Attack-surface diagram

An attack surface wheel around a protected OT system, with seven categories (people, devices, networks, software, remote access, vendors and third parties, physical access), each with representative exposures such as phishing, flat networks, unpatched vulnerabilities and unattended equipment, and an intended perimeter that the attack surface extends beyond.