Remote access is one of the most common entry points into OT environments, yet legacy VPNs grant broad, persistent connectivity that attackers exploit. This session examines how Zero Trust access models, including moving target defense and just-in-time, least-privilege connections, let third-party vendors, OEMs, and operators reach critical systems without standing exposure. It covers isolating remote sessions, brokering access without flattening the network, and maintaining an auditable record of who touched what. Attendees will learn how to scale secure remote access across sites while shrinking the attack surface. (#SSD)