--- title: "Industrial Engineering Access | Control Plan CP-14 | Contro…" url: https://fire-vault.com/control-plan/industrial-engineering-access description: "Engineering and vendor access to PLCs, controllers and industrial systems that is just-in-time, not standing." lang: en-GB --- Image: City buildings and business infrastructure at night (https://fire-vault.com/__l5e/assets-v1/0b0e0399-5298-4db1-b040-7f4a677ede65/control-hero-night-city.jpg) # Engineers need to reach your PLCs. _The route should not be there when they do not._ Engineering and vendor access to PLCs, controllers and industrial systems that is just-in-time, not standing. Discuss a critical connection: https://fire-vault.com/contact?subject=control See it with Control Infrastructure & Critical Systems Relay, Lock, Unlink 0 industry Blueprints Assessed for your environment 01 · The problem ## Industrial Engineering Access: what goes wrong. Vendors and engineers need access to PLCs, controllers and industrial systems for commissioning, fault finding and updates. Vendor modems, cellular routers and engineering laptops often provide routes straight to the controller. ### Why existing controls may leave it open 1 Remote engineering tools manage logins, not whether the route exists. 2 Vendor-installed modems and routers are easy to forget and hard to see. 3 Engineering access can reach far more controllers than the job requires. 02 · Firevault's approach ## Control the selected connections. Firevault works with your engineering and operations teams to agree which engineering routes exist, which controllers they reach and when. Access is just-in-time: staged for the approved job and closed when it ends. FV-03**Relay**Stages engineering access through an airlock, never an open route to the controller.: https://fire-vault.com/control-module/relay FV-08**Lock**Limits access to the approved engineering window.: https://fire-vault.com/control-module/lock FV-07**Unlink**Removes standing vendor access between jobs.: https://fire-vault.com/control-module/unlink 03 · Before and with Control ## See the connections change. The connections that were always available, and their intended state once Control is in place. Your own design depends on your environment. Image: Control Studio (https://fire-vault.com/__l5e/assets-v1/9e2eb851-ed3d-4520-9811-0821708cf916/control-studio-logo.png) Concept view · CP-14 Industrial Engineering Access From **Vendors and engineers** 1. Vendor modem or router Always connected 2. Approved engineering session Always connected 3. Field control and safety Stays connected, assessed To **PLCs and controllers** Relevant Control Modules - Relay: https://fire-vault.com/control-module/relay - Lock: https://fire-vault.com/control-module/lock - Unlink: https://fire-vault.com/control-module/unlink A simplified concept, not a network design. Device placement, connections and operating sequences are designed for your environment in Control Studio. Request a Studio design session (https://fire-vault.com/contact?subject=control) 04 · The outcome ## What changes for you. **What this Plan does not do:** This Plan does not change controller logic or safety systems, and does not assess the engineering work itself. - No standing engineering route to controllers. - Engineers reach only the controllers covered by the job. - Local control and safety continue unchanged. 05 · Where it applies ## Industries where this Plan fits. Each industry Blueprint applies this Plan to its own systems, dependencies and safety considerations. ### Other Plans in Infrastructure & Critical Systems CP-11IT/OT Boundary Protection: https://fire-vault.com/control-plan/operational-technology-protection CP-12Critical System Exposure Reduction: https://fire-vault.com/control-plan/protect-critical-infrastructure CP-13Supply Chain Compromise Containment: https://fire-vault.com/control-plan/supply-chain-isolation CP-15Remote Facility Containment: https://fire-vault.com/control-plan/remote-site-isolation 06 · Your environment ### How many routes can reach your PLCs and controllers when nobody is working on them? Firevault reviews the connections in