← Gallery

Unpatchable asset

Compensating controls around a legacy, unpatchable HMI on a dedicated VLAN 20, shown as concentric rings: isolation, a cell firewall allowing administration only from one admin jump host, application allowlisting, a USB lock and passive monitoring through a network tap, with a risk acceptance tag that expires 2026-12-31 and a planned upgrade.

More in Identity, Access & Patching