Compressed-Air Ot Cybersecurity, Control-System Resilience & Recovery Engineering

COMPRESSED-AIR OT CYBERSECURITY, CONTROL-SYSTEM RESILIENCE & RECOVERY ENGINEERING

Connect the data without making the air supply depend on the connection

The objective is continuity: loss of a dashboard, analytics platform, remote connection or non-essential network service should not unnecessarily remove the plant's ability to produce controlled compressed air.

This is architecture and governance guidance, not a disclosure of site credentials, network addresses, vulnerabilities or exploit methods. Exact controls remain subject to owner IT/OT policy, current product documentation, competent specialists and applicable requirements.

1 — Ot Asset Inventory

Asset and trust boundary: govern OT asset inventory as part of compressed-air operational resilience. Define the affected asset or function, operational consequence, authorised owner, approved state, evidence source, recovery path and verification method. Preserve local equipment protection and competent IT/OT authority. Where product behaviour, compatibility or cybersecurity capability is unknown, record the gap and verify it from current documentation rather than assuming it.

2 — Controller Identity

Asset and trust boundary: govern controller identity as part of compressed-air operational resilience. Define the affected asset or function, operational consequence, authorised owner, approved state, evidence source, recovery path and verification method. Preserve local equipment protection and competent IT/OT authority. Where product behaviour, compatibility or cybersecurity capability is unknown, record the gap and verify it from current documentation rather than assuming it.

3 — Sequencer Identity

Asset and trust boundary: govern sequencer identity as part of compressed-air operational resilience. Define the affected asset or function, operational consequence, authorised owner, approved state, evidence source, recovery path and verification method. Preserve local equipment protection and competent IT/OT authority. Where product behaviour, compatibility or cybersecurity capability is unknown, record the gap and verify it from current documentation rather than assuming it.

4 — Vsd Identity

Asset and trust boundary: govern VSD identity as part of compressed-air operational resilience. Define the affected asset or function, operational consequence, authorised owner, approved state, evidence source, recovery path and verification method. Preserve local equipment protection and competent IT/OT authority. Where product behaviour, compatibility or cybersecurity capability is unknown, record the gap and verify it from current documentation rather than assuming it.

5 — Dryer-Control Identity

Asset and trust boundary: govern dryer-control identity as part of compressed-air operational resilience. Define the affected asset or function, operational consequence, authorised owner, approved state, evidence source, recovery path and verification method. Preserve local equipment protection and competent IT/OT authority. Where product behaviour, compatibility or cybersecurity capability is unknown, record the gap and verify it from current documentation rather than assuming it.

6 — Meter/Gateway Identity

Asset and trust boundary: govern meter/gateway identity as part of compressed-air operational resilience. Define the affected asset or function, operational consequence, authorised owner, approved state, evidence source, recovery path and verification method. Preserve local equipment protection and competent IT/OT authority. Where product behaviour, compatibility or cybersecurity capability is unknown, record the gap and verify it from current documentation rather than assuming it.

7 — Hmi Identity

Asset and trust boundary: govern HMI identity as part of compressed-air operational resilience. Define the affected asset or function, operational consequence, authorised owner, approved state, evidence source, recovery path and verification method. Preserve local equipment protection and competent IT/OT authority. Where product behaviour, compatibility or cybersecurity capability is unknown, record the gap and verify it from current documentation rather than assuming it.

8 — Historian Identity

Asset and trust boundary: govern historian identity as part of compressed-air operational resilience. Define the affected asset or function, operational consequence, authorised owner, approved state, evidence source, recovery path and verification method. Preserve local equipment protection and competent IT/OT authority. Where product behaviour, compatibility or cybersecurity capability is unknown, record the gap and verify it from current documentation rather than assuming it.

9 — Remote-Support Identity

Asset and trust boundary: govern remote-support identity as part of compressed-air operational resilience. Define the affected asset or function, operational consequence, authorised owner, approved state, evidence source, recovery path and verification method. Preserve local equipment protection and competent IT/OT authority. Where product behaviour, compatibility or cybersecurity capability is unknown, record the gap and verify it from current documentation rather than assuming it.

10 — Engineering-Workstation Identity

Asset and trust boundary: govern engineering-workstation identity as part of compressed-air operational resilience. Define the affected asset or function, operational consequence, authorised owner, approved state, evidence source, recovery path and verification method. Preserve local equipment protection and competent IT/OT authority. Where product behaviour, compatibility or cybersecurity capability is unknown, record the gap and verify it from current documentation rather than assuming it.

11 — Software/Tool Identity

Asset and trust boundary: govern software/tool identity as part of compressed-air operational resilience. Define the affected asset or function, operational consequence, authorised owner, approved state, evidence source, recovery path and verification method. Preserve local equipment protection and competent IT/OT authority. Where product behaviour, compatibility or cybersecurity capability is unknown, record the gap and verify it from current documentation rather than assuming it.

12 — Firmware Identity

Asset and trust boundary: govern firmware identity as part of compressed-air operational resilience. Define the affected asset or function, operational consequence, authorised owner, approved state, evidence source, recovery path and verification method. Preserve local equipment protection and competent IT/OT authority. Where product behaviour, compatibility or cybersecurity capability is unknown, record the gap and verify it from current documentation rather than assuming it.

13 — Network-Zone Identity

Asset and trust boundary: govern network-zone identity as part of compressed-air operational resilience. Define the affected asset or function, operational consequence, authorised owner, approved state, evidence source, recovery path and verification method. Preserve local equipment protection and competent IT/OT authority. Where product behaviour, compatibility or cybersecurity capability is unknown, record the gap and verify it from current documentation rather than assuming it.

14 — Data-Flow Identity

Asset and trust boundary: govern data-flow identity as part of compressed-air operational resilience. Define the affected asset or function, operational consequence, authorised owner, approved state, evidence source, recovery path and verification method. Preserve local equipment protection and competent IT/OT authority. Where product behaviour, compatibility or cybersecurity capability is unknown, record the gap and verify it from current documentation rather than assuming it.

15 — Trust-Boundary Definition

Asset and trust boundary: govern trust-boundary definition as part of compressed-air operational resilience. Define the affected asset or function, operational consequence, authorised owner, approved state, evidence source, recovery path and verification method. Preserve local equipment protection and competent IT/OT authority. Where product behaviour, compatibility or cybersecurity capability is unknown, record the gap and verify it from current documentation rather than assuming it.

16 — Critical Compressed-Air Load

Criticality and consequence: govern critical compressed-air load as part of compressed-air operational resilience. Define the affected asset or function, operational consequence, authorised owner, approved state, evidence source, recovery path and verification method. Preserve local equipment protection and competent IT/OT authority. Where product behaviour, compatibility or cybersecurity capability is unknown, record the gap and verify it from current documentation rather than assuming it.

17 — Base/Trim/Standby Consequence

Criticality and consequence: govern base/trim/standby consequence as part of compressed-air operational resilience. Define the affected asset or function, operational consequence, authorised owner, approved state, evidence source, recovery path and verification method. Preserve local equipment protection and competent IT/OT authority. Where product behaviour, compatibility or cybersecurity capability is unknown, record the gap and verify it from current documentation rather than assuming it.

18 — Pressure-Control Consequence

Criticality and consequence: govern pressure-control consequence as part of compressed-air operational resilience. Define the affected asset or function, operational consequence, authorised owner, approved state, evidence source, recovery path and verification method. Preserve local equipment protection and competent IT/OT authority. Where product behaviour, compatibility or cybersecurity capability is unknown, record the gap and verify it from current documentation rather than assuming it.

