OTVista
Book a demo

Early access

Standards & Compliance

Assess controls against the frameworks that apply to you and reuse the same evidence across overlapping requirements in the EU, UK, USA and Middle East.

Book a demoAll modules

Capabilities

  • Framework libraries for international and regional standards
  • Cross-mapping between overlapping requirements
  • Applicability decisions recorded per site and system
  • Control status, evidence and gaps in one view
  • Readiness reports per framework

What it changes

  • Less duplicate audit work
  • Readiness visible before the auditor arrives
  • Consistent results across sites

Supports requirements in

  • IEC 62443
  • NIS2
  • NERC CIP
  • NCA ECC / OTCC
  • UK NCSC CAF
  • NIST CSF 2.0

Standards by region

The OTVista Platform is in early access. Modules are released progressively, and demos show the current release. Ask us which capabilities are available for your environment today.

Delivered with services

Other modules

  • Asset Visibility

    One inventory of controllers, HMIs, servers, network devices and software across every site.

    Asset Visibility

    • Import from spreadsheets, CMMS and OT monitoring tool exports
    • Normalized vendor, model, firmware and OS data
    • Site, area, zone and cabinet location hierarchy
    IEC 62443-2-1NIST CSF 2.0 ID.AMNCA OTCC
    Explore module Tap card to flip back

  • Zones & Conduits

    Model your OT architecture as security zones and conduits, and see what crosses each boundary.

    Zones & Conduits

    • Visual zone and conduit model per site
    • Purdue-level and custom layer views
    • Allowed flows documented with justification
    IEC 62443-3-2IEC 62443-3-3NIST SP 800-82
    Explore module Tap card to flip back

  • OT Risk Management

    Scenario-based risk register tied to assets, zones and real operational consequences.

    OT Risk Management

    • Configurable likelihood and consequence scales
    • Safety, availability, environment and compliance impact
    • Existing safeguards credited with evidence
    IEC 62443-3-2ISO 31000NIST CSF 2.0 GV/ID.RA
    Explore module Tap card to flip back

  • Governance & Policy

    OT security policies, roles and responsibilities that are owned, versioned and reviewed.

    Governance & Policy

    • Policy and procedure library with versioning
    • RACI for engineering, IT, operations and vendors
    • Review reminders and approval history
    IEC 62443-2-1NIS2 Art. 21NCA ECC
    Explore module Tap card to flip back

  • Identity & Access Review

    Find shared, default and dormant OT accounts and run periodic access reviews.

    Identity & Access Review

    • Account and role register per system
    • Shared and default account tracking
    • Dormant and leaver account flags
    IEC 62443-3-3 FR1/FR2NERC CIP-004 / CIP-007NCA OTCC
    Explore module Tap card to flip back

  • Vulnerability & Advisory Management

    Track vendor and CERT advisories against your asset versions and record each decision.

    Vulnerability & Advisory Management

    • Advisory register linked to affected assets
    • Applicability and exposure assessment workflow
    • Operational impact and patch feasibility notes
    IEC 62443-2-3NIST SP 800-82NERC CIP-007 R2
    Explore module Tap card to flip back

From the blog

Related insights

All posts

See Standards & Compliance in action

Book a demo to see the current release and discuss your environment.

Book a demo