<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>OTVista Blog</title><link>https://otvista.com/blog</link><atom:link href="https://otvista.com/feed.xml" rel="self" type="application/rss+xml"/><description>OT cybersecurity insights from OTVista</description><language>en</language><item><title>NIS2 in 2026: what OT operators should have in place now</title><link>https://otvista.com/blog/nis2-2026-ot-operators-checklist</link><guid>https://otvista.com/blog/nis2-2026-ot-operators-checklist</guid><pubDate>Thu, 22 Oct 2026 08:00:00 +0000</pubDate><category>Regulation</category><description>NIS2 is enforced through national laws across the EU. A 2026 checklist for OT operators: governance, risk management, supply chain, incident reporting and evidence.</description></item><item><title>The Cyber Resilience Act's reporting duties are live: what changes for OT</title><link>https://otvista.com/blog/cyber-resilience-act-reporting-ot</link><guid>https://otvista.com/blog/cyber-resilience-act-reporting-ot</guid><pubDate>Thu, 22 Oct 2026 08:00:00 +0000</pubDate><category>Regulation</category><description>Since 11 September 2026, CRA vulnerability and incident reporting applies to makers of products with digital elements. What OT owners and suppliers should do now.</description></item><item><title>Zones and conduits in practice: segmentation that survives reality</title><link>https://otvista.com/blog/zones-and-conduits-in-practice</link><guid>https://otvista.com/blog/zones-and-conduits-in-practice</guid><pubDate>Thu, 22 Oct 2026 08:00:00 +0000</pubDate><category>Architecture</category><description>How to design IEC 62443 zones and conduits that hold up in real plants: defining zones, documenting flows, choosing boundary devices and keeping the model current.</description></item><item><title>AI in OT security: where it helps and where it needs guardrails</title><link>https://otvista.com/blog/ai-in-ot-security</link><guid>https://otvista.com/blog/ai-in-ot-security</guid><pubDate>Thu, 22 Oct 2026 08:00:00 +0000</pubDate><category>Technology</category><description>Where AI genuinely helps OT security teams in 2026, from triaging advisories to drafting findings, and the guardrails industrial environments need before trusting it.</description></item><item><title>Preparing for Saudi NCA OTCC: a practical readiness guide</title><link>https://otvista.com/blog/saudi-nca-otcc-readiness</link><guid>https://otvista.com/blog/saudi-nca-otcc-readiness</guid><pubDate>Thu, 22 Oct 2026 08:00:00 +0000</pubDate><category>Regulation</category><description>How industrial operators in Saudi Arabia can prepare for the NCA Operational Technology Cybersecurity Controls (OTCC): scope, asset inventory, evidence and ECC links.</description></item><item><title>Secure remote access for OT vendors: a 2026 baseline</title><link>https://otvista.com/blog/secure-remote-access-ot-vendors</link><guid>https://otvista.com/blog/secure-remote-access-ot-vendors</guid><pubDate>Thu, 22 Oct 2026 08:00:00 +0000</pubDate><category>Best practice</category><description>A practical baseline for vendor and engineering remote access to OT: single controlled path, MFA, just-in-time approval, session recording and supply-chain requirements.</description></item></channel></rss>
