Cyber-attacks against industrial IT such as OT and automation environments has become a growing issue as it can generate a large negative impact on an organization, financially and operationally. ​ ​ The starting point here is that the customer does not have a dedicated approach for cybersecurity in the OT-environment, lacking insights about assets; network components such as servers, PLCs, IoT devices and the control over communication. As automation resources with dedicated cyber security skill is scarce and many components are managed by various external suppliers with different approaches to remote access the complexity increases. To get an understanding of the environment and eventually set the relevant cyber protection initiatives based on an optimized approach is thus difficult.​