OTVista
Book a demo

Early access

Governance & Policy

Keep OT-specific policies and procedures in one governed library with owners, review cycles and links to the controls they implement.

Book a demoAll modules

Capabilities

  • Policy and procedure library with versioning
  • RACI for engineering, IT, operations and vendors
  • Review reminders and approval history
  • Links from documents to controls and evidence
  • Exceptions register with expiry dates

What it changes

  • Policies people can find and follow
  • Clear accountability across teams
  • Exceptions that do not become permanent

Supports requirements in

  • IEC 62443-2-1
  • NIS2 Art. 21
  • NCA ECC
  • ISO/IEC 27001

Standards by region

The OTVista Platform is in early access. Modules are released progressively, and demos show the current release. Ask us which capabilities are available for your environment today.

Delivered with services

Other modules

  • Asset Visibility

    One inventory of controllers, HMIs, servers, network devices and software across every site.

    Asset Visibility

    • Import from spreadsheets, CMMS and OT monitoring tool exports
    • Normalized vendor, model, firmware and OS data
    • Site, area, zone and cabinet location hierarchy
    IEC 62443-2-1NIST CSF 2.0 ID.AMNCA OTCC
    Explore module Tap card to flip back

  • Zones & Conduits

    Model your OT architecture as security zones and conduits, and see what crosses each boundary.

    Zones & Conduits

    • Visual zone and conduit model per site
    • Purdue-level and custom layer views
    • Allowed flows documented with justification
    IEC 62443-3-2IEC 62443-3-3NIST SP 800-82
    Explore module Tap card to flip back

  • OT Risk Management

    Scenario-based risk register tied to assets, zones and real operational consequences.

    OT Risk Management

    • Configurable likelihood and consequence scales
    • Safety, availability, environment and compliance impact
    • Existing safeguards credited with evidence
    IEC 62443-3-2ISO 31000NIST CSF 2.0 GV/ID.RA
    Explore module Tap card to flip back

  • Standards & Compliance

    Assess once, map to many: IEC 62443, NIS2, NERC CIP, NCA OTCC, UK CAF and more.

    Standards & Compliance

    • Framework libraries for international and regional standards
    • Cross-mapping between overlapping requirements
    • Applicability decisions recorded per site and system
    IEC 62443NIS2NERC CIP
    Explore module Tap card to flip back

  • Identity & Access Review

    Find shared, default and dormant OT accounts and run periodic access reviews.

    Identity & Access Review

    • Account and role register per system
    • Shared and default account tracking
    • Dormant and leaver account flags
    IEC 62443-3-3 FR1/FR2NERC CIP-004 / CIP-007NCA OTCC
    Explore module Tap card to flip back

  • Vulnerability & Advisory Management

    Track vendor and CERT advisories against your asset versions and record each decision.

    Vulnerability & Advisory Management

    • Advisory register linked to affected assets
    • Applicability and exposure assessment workflow
    • Operational impact and patch feasibility notes
    IEC 62443-2-3NIST SP 800-82NERC CIP-007 R2
    Explore module Tap card to flip back

From the blog

Related insights

All posts

See Governance & Policy in action

Book a demo to see the current release and discuss your environment.

Book a demo