PRO-15 · Protect

Physical access control

Operational technology actions

• Action 1

  Maintain physical site access controls, and plan for a safe site environment for operators to work in, that continue to function in a degraded or isolated state.

  • Phase 1Critical processes and services
  Rate this action in the Navigator →
• Action 2

  Implement physical security controls at devices and sites where physical access poses heightened cyber security risk, and disable unused physical ports and removable media interfaces where business continuity allows.

  • Phase 1Critical processes and services
  Rate this action in the Navigator →

Open the Navigator →

More Protect principles

• PRO-01Secure system lifecycle
• PRO-04Secure configuration management
• PRO-05Secure administration
• PRO-06Vulnerability management
• PRO-07Trustworthy software
• PRO-08Cryptographic protection
• PRO-09Content filtering
• PRO-10Regular and proven backups
• PRO-12Least privilege access
• PRO-13Identity, credential and access management
• PRO-14Cyber security awareness training
• PRO-16Cyber supply chain security
• PRO-18Network segmentation and segregation
• PRO-19Operational technology isolation
• PRO-20Remote access to operational technology

Source: ASD Essentials for operational technology, version 2026.10.15, Australian Signals Directorate. The Navigator is an independent project and is not affiliated with or endorsed by the Australian Signals Directorate.