An OT engineer is mapping plant systems onto the Purdue model. A historian server that aggregates production data and exposes it to corporate reporting tools is being placed. Where does this server most appropriately belong?
- A.Level 4 directly inside the corporate business LAN
- B.Level 0, alongside field sensors and actuators
- C.Level 1, on the same segment as the PLCs it polls
- D.The Level 3.5 industrial DMZ between the control network and enterprise network
Why D is correct
A historian that bridges OT data to IT consumers is a classic broker that belongs in the Level 3.5 DMZ, so neither network connects directly to the other. Placing it in the DMZ lets enterprise tools pull data without ever traversing into the control zone.
Know someone studying for OT Security Fundamentals? Send them this one.