19 — Air-Quality Consequence

Criticality and consequence: govern air-quality consequence as part of compressed-air operational resilience. Define the affected asset or function, operational consequence, authorised owner, approved state, evidence source, recovery path and verification method. Preserve local equipment protection and competent IT/OT authority. Where product behaviour, compatibility or cybersecurity capability is unknown, record the gap and verify it from current documentation rather than assuming it.

20 — Ventilation/Cooling Consequence

Criticality and consequence: govern ventilation/cooling consequence as part of compressed-air operational resilience. Define the affected asset or function, operational consequence, authorised owner, approved state, evidence source, recovery path and verification method. Preserve local equipment protection and competent IT/OT authority. Where product behaviour, compatibility or cybersecurity capability is unknown, record the gap and verify it from current documentation rather than assuming it.

21 — Loss-Of-View Consequence

Criticality and consequence: govern loss-of-view consequence as part of compressed-air operational resilience. Define the affected asset or function, operational consequence, authorised owner, approved state, evidence source, recovery path and verification method. Preserve local equipment protection and competent IT/OT authority. Where product behaviour, compatibility or cybersecurity capability is unknown, record the gap and verify it from current documentation rather than assuming it.

22 — Loss-Of-Command Consequence

Criticality and consequence: govern loss-of-command consequence as part of compressed-air operational resilience. Define the affected asset or function, operational consequence, authorised owner, approved state, evidence source, recovery path and verification method. Preserve local equipment protection and competent IT/OT authority. Where product behaviour, compatibility or cybersecurity capability is unknown, record the gap and verify it from current documentation rather than assuming it.

23 — Loss-Of-Communication Consequence

Criticality and consequence: govern loss-of-communication consequence as part of compressed-air operational resilience. Define the affected asset or function, operational consequence, authorised owner, approved state, evidence source, recovery path and verification method. Preserve local equipment protection and competent IT/OT authority. Where product behaviour, compatibility or cybersecurity capability is unknown, record the gap and verify it from current documentation rather than assuming it.

24 — Loss-Of-Time-Sync Consequence

Criticality and consequence: govern loss-of-time-sync consequence as part of compressed-air operational resilience. Define the affected asset or function, operational consequence, authorised owner, approved state, evidence source, recovery path and verification method. Preserve local equipment protection and competent IT/OT authority. Where product behaviour, compatibility or cybersecurity capability is unknown, record the gap and verify it from current documentation rather than assuming it.

25 — Bad-Data Consequence

Criticality and consequence: govern bad-data consequence as part of compressed-air operational resilience. Define the affected asset or function, operational consequence, authorised owner, approved state, evidence source, recovery path and verification method. Preserve local equipment protection and competent IT/OT authority. Where product behaviour, compatibility or cybersecurity capability is unknown, record the gap and verify it from current documentation rather than assuming it.

26 — Unauthorised-Setpoint Consequence

Criticality and consequence: govern unauthorised-setpoint consequence as part of compressed-air operational resilience. Define the affected asset or function, operational consequence, authorised owner, approved state, evidence source, recovery path and verification method. Preserve local equipment protection and competent IT/OT authority. Where product behaviour, compatibility or cybersecurity capability is unknown, record the gap and verify it from current documentation rather than assuming it.

27 — Configuration-Loss Consequence

Criticality and consequence: govern configuration-loss consequence as part of compressed-air operational resilience. Define the affected asset or function, operational consequence, authorised owner, approved state, evidence source, recovery path and verification method. Preserve local equipment protection and competent IT/OT authority. Where product behaviour, compatibility or cybersecurity capability is unknown, record the gap and verify it from current documentation rather than assuming it.

28 — Common-Mode Digital Failure

Criticality and consequence: govern common-mode digital failure as part of compressed-air operational resilience. Define the affected asset or function, operational consequence, authorised owner, approved state, evidence source, recovery path and verification method. Preserve local equipment protection and competent IT/OT authority. Where product behaviour, compatibility or cybersecurity capability is unknown, record the gap and verify it from current documentation rather than assuming it.

29 — Production Recovery Objective

Criticality and consequence: govern production recovery objective as part of compressed-air operational resilience. Define the affected asset or function, operational consequence, authorised owner, approved state, evidence source, recovery path and verification method. Preserve local equipment protection and competent IT/OT authority. Where product behaviour, compatibility or cybersecurity capability is unknown, record the gap and verify it from current documentation rather than assuming it.

30 — Local Fallback Requirement

Criticality and consequence: govern local fallback requirement as part of compressed-air operational resilience. Define the affected asset or function, operational consequence, authorised owner, approved state, evidence source, recovery path and verification method. Preserve local equipment protection and competent IT/OT authority. Where product behaviour, compatibility or cybersecurity capability is unknown, record the gap and verify it from current documentation rather than assuming it.

31 — Local Safe Control First

Resilient architecture: govern local safe control first as part of compressed-air operational resilience. Define the affected asset or function, operational consequence, authorised owner, approved state, evidence source, recovery path and verification method. Preserve local equipment protection and competent IT/OT authority. Where product behaviour, compatibility or cybersecurity capability is unknown, record the gap and verify it from current documentation rather than assuming it.

32 — Analytics Separated From Command

Resilient architecture: govern analytics separated from command as part of compressed-air operational resilience. Define the affected asset or function, operational consequence, authorised owner, approved state, evidence source, recovery path and verification method. Preserve local equipment protection and competent IT/OT authority. Where product behaviour, compatibility or cybersecurity capability is unknown, record the gap and verify it from current documentation rather than assuming it.

33 — Least Necessary Connectivity

Resilient architecture: govern least necessary connectivity as part of compressed-air operational resilience. Define the affected asset or function, operational consequence, authorised owner, approved state, evidence source, recovery path and verification method. Preserve local equipment protection and competent IT/OT authority. Where product behaviour, compatibility or cybersecurity capability is unknown, record the gap and verify it from current documentation rather than assuming it.

34 — Segmented Ot Architecture

Resilient architecture: govern segmented OT architecture as part of compressed-air operational resilience. Define the affected asset or function, operational consequence, authorised owner, approved state, evidence source, recovery path and verification method. Preserve local equipment protection and competent IT/OT authority. Where product behaviour, compatibility or cybersecurity capability is unknown, record the gap and verify it from current documentation rather than assuming it.

35 — Controlled Northbound Data Flow

Resilient architecture: govern controlled northbound data flow as part of compressed-air operational resilience. Define the affected asset or function, operational consequence, authorised owner, approved state, evidence source, recovery path and verification method. Preserve local equipment protection and competent IT/OT authority. Where product behaviour, compatibility or cybersecurity capability is unknown, record the gap and verify it from current documentation rather than assuming it.

36 — Controlled Remote-Support Path

Resilient architecture: govern controlled remote-support path as part of compressed-air operational resilience. Define the affected asset or function, operational consequence, authorised owner, approved state, evidence source, recovery path and verification method. Preserve local equipment protection and competent IT/OT authority. Where product behaviour, compatibility or cybersecurity capability is unknown, record the gap and verify it from current documentation rather than assuming it.

37 — No Public Exposure By Convenience

Resilient architecture: govern no public exposure by convenience as part of compressed-air operational resilience. Define the affected asset or function, operational consequence, authorised owner, approved state, evidence source, recovery path and verification method. Preserve local equipment protection and competent IT/OT authority. Where product behaviour, compatibility or cybersecurity capability is unknown, record the gap and verify it from current documentation rather than assuming it.