your own environment with the people who own them, then designs the Plan for you in Control Studio. Discuss a critical connection: https://fire-vault.com/contact?subject=control About Control Studio: https://fire-vault.com/studio ## Structured data ```json [ { "@context": "https://schema.org", "@type": "Organization", "@id": "https://fire-vault.com/#organization", "name": "Firevault", "legalName": "Firevault Limited", "url": "https://fire-vault.com", "logo": { "@type": "ImageObject", "url": "https://fire-vault.com/logo.png", "width": 200, "height": 60 }, "foundingDate": "2025-03", "description": "Firevault is a UK cyber resilience company. Data protection and storage through Offline Secure Storage. Network evolution and rapid protection through Control.", "address": { "@type": "PostalAddress", "addressCountry": "GB", "addressLocality": "United Kingdom" }, "contactPoint": [ { "@type": "ContactPoint", "contactType": "customer service", "email": "hello@fire-vault.com", "availableLanguage": "English", "areaServed": [ "GB", "EU", "US", "AE" ] }, { "@type": "ContactPoint", "contactType": "sales", "email": "sales@fire-vault.com", "availableLanguage": "English", "areaServed": [ "GB", "EU", "US", "AE" ] } ], "founder": [ { "@type": "Person", "name": "Mark Fermor", "jobTitle": "Founder, CTO and CMO" }, { "@type": "Person", "name": "David Bailey", "jobTitle": "Founder and CEO" } ], "areaServed": [ "United Kingdom", "Europe", "United States", "Middle East" ], "sameAs": [ "https://www.linkedin.com/company/firevault", "https://x.com/firevaultuk" ], "slogan": "Disconnect to Protect", "brand": [ { "@type": "Brand", "name": "Offline Secure Storage" }, { "@type": "Brand", "name": "Control by Firevault" }, { "@type": "Brand", "name": "Firebreak" } ], "knowsAbout": [ "Offline Secure Storage", "Physically disconnected data storage", "Physical Air Gap Data Protection", "Ransomware Protection", "Ransomware recovery", "3-2-1-1-0 backup rule", "AI kill switch", "Operational technology security", "Critical national infrastructure resilience", "Data Sovereignty", "GDPR Compliance", "NIS2 Compliance", "DORA Compliance", "NCSC Cyber Assessment Framework" ] }, { "@context": "https://schema.org", "@type": "WebSite", "@id": "https://fire-vault.com/#website", "name": "Firevault", "alternateName": [ "Firevault", "Firevault UK", "Firevault Limited" ], "url": "https://fire-vault.com", "publisher": { "@id": "https://fire-vault.com/#organization" }, "inLanguage": "en-GB", "description": "Firevault is a UK cyber resilience company. Data protection and storage through Offline Secure Storage. Network evolution and rapid protection through Control.", "potentialAction": { "@type": "SearchAction", "target": { "@type": "EntryPoint", "urlTemplate": "https://fire-vault.com/learn?q={search_term_string}" }, "query-input": "required name=search_term_string" } }, { "@context": "https://schema.org", "@type": "WebPage", "@id": "https://fire-vault.com/control-plan/industrial-engineering-access#webpage", "url": "https://fire-vault.com/control-plan/industrial-engineering-access", "name": "Industrial Engineering Access", "description": "Engineering and vendor access to PLCs, controllers and industrial systems that is just-in-time, not standing.", "isPartOf": { "@id": "https://fire-vault.com/#website" }, "about": { "@id": "https://fire-vault.com/#organization" }, "primaryImageOfPage": { "@type": "ImageObject", "url": "https://fire-vault.com/images/og/og-base-platform.jpg" }, "inLanguage": "en-GB", "breadcrumb": { "@id": "https://fire-vault.com/control-plan/industrial-engineering-access#breadcrumb" } }, { "@context": "https://schema.org", "@type": "BreadcrumbList", "@id": "https://fire-vault.com/control-plan/industrial-engineering-access#breadcrumb", "itemListElement": [ { "@type": "ListItem", "position": 1, "name": "Home", "item": "https://fire-vault.com" }, { "@type": "ListItem", "position": 2, "name": "Control Plan", "item": "https://fire-vault.com/control-plan" }, { "@type": "ListItem", "position": 3, "name": "Industrial Engineering Access", "item": "https://fire-vault.com/control-plan/industrial-engineering-access" } ] } ] ```