OTVista
Book a demo

Early access

Identity & Access Review

Record who can access which OT systems and with what privilege, then run structured access reviews with system owners to remove what is no longer needed.

Book a demoAll modules

Capabilities

  • Account and role register per system
  • Shared and default account tracking
  • Dormant and leaver account flags
  • Scheduled access review campaigns
  • Review decisions kept as evidence

What it changes

  • Fewer standing privileges
  • Evidence for access-related audit questions
  • Faster offboarding of staff and contractors

Supports requirements in

  • IEC 62443-3-3 FR1/FR2
  • NERC CIP-004 / CIP-007
  • NCA OTCC
  • UK NCSC CAF B2

Standards by region

The OTVista Platform is in early access. Modules are released progressively, and demos show the current release. Ask us which capabilities are available for your environment today.

Delivered with services

Other modules

  • Asset Visibility

    One inventory of controllers, HMIs, servers, network devices and software across every site.

    Asset Visibility

    • Import from spreadsheets, CMMS and OT monitoring tool exports
    • Normalized vendor, model, firmware and OS data
    • Site, area, zone and cabinet location hierarchy
    IEC 62443-2-1NIST CSF 2.0 ID.AMNCA OTCC
    Explore module Tap card to flip back

  • Zones & Conduits

    Model your OT architecture as security zones and conduits, and see what crosses each boundary.

    Zones & Conduits

    • Visual zone and conduit model per site
    • Purdue-level and custom layer views
    • Allowed flows documented with justification
    IEC 62443-3-2IEC 62443-3-3NIST SP 800-82
    Explore module Tap card to flip back

  • OT Risk Management

    Scenario-based risk register tied to assets, zones and real operational consequences.

    OT Risk Management

    • Configurable likelihood and consequence scales
    • Safety, availability, environment and compliance impact
    • Existing safeguards credited with evidence
    IEC 62443-3-2ISO 31000NIST CSF 2.0 GV/ID.RA
    Explore module Tap card to flip back

  • Standards & Compliance

    Assess once, map to many: IEC 62443, NIS2, NERC CIP, NCA OTCC, UK CAF and more.

    Standards & Compliance

    • Framework libraries for international and regional standards
    • Cross-mapping between overlapping requirements
    • Applicability decisions recorded per site and system
    IEC 62443NIS2NERC CIP
    Explore module Tap card to flip back

  • Governance & Policy

    OT security policies, roles and responsibilities that are owned, versioned and reviewed.

    Governance & Policy

    • Policy and procedure library with versioning
    • RACI for engineering, IT, operations and vendors
    • Review reminders and approval history
    IEC 62443-2-1NIS2 Art. 21NCA ECC
    Explore module Tap card to flip back

  • Vulnerability & Advisory Management

    Track vendor and CERT advisories against your asset versions and record each decision.

    Vulnerability & Advisory Management

    • Advisory register linked to affected assets
    • Applicability and exposure assessment workflow
    • Operational impact and patch feasibility notes
    IEC 62443-2-3NIST SP 800-82NERC CIP-007 R2
    Explore module Tap card to flip back

From the blog

Related insights

All posts

See Identity & Access Review in action

Book a demo to see the current release and discuss your environment.

Book a demo