Desks on one side, machines on the other
Zones get drawn, filtering rules written, and both applied without anyone travelling, so that a controller, an operator panel or a line-side computer talks to precisely what it needs and nothing further. The outcome is documented in the shape a NIS2 file wants, following what ANSSI publishes about industrial systems.