38 — Fail-Operational/Fail-Safe Review

Resilient architecture: govern fail-operational/fail-safe review as part of compressed-air operational resilience. Define the affected asset or function, operational consequence, authorised owner, approved state, evidence source, recovery path and verification method. Preserve local equipment protection and competent IT/OT authority. Where product behaviour, compatibility or cybersecurity capability is unknown, record the gap and verify it from current documentation rather than assuming it.

39 — Master-Controller Fallback

Resilient architecture: govern master-controller fallback as part of compressed-air operational resilience. Define the affected asset or function, operational consequence, authorised owner, approved state, evidence source, recovery path and verification method. Preserve local equipment protection and competent IT/OT authority. Where product behaviour, compatibility or cybersecurity capability is unknown, record the gap and verify it from current documentation rather than assuming it.

40 — Local-Controller Autonomy

Resilient architecture: govern local-controller autonomy as part of compressed-air operational resilience. Define the affected asset or function, operational consequence, authorised owner, approved state, evidence source, recovery path and verification method. Preserve local equipment protection and competent IT/OT authority. Where product behaviour, compatibility or cybersecurity capability is unknown, record the gap and verify it from current documentation rather than assuming it.

41 — Pressure-Sensor Fallback

Resilient architecture: govern pressure-sensor fallback as part of compressed-air operational resilience. Define the affected asset or function, operational consequence, authorised owner, approved state, evidence source, recovery path and verification method. Preserve local equipment protection and competent IT/OT authority. Where product behaviour, compatibility or cybersecurity capability is unknown, record the gap and verify it from current documentation rather than assuming it.

42 — Communications-Loss Behaviour

Resilient architecture: govern communications-loss behaviour as part of compressed-air operational resilience. Define the affected asset or function, operational consequence, authorised owner, approved state, evidence source, recovery path and verification method. Preserve local equipment protection and competent IT/OT authority. Where product behaviour, compatibility or cybersecurity capability is unknown, record the gap and verify it from current documentation rather than assuming it.

43 — Power-Restoration Behaviour

Resilient architecture: govern power-restoration behaviour as part of compressed-air operational resilience. Define the affected asset or function, operational consequence, authorised owner, approved state, evidence source, recovery path and verification method. Preserve local equipment protection and competent IT/OT authority. Where product behaviour, compatibility or cybersecurity capability is unknown, record the gap and verify it from current documentation rather than assuming it.

44 — Independent Protection

Resilient architecture: govern independent protection as part of compressed-air operational resilience. Define the affected asset or function, operational consequence, authorised owner, approved state, evidence source, recovery path and verification method. Preserve local equipment protection and competent IT/OT authority. Where product behaviour, compatibility or cybersecurity capability is unknown, record the gap and verify it from current documentation rather than assuming it.

45 — Resilience Over Feature Count

Resilient architecture: govern resilience over feature count as part of compressed-air operational resilience. Define the affected asset or function, operational consequence, authorised owner, approved state, evidence source, recovery path and verification method. Preserve local equipment protection and competent IT/OT authority. Where product behaviour, compatibility or cybersecurity capability is unknown, record the gap and verify it from current documentation rather than assuming it.

46 — Named Authorised Roles

Identity and access: govern named authorised roles as part of compressed-air operational resilience. Define the affected asset or function, operational consequence, authorised owner, approved state, evidence source, recovery path and verification method. Preserve local equipment protection and competent IT/OT authority. Where product behaviour, compatibility or cybersecurity capability is unknown, record the gap and verify it from current documentation rather than assuming it.

47 — Role-Based Access

Identity and access: govern role-based access as part of compressed-air operational resilience. Define the affected asset or function, operational consequence, authorised owner, approved state, evidence source, recovery path and verification method. Preserve local equipment protection and competent IT/OT authority. Where product behaviour, compatibility or cybersecurity capability is unknown, record the gap and verify it from current documentation rather than assuming it.

48 — Unique Accounts Where Supported

Identity and access: govern unique accounts where supported as part of compressed-air operational resilience. Define the affected asset or function, operational consequence, authorised owner, approved state, evidence source, recovery path and verification method. Preserve local equipment protection and competent IT/OT authority. Where product behaviour, compatibility or cybersecurity capability is unknown, record the gap and verify it from current documentation rather than assuming it.

49 — Privileged Access Governance

Identity and access: govern privileged access governance as part of compressed-air operational resilience. Define the affected asset or function, operational consequence, authorised owner, approved state, evidence source, recovery path and verification method. Preserve local equipment protection and competent IT/OT authority. Where product behaviour, compatibility or cybersecurity capability is unknown, record the gap and verify it from current documentation rather than assuming it.

50 — Credential Storage Boundary

Identity and access: govern credential storage boundary as part of compressed-air operational resilience. Define the affected asset or function, operational consequence, authorised owner, approved state, evidence source, recovery path and verification method. Preserve local equipment protection and competent IT/OT authority. Where product behaviour, compatibility or cybersecurity capability is unknown, record the gap and verify it from current documentation rather than assuming it.

51 — Password/Public-Document Prohibition

Identity and access: govern password/public-document prohibition as part of compressed-air operational resilience. Define the affected asset or function, operational consequence, authorised owner, approved state, evidence source, recovery path and verification method. Preserve local equipment protection and competent IT/OT authority. Where product behaviour, compatibility or cybersecurity capability is unknown, record the gap and verify it from current documentation rather than assuming it.

52 — Service-Account Governance

Identity and access: govern service-account governance as part of compressed-air operational resilience. Define the affected asset or function, operational consequence, authorised owner, approved state, evidence source, recovery path and verification method. Preserve local equipment protection and competent IT/OT authority. Where product behaviour, compatibility or cybersecurity capability is unknown, record the gap and verify it from current documentation rather than assuming it.

53 — Remote Vendor Access Approval

Identity and access: govern remote vendor access approval as part of compressed-air operational resilience. Define the affected asset or function, operational consequence, authorised owner, approved state, evidence source, recovery path and verification method. Preserve local equipment protection and competent IT/OT authority. Where product behaviour, compatibility or cybersecurity capability is unknown, record the gap and verify it from current documentation rather than assuming it.

54 — Temporary Access Expiry

Identity and access: govern temporary access expiry as part of compressed-air operational resilience. Define the affected asset or function, operational consequence, authorised owner, approved state, evidence source, recovery path and verification method. Preserve local equipment protection and competent IT/OT authority. Where product behaviour, compatibility or cybersecurity capability is unknown, record the gap and verify it from current documentation rather than assuming it.

55 — Account Removal On Role Change

Identity and access: govern account removal on role change as part of compressed-air operational resilience. Define the affected asset or function, operational consequence, authorised owner, approved state, evidence source, recovery path and verification method. Preserve local equipment protection and competent IT/OT authority. Where product behaviour, compatibility or cybersecurity capability is unknown, record the gap and verify it from current documentation rather than assuming it.

56 — Emergency Local Access Governance

Identity and access: govern emergency local access governance as part of compressed-air operational resilience. Define the affected asset or function, operational consequence, authorised owner, approved state, evidence source, recovery path and verification method. Preserve local equipment protection and competent IT/OT authority. Where product behaviour, compatibility or cybersecurity capability is unknown, record the gap and verify it from current documentation rather than assuming it.

57 — Engineering-Tool Access

Identity and access: govern engineering-tool access as part of compressed-air operational resilience. Define the affected asset or function, operational consequence, authorised owner, approved state, evidence source, recovery path and verification method. Preserve local equipment protection and competent IT/OT authority. Where product behaviour, compatibility or cybersecurity capability is unknown, record the gap and verify it from current documentation rather than assuming it.

