the guideFrom the working notes.
Useful questions for the next design or delivery review.
How to plan a zero trust pilot around a business service
Plan a zero trust pilot with a defined service, access policy, accountable owners and acceptance tests before expanding the rollout.
Read the article
Designing access from authentication to revocation
Connect strong authentication with application permissions, session decisions and tested revocation in a practical zero trust access design.
Read the article
A practical approach to zero trust for legacy and OT access
Improve access to legacy and operational technology systems with supported controls, tested dependencies and a clear record of residual risk.
Read the article
Practical certificate automation
Renew, deploy and verify certificates without turning the next expiry into a service outage.
Read the article
Post-quantum cryptography: getting ahead now
New cryptographic standards are changing the requirements for systems you will operate for years. Start with the dependencies that will take longest to change.
Read the articleWhat needs to work better?
Start with the environment, the constraint and the change you need to make.