Protect Critical Infrastructure
Keep critical systems available, controlled and disconnected from unnecessary exposure.
- CP-05
- Path and asset together
What this Blueprint does.
OT and CNI connectivity with maintenance windows
Keep critical systems available, controlled and disconnected from unnecessary exposure.
OT and CNI connectivity with maintenance windows
Energy, Critical infrastructure, Defence, Manufacturing
How CP-05 protects critical infrastructure.
A FIRE+VAULT pattern for OT and CNI. Process zones run normally; maintenance and supervisory reach exist only through governed, time-bound conduits.
Grounded in IEC 62443-3-3 (FR 5, FR 7), NIS2 Annex I and the NCSC Cyber Assessment Framework B4.
Enterprise IT
Office, mail,
Office, mail, ERP, identity
Firebreak
Relay
LockIT-to-OT conduit is severed by default and opened as a named window.
Supervisory and engineering
SCADA, historian,
SCADA, historian, engineering workstations
Isolate
Execute
ValidateEngineering reach is scoped, approved and verified.
Process control and field
PLCs, RTUs,
PLCs, RTUs, HMIs, sensors and actuators
Crown jewels · detail callout
Operational evidence and golden image vault
Operational records and golden PLC images sealed offline for safe recovery and audit.
Modules & symbols
FirebreakPhysical severRelayTime-bound pathLockNamed accessIsolateZone boundaryExecuteApproved actionValidateIntegrity checkHow the CP-05 pattern composes.
- 1
FirebreakFIRE
Physically breaks the connection path so the attack cannot continue.
- 2
IsolateFIRE
Separates the affected environment into a controlled zone.
- 3
RelayFIRE
Opens a temporary, time-bound window for an approved purpose.
- 4
ExecuteFIRE
Fires the control action the moment a signal demands it.
The Blueprint in full.
Firebreak controls connectivity at the physical layer. Isolate separates operational systems. Relay opens approved maintenance, patching or supervisory windows. Execute can revoke access instantly. Transfer governs data movement, Archive preserves operational evidence and Lock holds access tight.
Where CP-05 applies.
Build control around your environment
Talk to our team about composing this Blueprint for your estate.
Takes about 2 minutes. No account needed.