58 — Configuration Write Authority

Identity and access: govern configuration write authority as part of compressed-air operational resilience. Define the affected asset or function, operational consequence, authorised owner, approved state, evidence source, recovery path and verification method. Preserve local equipment protection and competent IT/OT authority. Where product behaviour, compatibility or cybersecurity capability is unknown, record the gap and verify it from current documentation rather than assuming it.

59 — Read-Only Monitoring Role

Identity and access: govern read-only monitoring role as part of compressed-air operational resilience. Define the affected asset or function, operational consequence, authorised owner, approved state, evidence source, recovery path and verification method. Preserve local equipment protection and competent IT/OT authority. Where product behaviour, compatibility or cybersecurity capability is unknown, record the gap and verify it from current documentation rather than assuming it.

60 — Access-Review Evidence

Identity and access: govern access-review evidence as part of compressed-air operational resilience. Define the affected asset or function, operational consequence, authorised owner, approved state, evidence source, recovery path and verification method. Preserve local equipment protection and competent IT/OT authority. Where product behaviour, compatibility or cybersecurity capability is unknown, record the gap and verify it from current documentation rather than assuming it.

61 — Remote-Support Business Need

Remote connectivity: govern remote-support business need as part of compressed-air operational resilience. Define the affected asset or function, operational consequence, authorised owner, approved state, evidence source, recovery path and verification method. Preserve local equipment protection and competent IT/OT authority. Where product behaviour, compatibility or cybersecurity capability is unknown, record the gap and verify it from current documentation rather than assuming it.

62 — Connection Owner

Remote connectivity: govern connection owner as part of compressed-air operational resilience. Define the affected asset or function, operational consequence, authorised owner, approved state, evidence source, recovery path and verification method. Preserve local equipment protection and competent IT/OT authority. Where product behaviour, compatibility or cybersecurity capability is unknown, record the gap and verify it from current documentation rather than assuming it.

63 — Approved Access Method

Remote connectivity: govern approved access method as part of compressed-air operational resilience. Define the affected asset or function, operational consequence, authorised owner, approved state, evidence source, recovery path and verification method. Preserve local equipment protection and competent IT/OT authority. Where product behaviour, compatibility or cybersecurity capability is unknown, record the gap and verify it from current documentation rather than assuming it.

64 — Session Authorisation

Remote connectivity: govern session authorisation as part of compressed-air operational resilience. Define the affected asset or function, operational consequence, authorised owner, approved state, evidence source, recovery path and verification method. Preserve local equipment protection and competent IT/OT authority. Where product behaviour, compatibility or cybersecurity capability is unknown, record the gap and verify it from current documentation rather than assuming it.

65 — Time-Bounded Session

Remote connectivity: govern time-bounded session as part of compressed-air operational resilience. Define the affected asset or function, operational consequence, authorised owner, approved state, evidence source, recovery path and verification method. Preserve local equipment protection and competent IT/OT authority. Where product behaviour, compatibility or cybersecurity capability is unknown, record the gap and verify it from current documentation rather than assuming it.

66 — Destination-Asset Restriction

Remote connectivity: govern destination-asset restriction as part of compressed-air operational resilience. Define the affected asset or function, operational consequence, authorised owner, approved state, evidence source, recovery path and verification method. Preserve local equipment protection and competent IT/OT authority. Where product behaviour, compatibility or cybersecurity capability is unknown, record the gap and verify it from current documentation rather than assuming it.

67 — Session Logging Where Supported

Remote connectivity: govern session logging where supported as part of compressed-air operational resilience. Define the affected asset or function, operational consequence, authorised owner, approved state, evidence source, recovery path and verification method. Preserve local equipment protection and competent IT/OT authority. Where product behaviour, compatibility or cybersecurity capability is unknown, record the gap and verify it from current documentation rather than assuming it.

68 — File-Transfer Governance

Remote connectivity: govern file-transfer governance as part of compressed-air operational resilience. Define the affected asset or function, operational consequence, authorised owner, approved state, evidence source, recovery path and verification method. Preserve local equipment protection and competent IT/OT authority. Where product behaviour, compatibility or cybersecurity capability is unknown, record the gap and verify it from current documentation rather than assuming it.

69 — Configuration-Change Governance

Remote connectivity: govern configuration-change governance as part of compressed-air operational resilience. Define the affected asset or function, operational consequence, authorised owner, approved state, evidence source, recovery path and verification method. Preserve local equipment protection and competent IT/OT authority. Where product behaviour, compatibility or cybersecurity capability is unknown, record the gap and verify it from current documentation rather than assuming it.

70 — Supplier-Support Boundary

Remote connectivity: govern supplier-support boundary as part of compressed-air operational resilience. Define the affected asset or function, operational consequence, authorised owner, approved state, evidence source, recovery path and verification method. Preserve local equipment protection and competent IT/OT authority. Where product behaviour, compatibility or cybersecurity capability is unknown, record the gap and verify it from current documentation rather than assuming it.

71 — Cellular Gateway Governance

Remote connectivity: govern cellular gateway governance as part of compressed-air operational resilience. Define the affected asset or function, operational consequence, authorised owner, approved state, evidence source, recovery path and verification method. Preserve local equipment protection and competent IT/OT authority. Where product behaviour, compatibility or cybersecurity capability is unknown, record the gap and verify it from current documentation rather than assuming it.

72 — Cloud Gateway Governance

Remote connectivity: govern cloud gateway governance as part of compressed-air operational resilience. Define the affected asset or function, operational consequence, authorised owner, approved state, evidence source, recovery path and verification method. Preserve local equipment protection and competent IT/OT authority. Where product behaviour, compatibility or cybersecurity capability is unknown, record the gap and verify it from current documentation rather than assuming it.

73 — Secure-Access Boundary

Remote connectivity: govern secure-access boundary as part of compressed-air operational resilience. Define the affected asset or function, operational consequence, authorised owner, approved state, evidence source, recovery path and verification method. Preserve local equipment protection and competent IT/OT authority. Where product behaviour, compatibility or cybersecurity capability is unknown, record the gap and verify it from current documentation rather than assuming it.

74 — Disable Unused Connectivity

Remote connectivity: govern disable unused connectivity as part of compressed-air operational resilience. Define the affected asset or function, operational consequence, authorised owner, approved state, evidence source, recovery path and verification method. Preserve local equipment protection and competent IT/OT authority. Where product behaviour, compatibility or cybersecurity capability is unknown, record the gap and verify it from current documentation rather than assuming it.

75 — Emergency Access Revocation

Remote connectivity: govern emergency access revocation as part of compressed-air operational resilience. Define the affected asset or function, operational consequence, authorised owner, approved state, evidence source, recovery path and verification method. Preserve local equipment protection and competent IT/OT authority. Where product behaviour, compatibility or cybersecurity capability is unknown, record the gap and verify it from current documentation rather than assuming it.

76 — Golden Configuration Baseline

Configuration protection: govern golden configuration baseline as part of compressed-air operational resilience. Define the affected asset or function, operational consequence, authorised owner, approved state, evidence source, recovery path and verification method. Preserve local equipment protection and competent IT/OT authority. Where product behaviour, compatibility or cybersecurity capability is unknown, record the gap and verify it from current documentation rather than assuming it.

77 — Controller Backup

Configuration protection: govern controller backup as part of compressed-air operational resilience. Define the affected asset or function, operational consequence, authorised owner, approved state, evidence source, recovery path and verification method. Preserve local equipment protection and competent IT/OT authority. Where product behaviour, compatibility or cybersecurity capability is unknown, record the gap and verify it from current documentation rather than assuming it.

