New build is an opportunity to get things right - first time!
Treat the network as a data utility not a piece of string used only for connectivity alone.
Your new automation network is an opportunity to deploy a robust, high speed, resilient network platform capable of supporting multiple autonomous applications, without compromise. Networks can be centrally managed and segmented logically by application.
Highly secure and fully controlled remote access can then be provided to each maintaining provider without compromising any integrity.
Alarms and alerts can be time synchronised and centrally collected, SYSLOG or advanced SIEM (security information and event management) systems can apply logic and intelligence to the vast amounts of data generated by discrete devices (switches, routers, firewalls etc). Further IDS/IPS (intrusion detection and prevention systems) can be implemented to provide the tightest controls on network usage.
Operations staff can be trained to perform the L1 role that is typically expected of them with L2 support provided by either Customer day staff or remotely by IT4A.