SESKStuff Everyone Should Know
SESK: Stuff Everyone Should Know · sesk.info/secplus-ot-dmz-between-networks

NIST recommends a DMZ architecture to stop what kind of direct traffic in industrial environments?

Direct traffic between the corporate (IT) network and the OT network.

Start playing free

  1. Between two guest Wi-Fi users
  2. Between the corporate network and the OT network ✔
  3. Between two laptops on the same office Wi-Fi

Why: Industrial control systems run physical processes, so they should not be reachable straight from the office network. A DMZ in between lets only approved, inspected traffic pass. This limits how far an attack on the office side can spread.

Huh, didn't know that: NIST also suggests multi-factor authentication for remote access to OT systems.

The dad joke
The factory network asked IT for some space. IT put a DMZ between them and everyone got along better.
Like this card?
Play the game

References

Answer: Between the corporate network and the OT network. Industrial control systems run physical processes, so they should not be reachable straight from the office network. A DMZ in between lets only approved, inspected traffic pass. This limits how far an attack on the office side can spread.

  1. NIST SP 800-82 Rev. 3, Guide to Operational Technology (OT) Security nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-82r3.pdf
    Employing a DMZ network architecture (e.g., prevent direct traffic between the corporate and OT networks)
    Checked 2026-10-10.

Think this answer is wrong? Tap "Challenge this answer" on the card in the game and tell us why.

Test yourself in the game

Security & PrivacyEncrypting a laptop's files mainly protects which part of the CIA triad?Security & PrivacyA file's hash value no longer matches after someone edits the file. Which CIA property was affected?Security & PrivacyA flood of fake traffic knocks a website offline. Which CIA property does this attack target?

That's stuff everyone should know.