78 — Sequencer Backup

Configuration protection: govern sequencer backup as part of compressed-air operational resilience. Define the affected asset or function, operational consequence, authorised owner, approved state, evidence source, recovery path and verification method. Preserve local equipment protection and competent IT/OT authority. Where product behaviour, compatibility or cybersecurity capability is unknown, record the gap and verify it from current documentation rather than assuming it.

79 — Vsd Parameter Backup

Configuration protection: govern VSD parameter backup as part of compressed-air operational resilience. Define the affected asset or function, operational consequence, authorised owner, approved state, evidence source, recovery path and verification method. Preserve local equipment protection and competent IT/OT authority. Where product behaviour, compatibility or cybersecurity capability is unknown, record the gap and verify it from current documentation rather than assuming it.

80 — Dryer/Hmi Backup

Configuration protection: govern dryer/HMI backup as part of compressed-air operational resilience. Define the affected asset or function, operational consequence, authorised owner, approved state, evidence source, recovery path and verification method. Preserve local equipment protection and competent IT/OT authority. Where product behaviour, compatibility or cybersecurity capability is unknown, record the gap and verify it from current documentation rather than assuming it.

81 — Firmware/Software Context

Configuration protection: govern firmware/software context as part of compressed-air operational resilience. Define the affected asset or function, operational consequence, authorised owner, approved state, evidence source, recovery path and verification method. Preserve local equipment protection and competent IT/OT authority. Where product behaviour, compatibility or cybersecurity capability is unknown, record the gap and verify it from current documentation rather than assuming it.

82 — Integrity/Checksum Where Supported

Configuration protection: govern integrity/checksum where supported as part of compressed-air operational resilience. Define the affected asset or function, operational consequence, authorised owner, approved state, evidence source, recovery path and verification method. Preserve local equipment protection and competent IT/OT authority. Where product behaviour, compatibility or cybersecurity capability is unknown, record the gap and verify it from current documentation rather than assuming it.

83 — Managed Offline Backup

Configuration protection: govern managed offline backup as part of compressed-air operational resilience. Define the affected asset or function, operational consequence, authorised owner, approved state, evidence source, recovery path and verification method. Preserve local equipment protection and competent IT/OT authority. Where product behaviour, compatibility or cybersecurity capability is unknown, record the gap and verify it from current documentation rather than assuming it.

84 — Backup Metadata

Configuration protection: govern backup metadata as part of compressed-air operational resilience. Define the affected asset or function, operational consequence, authorised owner, approved state, evidence source, recovery path and verification method. Preserve local equipment protection and competent IT/OT authority. Where product behaviour, compatibility or cybersecurity capability is unknown, record the gap and verify it from current documentation rather than assuming it.

85 — Backup Access Control

Configuration protection: govern backup access control as part of compressed-air operational resilience. Define the affected asset or function, operational consequence, authorised owner, approved state, evidence source, recovery path and verification method. Preserve local equipment protection and competent IT/OT authority. Where product behaviour, compatibility or cybersecurity capability is unknown, record the gap and verify it from current documentation rather than assuming it.

86 — Pre-Change Backup

Configuration protection: govern pre-change backup as part of compressed-air operational resilience. Define the affected asset or function, operational consequence, authorised owner, approved state, evidence source, recovery path and verification method. Preserve local equipment protection and competent IT/OT authority. Where product behaviour, compatibility or cybersecurity capability is unknown, record the gap and verify it from current documentation rather than assuming it.

87 — Post-Change Backup

Configuration protection: govern post-change backup as part of compressed-air operational resilience. Define the affected asset or function, operational consequence, authorised owner, approved state, evidence source, recovery path and verification method. Preserve local equipment protection and competent IT/OT authority. Where product behaviour, compatibility or cybersecurity capability is unknown, record the gap and verify it from current documentation rather than assuming it.

88 — Restore Procedure

Configuration protection: govern restore procedure as part of compressed-air operational resilience. Define the affected asset or function, operational consequence, authorised owner, approved state, evidence source, recovery path and verification method. Preserve local equipment protection and competent IT/OT authority. Where product behaviour, compatibility or cybersecurity capability is unknown, record the gap and verify it from current documentation rather than assuming it.

89 — Restore Test

Configuration protection: govern restore test as part of compressed-air operational resilience. Define the affected asset or function, operational consequence, authorised owner, approved state, evidence source, recovery path and verification method. Preserve local equipment protection and competent IT/OT authority. Where product behaviour, compatibility or cybersecurity capability is unknown, record the gap and verify it from current documentation rather than assuming it.

90 — Superseded Configuration Archive

Configuration protection: govern superseded configuration archive as part of compressed-air operational resilience. Define the affected asset or function, operational consequence, authorised owner, approved state, evidence source, recovery path and verification method. Preserve local equipment protection and competent IT/OT authority. Where product behaviour, compatibility or cybersecurity capability is unknown, record the gap and verify it from current documentation rather than assuming it.

91 — Change Request

Change and patch governance: govern change request as part of compressed-air operational resilience. Define the affected asset or function, operational consequence, authorised owner, approved state, evidence source, recovery path and verification method. Preserve local equipment protection and competent IT/OT authority. Where product behaviour, compatibility or cybersecurity capability is unknown, record the gap and verify it from current documentation rather than assuming it.

92 — Technical Impact Review

Change and patch governance: govern technical impact review as part of compressed-air operational resilience. Define the affected asset or function, operational consequence, authorised owner, approved state, evidence source, recovery path and verification method. Preserve local equipment protection and competent IT/OT authority. Where product behaviour, compatibility or cybersecurity capability is unknown, record the gap and verify it from current documentation rather than assuming it.

93 — Cyber Impact Review

Change and patch governance: govern cyber impact review as part of compressed-air operational resilience. Define the affected asset or function, operational consequence, authorised owner, approved state, evidence source, recovery path and verification method. Preserve local equipment protection and competent IT/OT authority. Where product behaviour, compatibility or cybersecurity capability is unknown, record the gap and verify it from current documentation rather than assuming it.

94 — Reliability Impact Review

Change and patch governance: govern reliability impact review as part of compressed-air operational resilience. Define the affected asset or function, operational consequence, authorised owner, approved state, evidence source, recovery path and verification method. Preserve local equipment protection and competent IT/OT authority. Where product behaviour, compatibility or cybersecurity capability is unknown, record the gap and verify it from current documentation rather than assuming it.

95 — Pre-Change Fallback

Change and patch governance: govern pre-change fallback as part of compressed-air operational resilience. Define the affected asset or function, operational consequence, authorised owner, approved state, evidence source, recovery path and verification method. Preserve local equipment protection and competent IT/OT authority. Where product behaviour, compatibility or cybersecurity capability is unknown, record the gap and verify it from current documentation rather than assuming it.

96 — Maintenance Window

Change and patch governance: govern maintenance window as part of compressed-air operational resilience. Define the affected asset or function, operational consequence, authorised owner, approved state, evidence source, recovery path and verification method. Preserve local equipment protection and competent IT/OT authority. Where product behaviour, compatibility or cybersecurity capability is unknown, record the gap and verify it from current documentation rather than assuming it.

97 — Supplier Compatibility Check

Change and patch governance: govern supplier compatibility check as part of compressed-air operational resilience. Define the affected asset or function, operational consequence, authorised owner, approved state, evidence source, recovery path and verification method. Preserve local equipment protection and competent IT/OT authority. Where product behaviour, compatibility or cybersecurity capability is unknown, record the gap and verify it from current documentation rather than assuming it.

