{
  "researchCutoff": "2026-11-11",
  "method": "Purposive primary-source review; not a systematic literature review or empirical evaluation.",
  "sources": [
    {
      "name": "Cyber Security Agency of Singapore. (2024). Singapore’s Operational Technology Cybersecurity Masterplan 2024.",
      "description": "Singapore strategic context and secure deployment across the OT lifecycle.",
      "reliability": "Official overview; a strategy, not a universal mandatory control checklist.",
      "url": "https://www.csa.gov.sg/resources/publications/singapore-s-operational-technology-cybersecurity-masterplan-2024/"
    },
    {
      "name": "Stouffer et al. (2023). Guide to Operational Technology (OT) Security. NIST SP 800-82 Rev. 3.",
      "description": "Bounded remote access and disconnect capabilities compatible with OT operations.",
      "reliability": "Primary technical guidance; relevant remote-access provisions reviewed.",
      "url": "https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-82r3.pdf"
    },
    {
      "name": "UK National Cyber Security Centre. (2026). Secure connectivity principles for OT: Principle 3, Centralise and standardise network connections.",
      "description": "Repeatable managed access architecture and OT boundary pattern.",
      "reliability": "Primary technical guidance; effectiveness depends on local implementation.",
      "url": "https://www.ncsc.gov.uk/collection/operational-technology/secure-connectivity/principle-3"
    },
    {
      "name": "CISA and partners. (2025). Primary Mitigations to Reduce Cyber Threats to Operational Technology. 6 May 2025.",
      "description": "Essential remote access, least privilege and IT–OT segmentation.",
      "reliability": "Official-source indexed text reviewed; direct retrieval returned HTTP 403; used only for visible recommendations.",
      "url": "https://www.cisa.gov/sites/default/files/2025-05/fact-sheet-primary-mitigations-to-reduce-cyber-threats-to-operational-technology-508c.pdf"
    }
  ]
}