When enabling remote access for OT systems, which combination is recommended?

When enabling remote access for OT systems, which combination is recommended?

• A. Strong authentication and least-privilege access
• B. Device-based access controls
• C. Open access without auditing
• D. Secure channeling with auditability and least privilege

Answer: (D)

When enabling remote access for OT systems, you want to protect the channel, keep a clear record of what happens, and limit what users can do. A secure channel ensures the remote connection is encrypted and protected from tampering or eavesdropping, so commands and data stay confidential and intact as they travel between the operator and the OT devices. Auditability provides a traceable record of who connected, when, and what actions were performed, which is essential for incident response, troubleshooting, and compliance. Least privilege restricts users to only the minimum access necessary, reducing the potential impact if credentials are compromised or if a session is misused. Put together, these three aspects create a strong, defense-in-depth approach for OT remote access. Other options miss one or more of these critical elements: strong authentication with least privilege alone lacks encrypted channels and full session auditing; device-based controls may not cover all remote pathways or provide complete session logs; open access without auditing is insecure and noncompliant.

When enabling remote access for OT systems, you want to protect the channel, keep a clear record of what happens, and limit what users can do. A secure channel ensures the remote connection is encrypted and protected from tampering or eavesdropping, so commands and data stay confidential and intact as they travel between the operator and the OT devices. Auditability provides a traceable record of who connected, when, and what actions were performed, which is essential for incident response, troubleshooting, and compliance. Least privilege restricts users to only the minimum access necessary, reducing the potential impact if credentials are compromised or if a session is misused. Put together, these three aspects create a strong, defense-in-depth approach for OT remote access. Other options miss one or more of these critical elements: strong authentication with least privilege alone lacks encrypted channels and full session auditing; device-based controls may not cover all remote pathways or provide complete session logs; open access without auditing is insecure and noncompliant.