Recommendations to Implement Secure Remote Access (SRA) in OT Environments

**Executive Summary:** This Dragos guidance describes Secure Remote Access (SRA) best practices for OT/ICS environments, recommending leveraging existing IT identity and access controls, deploying DMZ jump hosts and network segmentation, enforcing multi-factor authentication, restricting and auditing third-party/vendor access, and implementing session/file monitoring and Privileged Access Management to reduce the risk of adversary initial access and privilege misuse.