Compliance evidence for IEC 62443, NERC CIP and NCA OTCC

1. 01

   Challenge

   Audit evidence is interviews and screenshots that describe what was intended, not what happened.

2. 02

   What WireTrace sees

   Network observations relevant to inventory, segmentation, access and exposure controls.

3. 03

   What WireTrace understands

   Each of 415 controls across seven frameworks rated observable, partial, manual assessment or not assessable from the network.

4. 04

   What WireTrace decides

   Which controls are evidenced continuously and which need people to close.

5. 05

   Integration / action

   Signed evidence bundle export; auditors close the rest in the assessment workflow.

6. 06

   Outcome

   Continuous evidence for the controls a network can show, and a clear list of the rest.

Condition: About a third of controls have automated network evidence.