Finance here, the shop floor there
The network is carved into zones and we write and push the firewall policy from a distance, which means a PLC, a touch panel or the PC next to a line can reach only the one system it genuinely depends on. The paperwork follows the thinking behind IEC 62443 and is written so you can hand it straight to an OEM supplier auditor or attach it to the security questionnaire a European buyer sends you.