I'll start: auto screen lock on an CCTV system. It went in with the corporate GPO and the night shift spent the entire night wiggling the mouse so they wouldn't loose visibility. Reply with: - the control - what went wrong - what you do now No company names needed. I'll take the best examples into a Sunday clinic.

Welcome in. Before the first Sunday clinic I want to know who is in the room, because the clinic topics come from you. Copy these four lines into a comment and fill them in. Keep your company anonymous if you like: a sector and a size are enough. 1. Who you are: role, sector, company size 2. What you were handed: NIS2, IEC 62443, ISO 27001, CyFun, or a mix 3. Your deadline, if you have one 4. The one requirement you would most like explained in a Sunday clinic Bonus, if you have one: the strangest thing an auditor ever asked you. One request: no photos or details of your site, control room or screens. This is an OT security room, so we practise what we teach. I'll go first in the comments, and I reply to every introduction.