
Understand your factory network before you touch it
Start with one production cell. Understand its dependencies, choose an observation method and separate evidence from assumptions.
Watch lessonLEARN
Watch the seven-part Masterclass, explore engineering guides and follow the evidence behind the decisions.
SEVEN PRACTICAL LESSONS
Choose a lesson. Each episode page includes its video, transcript and downloads.

Start with one production cell. Understand its dependencies, choose an observation method and separate evidence from assumptions.
Watch lesson
Set expectations for vendor access: approval, communication boundaries, session records and a clear way to revoke access.
Watch lesson
Map operational functions and required communications. Use Purdue levels as context and agree boundaries with the plant team.
Watch lesson
Understand the traffic copy, management access, local storage and update process, including the limits of passive monitoring.
Watch lesson
Connect observations to scope, dates, owners and remaining gaps for customer questionnaires and NIS2 or NCSC CAF reviews. Includes the IEC 62443-3-2 risk assessment workflow.
Watch lesson
Walk through preparation, observation, engineering review and acceptance, with a clear explanation of commercial scope and costs. Includes planned local AI, Manufacturing & Robotics and IIoTCogniShield products to follow.
Watch lesson
Prepare, identify, contain, eradicate, recover and learn. Denise Cross walks through the Incident Response module, evidence handling and the printable incident form, with a Thank you ending.
Watch lessonPractical engineering notes
Explore engineering guides covering passive monitoring, recorded command activity, deployment preparation and OT evidence.
Protocol context
Why a function code needs an approved policy and engineering context before it becomes a meaningful finding.
Read the guideEvidence preparation
Connect observations, scope and accountable review to a practical NIS2 evidence discussion.
Read the guideValidation method
Separate software maintenance, capture processing and dedicated-appliance acceptance.
Read the method