Controls
Intermediate
30 min

Remediation Tracker

Pro

Convert an audit findings list into a tracker with priority, owner, and due date.

Company brief
Cobalt Industrial

Manufacturing · North America + Mexico

Description

Industrial OEM with eight plants, 3,000 employees, and a recently acquired IT/OT convergence program.

Analyst task

You inherited an OT security program in its first year. Write the 12-month roadmap that justifies the spend to the plant managers — they do not care about frameworks, only uptime.

Systems

  • Plant-floor MES
  • OT segmented network
  • ERP
  • Remote vendor access for machine maintenance

Regulatory exposure

  • NERC CIP (limited plant scope)
  • OSHA recordkeeping
  • Mexico LFPDPPP (privacy)

Top risks

  • OT ransomware
  • Remote vendor access exposure
  • Phishing of plant staff
  • IT/OT segmentation gaps

Audit concerns

  • OT segmentation evidence
  • Vendor remote-access logs

Write your answer

Pro
Loading lab…