98 — Patch Applicability Review

Change and patch governance: govern patch applicability review as part of compressed-air operational resilience. Define the affected asset or function, operational consequence, authorised owner, approved state, evidence source, recovery path and verification method. Preserve local equipment protection and competent IT/OT authority. Where product behaviour, compatibility or cybersecurity capability is unknown, record the gap and verify it from current documentation rather than assuming it.

99 — Firmware Compatibility Review

Change and patch governance: govern firmware compatibility review as part of compressed-air operational resilience. Define the affected asset or function, operational consequence, authorised owner, approved state, evidence source, recovery path and verification method. Preserve local equipment protection and competent IT/OT authority. Where product behaviour, compatibility or cybersecurity capability is unknown, record the gap and verify it from current documentation rather than assuming it.

100 — Configuration Migration Review

Change and patch governance: govern configuration migration review as part of compressed-air operational resilience. Define the affected asset or function, operational consequence, authorised owner, approved state, evidence source, recovery path and verification method. Preserve local equipment protection and competent IT/OT authority. Where product behaviour, compatibility or cybersecurity capability is unknown, record the gap and verify it from current documentation rather than assuming it.

101 — Controlled Implementation

Change and patch governance: govern controlled implementation as part of compressed-air operational resilience. Define the affected asset or function, operational consequence, authorised owner, approved state, evidence source, recovery path and verification method. Preserve local equipment protection and competent IT/OT authority. Where product behaviour, compatibility or cybersecurity capability is unknown, record the gap and verify it from current documentation rather than assuming it.

102 — Functional Verification

Change and patch governance: govern functional verification as part of compressed-air operational resilience. Define the affected asset or function, operational consequence, authorised owner, approved state, evidence source, recovery path and verification method. Preserve local equipment protection and competent IT/OT authority. Where product behaviour, compatibility or cybersecurity capability is unknown, record the gap and verify it from current documentation rather than assuming it.

103 — Performance Verification

Change and patch governance: govern performance verification as part of compressed-air operational resilience. Define the affected asset or function, operational consequence, authorised owner, approved state, evidence source, recovery path and verification method. Preserve local equipment protection and competent IT/OT authority. Where product behaviour, compatibility or cybersecurity capability is unknown, record the gap and verify it from current documentation rather than assuming it.

104 — Rollback Decision

Change and patch governance: govern rollback decision as part of compressed-air operational resilience. Define the affected asset or function, operational consequence, authorised owner, approved state, evidence source, recovery path and verification method. Preserve local equipment protection and competent IT/OT authority. Where product behaviour, compatibility or cybersecurity capability is unknown, record the gap and verify it from current documentation rather than assuming it.

105 — Change Closure Evidence

Change and patch governance: govern change closure evidence as part of compressed-air operational resilience. Define the affected asset or function, operational consequence, authorised owner, approved state, evidence source, recovery path and verification method. Preserve local equipment protection and competent IT/OT authority. Where product behaviour, compatibility or cybersecurity capability is unknown, record the gap and verify it from current documentation rather than assuming it.

106 — Controller Health

Monitoring and detection: govern controller health as part of compressed-air operational resilience. Define the affected asset or function, operational consequence, authorised owner, approved state, evidence source, recovery path and verification method. Preserve local equipment protection and competent IT/OT authority. Where product behaviour, compatibility or cybersecurity capability is unknown, record the gap and verify it from current documentation rather than assuming it.

107 — Communication Health

Monitoring and detection: govern communication health as part of compressed-air operational resilience. Define the affected asset or function, operational consequence, authorised owner, approved state, evidence source, recovery path and verification method. Preserve local equipment protection and competent IT/OT authority. Where product behaviour, compatibility or cybersecurity capability is unknown, record the gap and verify it from current documentation rather than assuming it.

108 — Unexpected Mode Change

Monitoring and detection: govern unexpected mode change as part of compressed-air operational resilience. Define the affected asset or function, operational consequence, authorised owner, approved state, evidence source, recovery path and verification method. Preserve local equipment protection and competent IT/OT authority. Where product behaviour, compatibility or cybersecurity capability is unknown, record the gap and verify it from current documentation rather than assuming it.

109 — Setpoint-Change Detection

Monitoring and detection: govern setpoint-change detection as part of compressed-air operational resilience. Define the affected asset or function, operational consequence, authorised owner, approved state, evidence source, recovery path and verification method. Preserve local equipment protection and competent IT/OT authority. Where product behaviour, compatibility or cybersecurity capability is unknown, record the gap and verify it from current documentation rather than assuming it.

110 — Configuration-Drift Detection

Monitoring and detection: govern configuration-drift detection as part of compressed-air operational resilience. Define the affected asset or function, operational consequence, authorised owner, approved state, evidence source, recovery path and verification method. Preserve local equipment protection and competent IT/OT authority. Where product behaviour, compatibility or cybersecurity capability is unknown, record the gap and verify it from current documentation rather than assuming it.

111 — Access Anomaly Review

Monitoring and detection: govern access anomaly review as part of compressed-air operational resilience. Define the affected asset or function, operational consequence, authorised owner, approved state, evidence source, recovery path and verification method. Preserve local equipment protection and competent IT/OT authority. Where product behaviour, compatibility or cybersecurity capability is unknown, record the gap and verify it from current documentation rather than assuming it.

112 — Gateway Health

Monitoring and detection: govern gateway health as part of compressed-air operational resilience. Define the affected asset or function, operational consequence, authorised owner, approved state, evidence source, recovery path and verification method. Preserve local equipment protection and competent IT/OT authority. Where product behaviour, compatibility or cybersecurity capability is unknown, record the gap and verify it from current documentation rather than assuming it.

113 — Historian Data-Quality Anomaly

Monitoring and detection: govern historian data-quality anomaly as part of compressed-air operational resilience. Define the affected asset or function, operational consequence, authorised owner, approved state, evidence source, recovery path and verification method. Preserve local equipment protection and competent IT/OT authority. Where product behaviour, compatibility or cybersecurity capability is unknown, record the gap and verify it from current documentation rather than assuming it.

114 — Time-Sync Anomaly

Monitoring and detection: govern time-sync anomaly as part of compressed-air operational resilience. Define the affected asset or function, operational consequence, authorised owner, approved state, evidence source, recovery path and verification method. Preserve local equipment protection and competent IT/OT authority. Where product behaviour, compatibility or cybersecurity capability is unknown, record the gap and verify it from current documentation rather than assuming it.

115 — Sensor Plausibility

Monitoring and detection: govern sensor plausibility as part of compressed-air operational resilience. Define the affected asset or function, operational consequence, authorised owner, approved state, evidence source, recovery path and verification method. Preserve local equipment protection and competent IT/OT authority. Where product behaviour, compatibility or cybersecurity capability is unknown, record the gap and verify it from current documentation rather than assuming it.

116 — Alarm-Suppression Review

Monitoring and detection: govern alarm-suppression review as part of compressed-air operational resilience. Define the affected asset or function, operational consequence, authorised owner, approved state, evidence source, recovery path and verification method. Preserve local equipment protection and competent IT/OT authority. Where product behaviour, compatibility or cybersecurity capability is unknown, record the gap and verify it from current documentation rather than assuming it.

117 — Remote-Session Visibility

Monitoring and detection: govern remote-session visibility as part of compressed-air operational resilience. Define the affected asset or function, operational consequence, authorised owner, approved state, evidence source, recovery path and verification method. Preserve local equipment protection and competent IT/OT authority. Where product behaviour, compatibility or cybersecurity capability is unknown, record the gap and verify it from current documentation rather than assuming it.

