# Plan an operational technology (OT) cybersecurity project

A work breakdown structure for securing industrial control systems, built around safety, uptime, and OT security standards.

- Topic: Projects & Operations
- Framework: Few-Shot
- Level: Standard
- Tags: Legal, Plan, Fill-in Template
- Source: https://www.thinkwithprompt.com/prompts/plan-an-operational-technology-ot-cybersecurity-project

## Prompt

```text
Help me plan an OT (operational technology) cybersecurity project.

**Facility type:** [e.g. manufacturing plant, utility, water treatment, oil and gas, building automation]
**Systems in scope:** [PLCs, SCADA, DCS, HMIs, historians, remote access, IT/OT network links]
**Project goal:** [e.g. asset inventory and segmentation, secure remote access, compliance with a standard, incident response readiness]
**Standards or regulations:** [e.g. IEC 62443, NIST SP 800-82, NERC CIP, local critical-infrastructure rules]
**Constraints:** [maintenance windows, legacy systems that can't be patched, vendor support contracts, staff]
**Timeline and team:** [DURATION, roles available]

Create:
1. A work breakdown structure (numbered to three levels) covering initiation, asset discovery and inventory, risk assessment, zone-and-conduit or segmentation design, remote-access and identity controls, monitoring and detection, patch and vulnerability management for legacy systems, backup and recovery, incident response with operations, training, testing and commissioning, and handover.
2. For each work package: deliverable, owner role, dependencies, and whether it needs a plant shutdown or maintenance window.
3. OT-specific risks and mitigations: safety impact, unplanned downtime, active scanning disrupting fragile devices, vendor warranty conditions, IT/OT team friction.
4. A milestone timeline aligned to my maintenance windows.
5. Success measures (e.g. percent of assets inventoried, segmented zones, remote sessions under control).

Always prioritize safety and process availability: flag any task that should be tested offline first and approved by operations and the control system vendor. Mark requirements you're unsure apply to my sector as [CONFIRM].
```

## What to fill in

- DURATION, roles available
- CONFIRM

Free to copy and use. From ThinkWithPrompt (https://www.thinkwithprompt.com/), a library of 2,663 curated AI prompts.