Episode 04 — Local monitoring: what stays inside your site?
Reference check: 6 November 2026.

NIST SP 800-82 Revision 3, Guide to Operational Technology (OT) Security, September 2023.
https://csrc.nist.gov/pubs/sp/800/82/r3/final
https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-82r3.pdf
Context: OT monitoring, system architecture, access control, media and maintenance considerations. Refer to the final published revision and its applicable sections when developing site procedures.

NCSC and partner agencies, Secure Connectivity Principles for Operational Technology, principles on architecture, access, boundary protection, logging and monitoring.
https://www.ncsc.gov.uk/sites/default/files/documents/ncsc-secure-connectivity-for-operational-technology.pdf
https://www.ncsc.gov.uk/collection/operational-technology/secure-connectivity/principle-7
Context: monitoring complements technical controls; passive detection and active enforcement have different roles.

ICS Community of Interest, How to log and monitor in ICS/OT Environments, 2024.
https://ritics.org/wp-content/uploads/2024/08/How-to-log-and-monitor-in-ICS-OT-Environments.pdf
Context: passive monitoring arrangements, observation-point coverage, SPAN capacity and collection constraints.

NSA / CISA / ODNI Enduring Security Framework, Securing the Software Supply Chain: Recommended Practices Guide for Developers.
https://www.cisa.gov/sites/default/files/2023-12/ESF_SECURING_THE_SOFTWARE_SUPPLY_CHAIN_DEVELOPERS.pdf
Context: distribution-package integrity, verification and software update protection.

The illustrative monitoring installation, data-flow prompts and workshop sequence are original teaching material. They do not establish the storage, network configuration or enabled capabilities of a specific deployed product. Verify those facts locally. The episode distinguishes local analysis from isolation and the passive observation path from management, export, backup and update paths. It does not prescribe operational changes to live production equipment.
