Early pilot — letter of understanding
Discussion draft · complete and agree final terms before deployment
This outline records the intended pilot scope. It is not an executed contract or permission to access a network. Authorised representatives must agree the final pilot terms, confidentiality, data responsibilities and any commercial or liability provisions before installation.
Customer / factory / authorised contact
OTCogniShield legal contracting entity / contact
Agreed systems, zones and capture points
Start, end, review dates and stop contacts
1. Purpose and deliverables
Validate passive OT, IoT and IIoT visibility in the agreed scope. Deliver an observed inventory and communication map, an IEC 62443-3-2 aligned risk assessment, an applicable CE+ / NIS2 readiness gap summary, founder support and a final review report. Findings depend on traffic coverage and team validation; the pilot does not provide certification or a CE+ technical audit.
2. Cost, duration and equipment
Agreed OTCogniShield pilot deliverables carry no charge. Record duration, review points, hardware ownership or loan and return terms, site responsibilities and any separately approved third-party costs in the final agreement. No automatic extension, payment or subscription is created.
3. Authorised activity and operational safeguards
Use approved traffic copies or PCAP files only. No agents, active scans, controller writes or configuration changes are authorised by this outline. The customer approves capture setup, installation and management access through its change process. Agree success criteria, access limits, safety review, recovery and a stop procedure. Either party may request a pause; the plant’s authorised contact controls site access.
4. Information handling
Before collection, agree confidentiality, permitted data, access recipients, storage location, security, retention and deletion or return. Document applicable personal-data responsibilities. Keep evidence local unless a specific transfer is authorised. Credentials, captures, plant identifiers and report details are not published or used for unrelated purposes.
5. Customer participation and references
The customer provides a named engineering contact, approved capture access, relevant context, validation time and honest feedback. After a successful pilot, discuss an agreed reference call. Logos, attributed statements and public case studies require separate written permission.
6. Completion and next steps
Review deliverables, coverage limits, acceptance results and feedback. Continued use requires a separately accepted subscription and support proposal; there is no obligation to continue. If the pilot ends, close access, return or remove equipment and complete the agreed data-handling process. Final terms must address early termination and any outstanding site actions.