PDF Download Link

You may download the full PDF playbook here: OT Security TR V1.1 (PDF)

Abstract

This playbook provides a structured catalogue of cybersecurity controls for Operational Technology (OT) systems and infrastructure, aiming to protect critical operations, physical assets, personnel, and organisational processes from a diverse range of threats, including cyberattacks, insider errors, supply chain compromises, environmental hazards, and system failures. The controls are designed to be flexible, practical, and scalable, implemented as part of a holistic, organisation-wide OT risk management process. They address requirements derived from operational objectives, regulatory mandates, industry standards, and best practices. The consolidated control catalogue considers both functional effectiveness (i.e., the ability of controls to prevent, detect, and respond to threats) and assurance (i.e., the confidence that controls perform as intended and remain reliable under operational conditions). By integrating functionality and assurance, the playbook ensures that OT systems, including building management systems, industrial control systems, autonomous and remotely operated systems, and associated infrastructure, are resilient, secure, and trustworthy in supporting critical operations.

Comments on this publication may be submitted to:

Government Technology Agency
Attn: Cybersecurity Group, TIS
10 Pasir Panjang Road, #10-01, Mapletree Business City
Singapore 117438
Email: info@tech.gov.sg

Acknowledgements

This playbook was developed by the GovTech OT Security Development Team, comprising representatives from multiple government agencies, industry partners, and distinguished contributors who are OT security experts. We wish to acknowledge and thank the senior officials and subject matter specialists across operational technology, critical infrastructure, and cybersecurity domains whose expertise, guidance, and dedication contributed significantly to the development of this publication. Their collaborative efforts have been instrumental in shaping a practical, scalable, and government-wide reference framework for enhancing OT cyber resilience.

**
**

Document Information

Change History