Critical Infrastructure
Critical-infrastructure governance starter for energy, water, transport, and manufacturing operators. It includes configurable OT/ICS disclosure rules, direct-actuation restrictions, probing detection, and human-review routing; operators remain responsible for independent safety and access controls.
This template is a configurable starting point and control mapping. It is not certification, legal advice, or a guarantee of compliance; validate it against your obligations and environment before use.
US, EU
7 references
5 mapped domains
Fully Air-gapped, Sovereign Region
Referenced Frameworks, Standards & Obligations
Mapped Control Domains
Deployment profiles
Get started in 3 steps
Open the template
Open the catalog entry in the Keeptrusts console and review its included controls, references, and deployment metadata.
Adapt the configuration
Use the template as a starting point, then adjust relevant policies, thresholds, routing, and review settings for your requirements.
Validate before rollout
Test every outcome you configure—such as allow, redact, block, or operator review—before deploying through a supported gateway workflow.
More Industry-Specific templates
Finance
Financial services template for PCI-aware redaction, MNPI suppression, supervisory disclaimers, and auditable AI operations.
Healthcare (US — HIPAA)
HIPAA-aligned governance starter for US healthcare organizations using AI systems with PHI; validate configuration and non-gateway safeguards before use.
Healthcare (EU — GDPR)
Starter control mapping for GDPR Article 9 health-data handling and EU AI Act risk-management considerations in European healthcare AI.