The aim of the example is not to prescribe a single architecture or implementation. Instead, it demonstrates how organisations can use the NCSC’s Secure connectivity principles as a target state, while making risk‑informed decisions that reflect their own operational context, regulatory obligations and threat landscape. The example highlights how architectural choices, governance processes and operational practices all play a role in achieving resilient OT connectivity. In practice, organisations must balance security, safety, reliability and operational requirements, particularly where legacy infrastructure is involved. Throughout the example, the fictional organisation ‘Admin Corp Water’ works through the eight secure connectivity principles, illustrating how each one can guide design…