118 — Asset-Inventory Drift

Monitoring and detection: govern asset-inventory drift as part of compressed-air operational resilience. Define the affected asset or function, operational consequence, authorised owner, approved state, evidence source, recovery path and verification method. Preserve local equipment protection and competent IT/OT authority. Where product behaviour, compatibility or cybersecurity capability is unknown, record the gap and verify it from current documentation rather than assuming it.

119 — Unexpected-Device Review

Monitoring and detection: govern unexpected-device review as part of compressed-air operational resilience. Define the affected asset or function, operational consequence, authorised owner, approved state, evidence source, recovery path and verification method. Preserve local equipment protection and competent IT/OT authority. Where product behaviour, compatibility or cybersecurity capability is unknown, record the gap and verify it from current documentation rather than assuming it.

120 — Alert Ownership/Escalation

Monitoring and detection: govern alert ownership/escalation as part of compressed-air operational resilience. Define the affected asset or function, operational consequence, authorised owner, approved state, evidence source, recovery path and verification method. Preserve local equipment protection and competent IT/OT authority. Where product behaviour, compatibility or cybersecurity capability is unknown, record the gap and verify it from current documentation rather than assuming it.

121 — Incident Classification

Incident and recovery: govern incident classification as part of compressed-air operational resilience. Define the affected asset or function, operational consequence, authorised owner, approved state, evidence source, recovery path and verification method. Preserve local equipment protection and competent IT/OT authority. Where product behaviour, compatibility or cybersecurity capability is unknown, record the gap and verify it from current documentation rather than assuming it.

122 — Protect Critical Air Service

Incident and recovery: govern protect critical air service as part of compressed-air operational resilience. Define the affected asset or function, operational consequence, authorised owner, approved state, evidence source, recovery path and verification method. Preserve local equipment protection and competent IT/OT authority. Where product behaviour, compatibility or cybersecurity capability is unknown, record the gap and verify it from current documentation rather than assuming it.

123 — Preserve Evidence

Incident and recovery: govern preserve evidence as part of compressed-air operational resilience. Define the affected asset or function, operational consequence, authorised owner, approved state, evidence source, recovery path and verification method. Preserve local equipment protection and competent IT/OT authority. Where product behaviour, compatibility or cybersecurity capability is unknown, record the gap and verify it from current documentation rather than assuming it.

124 — Separate Cyber Symptom From Equipment Fault

Incident and recovery: govern separate cyber symptom from equipment fault as part of compressed-air operational resilience. Define the affected asset or function, operational consequence, authorised owner, approved state, evidence source, recovery path and verification method. Preserve local equipment protection and competent IT/OT authority. Where product behaviour, compatibility or cybersecurity capability is unknown, record the gap and verify it from current documentation rather than assuming it.

125 — Escalation Path

Incident and recovery: govern escalation path as part of compressed-air operational resilience. Define the affected asset or function, operational consequence, authorised owner, approved state, evidence source, recovery path and verification method. Preserve local equipment protection and competent IT/OT authority. Where product behaviour, compatibility or cybersecurity capability is unknown, record the gap and verify it from current documentation rather than assuming it.

126 — Authorised Digital Isolation

Incident and recovery: govern authorised digital isolation as part of compressed-air operational resilience. Define the affected asset or function, operational consequence, authorised owner, approved state, evidence source, recovery path and verification method. Preserve local equipment protection and competent IT/OT authority. Where product behaviour, compatibility or cybersecurity capability is unknown, record the gap and verify it from current documentation rather than assuming it.

127 — Local/Manual Fallback

Incident and recovery: govern local/manual fallback as part of compressed-air operational resilience. Define the affected asset or function, operational consequence, authorised owner, approved state, evidence source, recovery path and verification method. Preserve local equipment protection and competent IT/OT authority. Where product behaviour, compatibility or cybersecurity capability is unknown, record the gap and verify it from current documentation rather than assuming it.

128 — Standby/Fleet Fallback

Incident and recovery: govern standby/fleet fallback as part of compressed-air operational resilience. Define the affected asset or function, operational consequence, authorised owner, approved state, evidence source, recovery path and verification method. Preserve local equipment protection and competent IT/OT authority. Where product behaviour, compatibility or cybersecurity capability is unknown, record the gap and verify it from current documentation rather than assuming it.

129 — Temporary-Air Contingency

Incident and recovery: govern temporary-air contingency as part of compressed-air operational resilience. Define the affected asset or function, operational consequence, authorised owner, approved state, evidence source, recovery path and verification method. Preserve local equipment protection and competent IT/OT authority. Where product behaviour, compatibility or cybersecurity capability is unknown, record the gap and verify it from current documentation rather than assuming it.

130 — Known-Good Configuration Recovery

Incident and recovery: govern known-good configuration recovery as part of compressed-air operational resilience. Define the affected asset or function, operational consequence, authorised owner, approved state, evidence source, recovery path and verification method. Preserve local equipment protection and competent IT/OT authority. Where product behaviour, compatibility or cybersecurity capability is unknown, record the gap and verify it from current documentation rather than assuming it.

131 — Controller Replacement Recovery

Incident and recovery: govern controller replacement recovery as part of compressed-air operational resilience. Define the affected asset or function, operational consequence, authorised owner, approved state, evidence source, recovery path and verification method. Preserve local equipment protection and competent IT/OT authority. Where product behaviour, compatibility or cybersecurity capability is unknown, record the gap and verify it from current documentation rather than assuming it.

132 — Network Restoration Sequence

Incident and recovery: govern network restoration sequence as part of compressed-air operational resilience. Define the affected asset or function, operational consequence, authorised owner, approved state, evidence source, recovery path and verification method. Preserve local equipment protection and competent IT/OT authority. Where product behaviour, compatibility or cybersecurity capability is unknown, record the gap and verify it from current documentation rather than assuming it.

133 — Post-Recovery Functional Test

Incident and recovery: govern post-recovery functional test as part of compressed-air operational resilience. Define the affected asset or function, operational consequence, authorised owner, approved state, evidence source, recovery path and verification method. Preserve local equipment protection and competent IT/OT authority. Where product behaviour, compatibility or cybersecurity capability is unknown, record the gap and verify it from current documentation rather than assuming it.

134 — Post-Recovery Production Test

Incident and recovery: govern post-recovery production test as part of compressed-air operational resilience. Define the affected asset or function, operational consequence, authorised owner, approved state, evidence source, recovery path and verification method. Preserve local equipment protection and competent IT/OT authority. Where product behaviour, compatibility or cybersecurity capability is unknown, record the gap and verify it from current documentation rather than assuming it.

135 — Incident/Root-Cause Record

Incident and recovery: govern incident/root-cause record as part of compressed-air operational resilience. Define the affected asset or function, operational consequence, authorised owner, approved state, evidence source, recovery path and verification method. Preserve local equipment protection and competent IT/OT authority. Where product behaviour, compatibility or cybersecurity capability is unknown, record the gap and verify it from current documentation rather than assuming it.

136 — Procurement Cybersecurity Requirement

Lifecycle and supply chain: govern procurement cybersecurity requirement as part of compressed-air operational resilience. Define the affected asset or function, operational consequence, authorised owner, approved state, evidence source, recovery path and verification method. Preserve local equipment protection and competent IT/OT authority. Where product behaviour, compatibility or cybersecurity capability is unknown, record the gap and verify it from current documentation rather than assuming it.

137 — Supplier Documentation

Lifecycle and supply chain: govern supplier documentation as part of compressed-air operational resilience. Define the affected asset or function, operational consequence, authorised owner, approved state, evidence source, recovery path and verification method. Preserve local equipment protection and competent IT/OT authority. Where product behaviour, compatibility or cybersecurity capability is unknown, record the gap and verify it from current documentation rather than assuming it.

