OT, ICS & SCADA assessment planning

Build your OT workbook set

Select sector and state rows, then record your declared operating profile for review. Get editable workbooks, reference packs and an explicit record of research and decisions still required.

Illustrative water treatment infrastructure.

Customize your planning set

Prepare an OT assessment with your project team

Start with what is known and what is missing

The OT set now includes a record gathering checklist and a register of unresolved scope and authority questions.

Begin by confirming the legal entity, facilities, audit purpose and period. Locate the records that already exist and assign owners and project target dates to each. Review the missing facts, current criteria and proposed exclusions with the responsible owners, then agree the scope, evidence access, safe methods and deliverables with GDF. Arrange an authorized evidence exchange before any controlled record changes hands.

Download with open items when needed. A located record still needs examination. Creating a package does not book an engagement or authorize testing.

Follow the GDF audit preparation walkthrough

  • Record gathering checklist (CSV)Records to locate, audit purpose, likely custodian and follow up fields. The complete ZIP includes the same checklist with the workbook and manuals.
  • Open questions register (CSV)Missing facts and unresolved authority, the required next evidence and the effect on audit planning.

Each sector workbook in the November 3, 2026 edition has 22 worksheets whatever you choose: the 16 core sheets, the Preparation and Uncertainty sheets, and the Requirements, Field record, Assessment prep and State depth sheets. Your sector and state choices change the rows inside the filtered sheets, not the number of sheets.

The technical PDFs and complete HTML reference manuals are included in every set as complete reference documents.

Use the preparation walkthrough alongside those references.

What the November 2026 Edition Covers

November 3, 2026 edition

This builder uses the November 3, 2026 edition. Your state choices narrow the state research rows to the states you operate in, and the README in each set lists every file it contains.

The sector packs cite the TSA pipeline and rail directives in force since May 3, 2026, the aviation security program sources, the CIRCIA rule status, the CMMC Phase II suspension and the state starting sources. A GDF examiner can map them to your facilities on a free first call.

New York utility audit planning

Need a New York utility IT or PII audit? Use the specialist builder to select the utility profile and detailed DFS or PSC procedures, with all applicability questions retained.

Read the NY utility planning pack or customize a utility audit workbook set.

Current edition and HTML manuals

November 3, 2026 edition

Choose from 27 water, 20 power, 19 manufacturing and 28 transportation procedures. The builder filters sector and state working rows. Keep the selected source notes separate from completed legal research, and assign the remaining facility and local work.

Blank, invalid and unsupported applicability decisions remain in the open count. Sources show retrieval limits and native links. Tagged PDFs retain fillable records; the complete HTML manuals below provide reading and navigation alternatives. Formal assistive technology and native Excel review remain pending.

Actual project findings, scope approvals and technical reviews require evidence and responsible people. No template establishes compliance or permission to test production.

Request the current complete edition by email

Document the work and its limits

Your custom set includes workbooks of 22 sheets, the field guide and complete reference manuals. A project rename preserves preparation entries; a material scope change lets you download existing records, cancel or explicitly clear them.

Each sector workbook retains unresolved requirements outside the selected work. A state checkbox does not establish local duties. Map the actual clauses and evidence before drawing conclusions or arranging permitted field activity.

Read the field and documentation guide (HTML) or download the guide (PDF, 5 pages).

Dedicated New Jersey planning set

Working in New Jersey? The dedicated NJ builder includes AMI, water safety, Toxic Catastrophe Prevention Act (TCPA) and privacy procedures alongside utility and transportation scope screens.

NJ water/wastewater, electric and gas utility set or Customize a NJ utility set.

Prepare for an audit, security assessment or penetration test

Gather scope, records, owners and permissions before an assessment. Preparation does not authorize testing.

Assessment preparation walkthrough and checklist.

State profiles are research leads. Read coverage limits, Indiana/Maryland corrections and the depth register.

Current file use guidance

Selected national exports use the reviewed master and include its presentation notice. Choose the relevant sectors, states and preparation purposes. After selecting a linked field procedure, fit longer rows and inspect the continuation pages; a successful package download does not establish an audit result or permission to test.

Read the formatting, printing and accessibility limits. The package notice includes the detailed row sizing steps and tested scope.

Gather records before an engagement

Related Audit and Assessment Preparation Packages

Choose a guide to identify records, assign owners and prepare questions for your auditor, consultant, counsel or export control specialist.

These are preparation aids. They do not replace an audit, assessment, legal opinion or specialist decision, and they do not authorize testing.

Read the overviews without a form. Downloads require your name and email; we email a seven day access link. Organization and phone are optional.

  • Water and Wastewater OT Assessment Preparation

    Gather system boundaries, ownership facts, operating dependencies and records for a water or wastewater assessment.

    File: Fillable PDF planning pack.

    Read scope and contents

    Request download (PDF)

  • Power and Energy OT Assessment Preparation

    Organize facility facts, system scope, responsibility and evidence for power and energy assessment planning.

    File: Fillable PDF planning pack.

    Read scope and contents

    Request download (PDF)

  • Manufacturing OT preparation

    Inventory production dependencies, control systems, vendors and safety constraints before scoping an assessment.

    File: Fillable PDF planning pack.

    Read scope and contents

    Request download (PDF)

  • Transportation OT preparation

    Gather mode, facility, ownership and operational system facts for surface, port, aviation or pipeline scope review.

    File: Fillable PDF planning pack.

    Read scope and contents

    Request download (PDF)

  • Complete OT Assessment Planning Package

    Use the four sector packs, project workbook and shared source records to organize a proposed OT assessment.

    File: ZIP: PDFs, XLSX workbook and CSV records.

    Read scope and contents

    Request download (ZIP)

Browse all preparation packages by subject.

Check each overview for source dates, scope limits and unresolved questions before using a download.

Join the GDF mailing list

Receive the GDF newsletter. Signup is optional. Your files and results are not sent to Robly.

Open newsletter signup

You will leave this website to use GDF's signup form hosted by Robly. Newsletter privacy information

Reviewed by Joseph Caruso, Founder, CEO and CTO, CISSP. Last reviewed .

Privacy center

Choose your site settings

Optional technology stays off until you choose otherwise. You can change these browser settings at any time. Access to the core site does not depend on optional technologies.

Technology preferences
Sale or cross-context sharing: not used GDF does not sell or share website personal information for cross-context behavioral advertising.