A VPN encrypts the path to an industrial network, but secure remote PLC work also needs identity controls, segmented access, change approval, logging, safe operating boundaries, and tested recovery procedures.