A remote asset server, comprising: a cloud interface component configured to communicatively couple the remote asset server to a cloud platform, wherein the cloud interface component is further configured to send an instruction to a connectivity broker which maintains the cloud platform to instantiate cloud-based portals based on one or more security policies and wherein the cloud-based portals comprise at least an end user portal, allowing owners of the industrial asset to remotely define or modify the security policies that govern access to an industrial asset, and an original equipment manufacturer, OEM, portal, allowing the OEM which may be a manufacturer of the industrial asset, to remotely configure the industrial asset; an asset interface component configured to communicatively couple the remote asset server to the industrial asset, wherein the industrial asset comprises any industrial device, collection of devices, or machine, including but not limited to an industrial controller, a motor drive, a human machine interface, HMI, terminal, a sensor, a meter, a control cabinet or a vision system; and a remote management policy component configured to regulate remote access to the industrial asset from the cloud platform, wherein the remote management policy component is further configured to receive configuration input specifying the one or more security policies defining a permitted scope of remote access to the industrial asset; and wherein the connectivity broker device is communicatively coupled to the remote asset server and provides secure data pipelines to the industrial asset via the remote asset server. a cloud interface component configured to communicatively couple the remote asset server to a cloud platform, wherein the cloud interface component is further configured to send an instruction to a connectivity broker which maintains the cloud platform to instantiate cloud-based portals based on one or more security policies and wherein the cloud-based portals comprise at least an end user portal, allowing owners of the industrial asset to remotely define or modify the security policies that govern access to an industrial asset, and an original equipment manufacturer, OEM, portal, allowing the OEM which may be a manufacturer of the industrial asset, to remotely configure the industrial asset; an end user portal, allowing owners of the industrial asset to remotely define or modify the security policies that govern access to an industrial asset, and an original equipment manufacturer, OEM, portal, allowing the OEM which may be a manufacturer of the industrial asset, to remotely configure the industrial asset; an asset interface component configured to communicatively couple the remote asset server to the industrial asset, wherein the industrial asset comprises any industrial device, collection of devices, or machine, including but not limited to an industrial controller, a motor drive, a human machine interface, HMI, terminal, a sensor, a meter, a control cabinet or a vision system; and a remote management policy component configured to regulate remote access to the industrial asset from the cloud platform, wherein the remote management policy component is further configured to receive configuration input specifying the one or more security policies defining a permitted scope of remote access to the industrial asset; and wherein the connectivity broker device is communicatively coupled to the remote asset server and provides secure data pipelines to the industrial asset via the remote asset server.