Work Plan Builder
Sequenced remediation programme derived from the mitigation plan, with schedule and budget envelope.
Planning assumptions
CAPEX estimate
$241,500
OPEX estimate (annual)
$138,000
Total year one
$379,500
Timeline — 28 weeks over a 12-month horizon
Segment camera/NVR VLAN and block east-west RTSPW1–W7
Firmware campaign for weaponized ONVIF CVEW4–W14
Rotate default credentials on IoMT fleetW9–W12
Deploy OT-aware IPS at Plant North uplinkW11–W23
Forward OT syslog to SIEM with ICS parsersW17–W22
Quarantine policy automation via NACW20–W28
Work packages
| Package | Owner | Priority | Duration | CAPEX | OPEX / yr |
|---|---|---|---|---|---|
Segment camera/NVR VLAN and block east-west RTSP MIT-01 | Network Ops | P1 | 6 w | $45,000 | $12,000 |
Firmware campaign for weaponized ONVIF CVE MIT-02 | Facilities IT | P1 | 10 w | $0 | $38,000 |
Rotate default credentials on IoMT fleet MIT-04 | Biomed | P1 | 3 w | $0 | $8,000 |
Deploy OT-aware IPS at Plant North uplink MIT-03 | Security Eng | P2 | 12 w | $120,000 | $26,000 |
Forward OT syslog to SIEM with ICS parsers MIT-05 | SOC | P2 | 5 w | $15,000 | $22,000 |
Quarantine policy automation via NAC MIT-06 | Network Ops | P3 | 8 w | $30,000 | $14,000 |