Topic starter
25/10/2026 11:09 am
TL;DR: Segmentation is the control that keeps OT exposure containable or lets it become an operational crisis, according to Dragos. Remote access and wireless links make containment hinge on whether crossings stay governed.
Editorial analysis by NHI Mgmt Group, based on content published by Dragos: “Who’s Allowed on the Bridge: MTSA’s Network Segmentation Requirement”.
Key questions
Q: Why do remote access and vendor pathways increase risk in IT-OT environments?
A: Because they create authenticated bridges between business networks and operational systems that adversaries can reuse after initial access.
Q: How do teams know whether IT/OT segmentation is actually working?
A: Teams know segmentation is working when an incident on corporate IT does not alter production traffic, control-system availability, or the ability to maintain safe operations.
Q: What breaks when OT segmentation is missing or too flat?
A: Flat segmentation collapses the distinction between business systems and operational control, so a compromise can move from a low-risk entry point into environments that affect safety, availability, or control logic.
Practitioner guidance
- Map every OT crossing point Document enterprise-to-OT and OT-to-OT crossings, including vendor remote access, jump hosts, wireless uplinks, and undocumented flat connections.
- Broker all remote access through controlled ingress Require every external OT access path to use a dedicated jump host or broker with logging, time limits, and purpose-specific access.
- Separate wireless and radio paths from control networks Treat Wi-Fi, cellular, satellite, radio, and telemetry links as distinct ingress channels and keep them out of control-plane trust zones.
Bottom line: Segmentation is the control that determines whether OT exposure stays containable or becomes an operational crisis.
Glossary terms: Network Segmentation, Operational Technology Demilitarized Zone, Jump Host, Path-Based Exposure
Explore further
View Full Forum → | NHI Foundation Course → | Our Services → | Read the full analysis →
This topic was modified 7 days ago by NHI Mgmt Group
27/10/2026 7:15 pm
Boundary governance is the real control plane in OT segmentation. Asset inventory is necessary, but it does not answer the question that matters most: what can reach what, and under what authority. In OT, that answer determines whether a compromise stays local or becomes an operational event. Practitioners should treat segmentation as policy enforcement for reachability, not just diagram hygiene.
A few things that frame the scale:
- Only 5.7% of organisations have full visibility into their service accounts, according to the Ultimate Guide to NHIs.
A question worth separating out:
Q: When should healthcare teams prioritise microsegmentation over broad network redesign?
A: Teams should prioritise microsegmentation when devices cannot be easily patched, replaced, or moved into separate physical networks without clinical disruption. In those cases, identity-based segmentation gives faster risk reduction and narrower access boundaries while preserving care workflows.
👉 Read our full editorial: Network segmentation is the control that contains OT exposure
This post was modified 7 days ago by NHI Mgmt Group