Skip to content
You can now search across every topic, entity and event.What's new
Secure Connectivity Principles for Operational Technology
LegislationGB

Secure Connectivity Principles for Operational Technology

NCSC guidance on secure operational-technology connectivity, version 1.0, dated March 2024.

Secure Connectivity Principles for Operational Technology is NCSC UK guidance, version 1.0, dating from March 2024, cited in a CISA alert on 30 July 2026 unrelated to that citation.

Last refreshed: 3 August 2026 · Appears in 1 active topic

Key Question

Is NCSC's OT connectivity guidance new advice for the 2026 water alerts?

Timeline for Secure Connectivity Principles for Operational Technology

#12 29 Jul

Mentioned in: The alert's citations predate the alert

Cybersecurity: Threats and Defences
View full timeline →
Follow Cybersecurity: Threats and Defences →

Background

Secure Connectivity Principles for Operational Technology is guidance issued by the UK's National Cyber Security Centre, version 1.0, dated March 2024, covering how operational-technology environments should be connected securely. It carries no legal force; it is advisory guidance rather than a binding directive or regulation.

CISA's alert on Rockwell Automation's SD1790 advisory, published 30 July 2026, cited this NCSC guidance alongside it, a citation more than two years after the guidance's own publication date. That gap does not indicate new coordinated action between NCSC and CISA; it reflects a US alert referencing pre-existing UK material.

Common Questions
What is Secure Connectivity Principles for Operational Technology?
It is UK NCSC guidance, version 1.0 from March 2024, setting out principles for securing remote connectivity to industrial control systems and OT networks. It is guidance, not legislation.Source: NCSC guidance, cited in CISA water-sector alert
When was NCSC's Secure Connectivity Principles for Operational Technology published?
It was published as version 1.0 in March 2024 and has not been reissued since.Source: NCSC guidance, cited in CISA water-sector alert
Why did CISA cite two-year-old NCSC guidance in its 2026 water alert?
CISA pointed operators to existing, general OT-connectivity mitigation advice rather than issuing anything new alongside the alert; the guidance predates the campaign by more than two years.Source: CISA water-sector alert, 30 July 2026