Direct-Routed ZTNA for OT: Compliance Without Compromise | Part II
This webinar is part two of a series on direct routed ZTNA for OT environments, focusing specifically on compliance frameworks and audit requirements. David McBride and Walid Dimachki from Appgate discuss how direct routed zero trust network access addresses compliance requirements across federal and commercial sectors. The session covers key frameworks including DOD zero trust strategy, CMMC 2.0, NIST controls, and NERC CIP requirements. They explain how direct routed ZTNA differs from cloud-routed solutions by keeping policy decisions, enforcement gateways, and audit trails under organizational control rather than routing through third-party clouds. The discussion emphasizes that for regulated OT environments, zero trust has moved from strategy to audit obligation, with mandatory CMMC assessments beginning November 2026. Key topics include data sovereignty, evidence preservation, named user accountability, and the architectural advantages of direct routing for compliance audits. The presenters also cover Appgate's certifications including FIPS 140-3, Common Criteria EAL2+, and NIAP protection profile certification.
