What it means
An OT job safety analysis breaks work into steps, identifies hazards and cyber dependencies, and defines controls before maintenance, testing, configuration, or incident activity begins.
Why it matters
Cybersecurity tasks in industrial environments can introduce electrical, mechanical, process, environmental, access, and production hazards that are absent from ordinary IT work.
Practical focus
- Define the exact task, equipment, process state, energy sources, access path, tools, personnel, and stop conditions.
- Identify hazards from physical work and cyber actions such as scans, restarts, failover, blocking, logic change, or remote support.
- Brief roles, PPE, isolation, lockout or tagout, communications, rollback, emergency response, and outbrief requirements.
- Preserve this evidence: Retain the approved analysis, permits, isolation records, briefing attendance, change or work order, test results, deviations, and outbrief.
- Exercise this failure scenario: A well-intended diagnostic or configuration action triggers movement, process upset, loss of view, or unsafe maintenance conditions.
Common mistakes
- Using the label OT Job Safety Analysis without defining scope, ownership, decision authority, and the exact data, systems, people, or process affected.
- Treating a policy, contract, diagram, dashboard, or tool demonstration as proof that OT Job Safety Analysis operates consistently in production.
- Closing work without retaining the evidence needed to reconstruct the decision and verify the intended control outcome.
- Testing only the normal path and never rehearsing the failure condition: A well-intended diagnostic or configuration action triggers movement, process upset, loss of view, or unsafe maintenance conditions.
Certification relevance
This subject appears in or supports the following certification bodies of knowledge: