§01
About this domain.
This directory contains production and infrastructure security standards, procedures, and operational governance artefacts. It covers the security and integrity of IT infrastructure, cloud environments, operational technology, monitoring operations, and change management. All content is released under CC BY-SA 4.0.
§02
Documents.
27 documents in this domain. Each links to its source on GitHub, where the corpus is version-controlled and continuously gated.
- AnnexBuilding Management Systems (BMS) Overlay Annex↗
- AnnexOperational Technology Security Overview Annex↗
- FrameworkIT Service Management Framework↗
- ProcedureChange Management and Configuration Control Procedure↗
- ProcedureEndpoint Management and Device Compliance Procedure↗
- ProcedureMedia Handling and Transport Procedure↗
- ProcedureOT Change Management Procedure↗
- ProcedureOT Incident Response Procedure↗
- ProcedurePatch Management Procedure↗
- ProcedureRelease Management Procedure↗
- ProcedureSecurity Monitoring and Alert Management Procedure↗
- ProcedureThreat Intelligence and SIEM Operations Procedure↗
- RegisterAsset Inventory Register↗
- RegisterIT Operations Key Performance Indicators Register↗
- RegisterIT Security Operations Register↗
- RegisterOT Asset Inventory and Lifecycle Register↗
- StandardCapacity and Performance Management Standard↗
- StandardCertificate Authority Management Standard↗
- StandardCloud Security Configuration Baseline↗
- StandardIT Financial Management Standard↗
- StandardNetwork Security and Segmentation Standard↗
- StandardOT/ICS Security Standard↗
- StandardObservability and Telemetry Standard↗
- StandardPhysical Security of IT Infrastructure Standard↗
- StandardProduction Security Requirements↗
- StandardService Level Management Standard↗
- StandardSite Reliability Engineering Standard↗