OT security lab · Level 2 of 8
Zones and conduits: split a flat network
Level 2 of 8 in the OT security lab: a free OT security exercise at Foundation level. A plant runs on one flat network. Split it into zones, join them with the fewest conduits, and set a target security level for each zone.
Free · no download. Your work is saved on this device. Updated 18 Oct 2026.
The brief
- Client
- Corvane Packaging Ltd
- Site
- Packing hall network, Corvane
- Work order
- WO-OTS-102
- Task code
- OTS-02
- Difficulty
- Foundation
- Type of work
- Design
A plant runs on one flat network. Split it into zones, join them with the fewest conduits, and set a target security level for each zone.
Skills you practise
- IEC 62443 zones and conduits
- Security levels SL 1 to 4
- Flat network detection
- Remote access through the DMZ
What the test checks
The acceptance test marks the skills this level practises.
- IEC 62443 zones and conduits
- Security levels SL 1 to 4
- Flat network detection
- Remote access through the DMZ
In this lab
- Purdue levels, zones and conduits
- Firewall rules, remote access and logs
- Patch plans, backups and an incident drill
Levels in the OT security lab
Previous: Map the plant network: put every device on its levelNext: Firewall rules: the minimum, then deny by default
- Map the plant network: put every device on its level
- Zones and conduits: split a flat network
- Firewall rules: the minimum, then deny by default
- Remote access: the vendor comes in through the DMZ
- Spot the intruder: the events that matter in a day's log
- Patch or protect: choose within the maintenance window
- Backup and recovery: known-good copies and a proved restore
- Incident drill: a simulated note on an operator screen
Part of the OT security lab
Map a plant network, split it into zones, write the firewall rules, read the logs and run the response drill.
Feeds these internships: SCADA and HMI.