A Matter of Trust: Remote Access for ICS

**Executive summary:** This guidance outlines risks and best practices for enabling remote access to OT/ICS environments, advising that remote access should not be enabled by default, must involve OT/IT/engineering stakeholders, and should follow standards such as ISA/IEC 62443, NIST SP 800-82, and NERC CIP. Recommended controls include using a DMZ and dedicated jump hosts, multi-factor authentication, local re-authentication to ICS systems, strict allow-listing of access, thorough logging and monitoring, and careful vendor evaluation; the report emphasizes engineering rigor and that remote access is not a 'set it and forget it' capability.