OT, ICS & SCADA assessment planning

OT assessment planning library

Four sector packs, a 50-state companion and working records for cybersecurity, risk, project and field teams. Downloads are available without registering.

Illustrative water-treatment infrastructure.

Choose a sector pack

Shared working files

Use the library from scope to closeout

  1. Choose the sector packs and read the review report.
  2. Define facilities, ownership and operating responsibility. Confirm federal, state, local and contract requirements with the responsible reviewers.
  3. Assign work, evidence owners, operating safeguards and approvals in the workbook.
  4. Record observations and limitations, assign corrective actions, verify closure and maintain recurring duties.

The builder creates a workbook for each selected sector, filters state screening rows and records your declared profile. The reference PDFs remain complete so their context and limitations travel with the work.

Coverage and current-source checks

Use this edition with its limits

Planning edition: October 15, 2026. The 50-state companion screens selected authorities. Facility location, ownership, operating function, permits and contracts determine the work still required. Local obligations need a facility-specific review.

Current TSA directive replacements, aviation criteria, CIRCIA rule status, CMMC procurement direction and some state authorities remain unresolved in this edition. Read the review report and verify current controlling instruments before adopting a plan. No selection establishes compliance, an exemption or permission to test operating equipment.

Read review findings and open questions (PDF, 27 pages)

Plan a scoped assessment

Bring the selected scope and unresolved questions to a planning discussion. Keep engineering files and completed worksheets in your controlled records.

Discuss assessment scope

Privacy center

Choose your site settings

Optional technology stays off until you choose otherwise. You can change these browser settings at any time. Access to the core site does not depend on optional technologies.

Technology preferences
Sale or cross-context sharing: not used GDF does not sell or share website personal information for cross-context behavioral advertising.