Skip to main content
MuonPartners
Services
Architecture

Solution design and technology roadmapping

Solution AssessmentTechnology RoadmapsIntegration DesignSolution ArchitectureTechnical Design
Cyber Security

Security assessments, IAM, and compliance

AssessmentsIAMComplianceSecurity BaselineCyber Innovation
Network and Platform

Network architecture and cloud platforms

Network DesignCloud StrategyModernisation
Enterprise Architecture

Business-technology alignment

Business AlignmentPortfolio AnalysisGovernance
View all services
ProjectsCase StudiesInsightsToolsAbout
Contact Us

Services

Architecture
Solution AssessmentTechnology RoadmapsIntegration DesignSolution ArchitectureTechnical Design
Cyber Security
AssessmentsIAMComplianceSecurity BaselineCyber Innovation
Network and Platform
Network DesignCloud StrategyModernisation
Enterprise Architecture
Business AlignmentPortfolio AnalysisGovernance
ProjectsCase StudiesInsightsToolsAboutContact
Get in Touch
MuonPartners

Strategic technology consulting for Australian organisations navigating complexity.

Services

  • Architecture
  • Cyber Security
  • Network and Platform
  • Enterprise Architecture

Company

  • About
  • Products
  • Frameworks
  • Cross-Framework Mapping
  • Projects
  • Case Studies
  • Insights
  • Contact

Contact

  • [email protected]
  • Australia
  • LinkedIn

© 2026 Muon Partners. All rights reserved.

ABN 50 669 022 315 · A Muon Group company.

Privacy PolicyTerms of Service
  1. Frameworks
  2. >AESCSF
  3. >ARCHITECTURE
  4. >Implement Network Protections As An Element Of The Cybersecurity Architecture
  5. >AESCSF-ARCHITECTURE-2j
AESCSF-ARCHITECTURE-2jActive

OT systems are operationally independent from IT systems so that OT operations can be sustained during an outage of I...

Statement

OT systems are operationally independent from IT systems so that OT operations can be sustained during an outage of IT systems

Context and Guidance: OT systems should be architected in such a way that they are able to continue operations when there is an outage or disruption to IT systems. The organisation should not only implement manual backup processes, but these processes should be tested to ensure that they function as expected. OT systems refer to assets that operate on the OT network segment. These assets might resemble traditional IT assets, except that they support OT operations. When considering this practice, be aware that OT systems are sometimes dependent on IT systems that operate on a separate IT network segment. The intent in this practice is to ensure that service delivery or production activities supported by OT systems can be sustained if IT systems are unavailable for any reason.

Related Practices • Progression: This practice is part of a practice progression. Practice progressions are groups of related practices that represent increasingly complete or more advanced implementations of an activity. The practices in this progression include: ARCHITECTURE-2b, ARCHITECTURE-2d, ARCHITECTURE-2h, ARCHITECTURE-2i, ARCHITECTURE-2j, ARCHITECTURE-2l.

Location

Domain
ARCHITECTURE
Objective
Implement Network Protections as an Element of the Cybersecurity Architecture

Practice Details

Identifier
AESCSF-ARCHITECTURE-2j
Type
Practice
Domain
ARCHITECTURE
Objective
Implement Network Protections as an Element of the Cybersecurity Architecture

Maturity Level

MIL-1MIL-2MIL-3

Security Profile

SP-1SP-2SP-3
C2M2
C2M2-ARCHITECTURE-2Jequivalentvia derived-shared-practice-structure
ISO 27001
ISO27001-8.20relatedvia aescsf-reference
ISO27001-8.22relatedvia aescsf-reference
ISO27001-5.14relatedvia aescsf-reference
ISO27001-8.26relatedvia aescsf-reference
View in graphReport an issue
← Back to Implement Network Protections as an Element of the Cybersecurity Architecture
Implement Network Protections as an Element of the Cybersecurity Architecture12 controls
AESCSF-ARCHITECTURE-2aNetwork protections are implemented, at least in an ad hoc mannerAESCSF-ARCHITECTURE-2bThe organisation’s IT systems are separated from OT systems through segmentation, either through physical means or lo...AESCSF-ARCHITECTURE-2cNetwork protections are defined and enforced for selected asset types according to asset risk and priority (for examp...AESCSF-ARCHITECTURE-2dAssets that are important to the delivery of the function are logically or physically segmented into distinct securit...AESCSF-ARCHITECTURE-2eNetwork protections incorporate the principles of least privilege and least functionalityAESCSF-ARCHITECTURE-2fNetwork protections include monitoring, analysis, and control of network traffic for selected security zones (for exa...AESCSF-ARCHITECTURE-2gWeb traffic and email are monitored, analysed, and controlled (for example, malicious link blocking, suspicious downl...AESCSF-ARCHITECTURE-2hAll assets are segmented into distinct security zones based on cybersecurity requirementsAESCSF-ARCHITECTURE-2iSeparate networks are implemented, where warranted, that logically or physically segment assets into security zones w...AESCSF-ARCHITECTURE-2jOT systems are operationally independent from IT systems so that OT operations can be sustained during an outage of I...AESCSF-ARCHITECTURE-2kDevice connections to the network are controlled to ensure that only authorised devices can connect (for example, net...AESCSF-ARCHITECTURE-2lThe cybersecurity architecture enables the isolation of compromised assets