An edge gateway connects plant sources to monitoring and analysis systems. Review its network position, permitted data flows, management access and ownership before integrating it into wastewater operations.
Assign ownership and document flows
Record device model, software version, location and responsible teams. List source connections, data destinations and administration paths. Each flow should have a purpose and an approval owner.
Review the operational network boundary
Identify where traffic is controlled between plant equipment and other networks. Confirm whether the gateway needs read access or commands. Even collection-only access needs compatibility and communications-load checks approved by operations.
Manage remote support by person and task
Document named accounts, roles, access duration and the approving person. Review multi-factor authentication against system capability and policy. Keep session and change logs, and define how vendor access ends after the task.
Plan updates and restoration
Use vendor guidance to check supported versions, package authenticity and compatibility. Agree a test environment, change window and rollback plan. Store controlled configuration backups and verify data quality, time and permissions after restoration.
Records to check
| Record group | Evidence to review |
|---|---|
| Asset and connections | Inventory and approved flow diagram |
| Access | Account owner, role and expiry |
| Maintenance | Update plan, backup and restore evidence |
Prepare an assessment with X-IRIS
Bring a network diagram with sensitive details removed, device inventory, access policy and technical contacts. Review the implementation roadmap and request an assessment to agree a scope that can be tested.
Technical reference: NIST SP 800-82 Rev. 3 discusses OT network segmentation and remote access alongside operational safety and reliability.
