Early access
Evidence & Audit Trail
Store or reference evidence once and link it to every control, finding and framework it supports. Every update is recorded so reviews can follow the trail.
Capabilities
- Evidence library with owners and review dates
- Links from evidence to controls and findings
- Immutable activity history
- Evidence freshness alerts
- Auditor-ready export packs
What it changes
- No last-minute document hunts
- Traceable conclusions
- Continuity when people change roles
Supports requirements in
The OTVista Platform is in early access. Modules are released progressively, and demos show the current release. Ask us which capabilities are available for your environment today.
Delivered with services
Other modules
-
Asset Visibility
One inventory of controllers, HMIs, servers, network devices and software across every site.
Asset Visibility
- Import from spreadsheets, CMMS and OT monitoring tool exports
- Normalized vendor, model, firmware and OS data
- Site, area, zone and cabinet location hierarchy
IEC 62443-2-1NIST CSF 2.0 ID.AMNCA OTCCExplore module Tap card to flip back -
Zones & Conduits
Model your OT architecture as security zones and conduits, and see what crosses each boundary.
Zones & Conduits
- Visual zone and conduit model per site
- Purdue-level and custom layer views
- Allowed flows documented with justification
IEC 62443-3-2IEC 62443-3-3NIST SP 800-82Explore module Tap card to flip back -
OT Risk Management
Scenario-based risk register tied to assets, zones and real operational consequences.
OT Risk Management
- Configurable likelihood and consequence scales
- Safety, availability, environment and compliance impact
- Existing safeguards credited with evidence
IEC 62443-3-2ISO 31000NIST CSF 2.0 GV/ID.RAExplore module Tap card to flip back -
Standards & Compliance
Assess once, map to many: IEC 62443, NIS2, NERC CIP, NCA OTCC, UK CAF and more.
Standards & Compliance
- Framework libraries for international and regional standards
- Cross-mapping between overlapping requirements
- Applicability decisions recorded per site and system
IEC 62443NIS2NERC CIPExplore module Tap card to flip back -
Governance & Policy
OT security policies, roles and responsibilities that are owned, versioned and reviewed.
Governance & Policy
- Policy and procedure library with versioning
- RACI for engineering, IT, operations and vendors
- Review reminders and approval history
IEC 62443-2-1NIS2 Art. 21NCA ECCExplore module Tap card to flip back -
Identity & Access Review
Find shared, default and dormant OT accounts and run periodic access reviews.
Identity & Access Review
- Account and role register per system
- Shared and default account tracking
- Dormant and leaver account flags
IEC 62443-3-3 FR1/FR2NERC CIP-004 / CIP-007NCA OTCCExplore module Tap card to flip back
From the blog
Related insights
-
Regulation7 min
NIS2 in 2026: what OT operators should have in place now
National NIS2 laws are now being enforced. Here is what energy, water, transport and manufacturing operators should be able to show for their OT environments.
Read the article -
Technology6 min
AI in OT security: where it helps and where it needs guardrails
AI can take the paperwork out of OT security, but control decisions must stay with engineers. A grounded look at useful applications and necessary guardrails.
Read the article -
Best practice5 min
Secure remote access for OT vendors: a 2026 baseline
Remote access remains one of the most common routes into OT. A clear, achievable baseline for vendor and engineering access in 2026.
Read the article
See Evidence & Audit Trail in action
Book a demo to see the current release and discuss your environment.