138 — Supported Firmware/Software

Lifecycle and supply chain: govern supported firmware/software as part of compressed-air operational resilience. Define the affected asset or function, operational consequence, authorised owner, approved state, evidence source, recovery path and verification method. Preserve local equipment protection and competent IT/OT authority. Where product behaviour, compatibility or cybersecurity capability is unknown, record the gap and verify it from current documentation rather than assuming it.

139 — Remote-Support Terms

Lifecycle and supply chain: govern remote-support terms as part of compressed-air operational resilience. Define the affected asset or function, operational consequence, authorised owner, approved state, evidence source, recovery path and verification method. Preserve local equipment protection and competent IT/OT authority. Where product behaviour, compatibility or cybersecurity capability is unknown, record the gap and verify it from current documentation rather than assuming it.

140 — Configuration Export Capability

Lifecycle and supply chain: govern configuration export capability as part of compressed-air operational resilience. Define the affected asset or function, operational consequence, authorised owner, approved state, evidence source, recovery path and verification method. Preserve local equipment protection and competent IT/OT authority. Where product behaviour, compatibility or cybersecurity capability is unknown, record the gap and verify it from current documentation rather than assuming it.

141 — Lifecycle/Obsolescence Status

Lifecycle and supply chain: govern lifecycle/obsolescence status as part of compressed-air operational resilience. Define the affected asset or function, operational consequence, authorised owner, approved state, evidence source, recovery path and verification method. Preserve local equipment protection and competent IT/OT authority. Where product behaviour, compatibility or cybersecurity capability is unknown, record the gap and verify it from current documentation rather than assuming it.

142 — Critical Electronic Spares

Lifecycle and supply chain: govern critical electronic spares as part of compressed-air operational resilience. Define the affected asset or function, operational consequence, authorised owner, approved state, evidence source, recovery path and verification method. Preserve local equipment protection and competent IT/OT authority. Where product behaviour, compatibility or cybersecurity capability is unknown, record the gap and verify it from current documentation rather than assuming it.

143 — Replacement-Controller Strategy

Lifecycle and supply chain: govern replacement-controller strategy as part of compressed-air operational resilience. Define the affected asset or function, operational consequence, authorised owner, approved state, evidence source, recovery path and verification method. Preserve local equipment protection and competent IT/OT authority. Where product behaviour, compatibility or cybersecurity capability is unknown, record the gap and verify it from current documentation rather than assuming it.

144 — Software Licence Dependency

Lifecycle and supply chain: govern software licence dependency as part of compressed-air operational resilience. Define the affected asset or function, operational consequence, authorised owner, approved state, evidence source, recovery path and verification method. Preserve local equipment protection and competent IT/OT authority. Where product behaviour, compatibility or cybersecurity capability is unknown, record the gap and verify it from current documentation rather than assuming it.

145 — Engineering-Tool Dependency

Lifecycle and supply chain: govern engineering-tool dependency as part of compressed-air operational resilience. Define the affected asset or function, operational consequence, authorised owner, approved state, evidence source, recovery path and verification method. Preserve local equipment protection and competent IT/OT authority. Where product behaviour, compatibility or cybersecurity capability is unknown, record the gap and verify it from current documentation rather than assuming it.

146 — Third-Party Gateway Review

Lifecycle and supply chain: govern third-party gateway review as part of compressed-air operational resilience. Define the affected asset or function, operational consequence, authorised owner, approved state, evidence source, recovery path and verification method. Preserve local equipment protection and competent IT/OT authority. Where product behaviour, compatibility or cybersecurity capability is unknown, record the gap and verify it from current documentation rather than assuming it.

147 — System-Integrator Handover

Lifecycle and supply chain: govern system-integrator handover as part of compressed-air operational resilience. Define the affected asset or function, operational consequence, authorised owner, approved state, evidence source, recovery path and verification method. Preserve local equipment protection and competent IT/OT authority. Where product behaviour, compatibility or cybersecurity capability is unknown, record the gap and verify it from current documentation rather than assuming it.

148 — Decommission Credential Removal

Lifecycle and supply chain: govern decommission credential removal as part of compressed-air operational resilience. Define the affected asset or function, operational consequence, authorised owner, approved state, evidence source, recovery path and verification method. Preserve local equipment protection and competent IT/OT authority. Where product behaviour, compatibility or cybersecurity capability is unknown, record the gap and verify it from current documentation rather than assuming it.

149 — Retired-Device Data Handling

Lifecycle and supply chain: govern retired-device data handling as part of compressed-air operational resilience. Define the affected asset or function, operational consequence, authorised owner, approved state, evidence source, recovery path and verification method. Preserve local equipment protection and competent IT/OT authority. Where product behaviour, compatibility or cybersecurity capability is unknown, record the gap and verify it from current documentation rather than assuming it.

150 — Supplier-Change Continuity

Lifecycle and supply chain: govern supplier-change continuity as part of compressed-air operational resilience. Define the affected asset or function, operational consequence, authorised owner, approved state, evidence source, recovery path and verification method. Preserve local equipment protection and competent IT/OT authority. Where product behaviour, compatibility or cybersecurity capability is unknown, record the gap and verify it from current documentation rather than assuming it.

151 — Premium OT Resilience & Recovery Register

152 — Control-System Resilience Matrix

153 — Technical / OT / Cyber-Resilience Verification Gate

Control, monitoring, gateway and engineering assets have controlled identities.

Critical compressed-air functions are mapped to digital dependencies.

Local fallback is defined where technically supported and required.

Monitoring/analytics are separated from command unless explicitly engineered.

Remote access is justified, controlled and revocable.

Credentials and sensitive network details are excluded from public documentation.

Known-good configurations and required software context are backed up.

Restore procedures are tested for critical configurations where practicable.

Changes, patches and firmware updates include compatibility, rollback and functional verification.

Configuration and setpoint drift can be detected or audited.

Incident response protects critical air while preserving evidence.

Recovery verifies pressure, controls, treatment and critical-user performance.

Supplier/third-party dependencies and obsolescence are visible.

Retired/relocated assets have access and digital identity reconciled.

Does an air compressor need cybersecurity?

Connected controllers, sequencers, gateways, HMIs and remote-support paths can create operational dependencies; protection should match connectivity and consequence.

Should a compressor stop if the plant network fails?

Not automatically. Intended local/fallback behaviour is equipment- and architecture-specific and should be verified.

What should be backed up?

Where supported: accepted controller, VSD, sequencer, dryer/HMI configurations plus enough software/firmware metadata to restore the exact asset.

Should dashboards control equipment?

Monitoring and command should remain separate unless command authority is explicitly required, engineered and governed.

How should remote vendor access be managed?

Use approved OT access, authorised scope, time/role controls and revocation; never publish credentials.

What is configuration drift?

An unexplained difference between accepted controller/settings baseline and actual operating state.

Should firmware always be updated immediately?

Not automatically. Review applicability, compatibility, operational risk, supplier guidance, rollback and maintenance-window needs.

What happens if a master sequencer fails?

The engineered local fallback should preserve appropriate service where supported; exact behaviour must be verified.

How is a failed controller recovered?

Use compatible hardware/software and a verified known-good configuration, then functionally test before full return.

Can AI control compressors?

AI may support monitoring and analysis, but command authority requires explicit engineering, safety, cybersecurity and operational governance.

What should an OT incident plan include?

Critical-load protection, fallback, escalation, evidence preservation, configuration recovery, controlled restoration and post-recovery testing.