OT/ICS Security
Complete asset visibility, segmentation and controlled remote access on plant networks, without stopping production.
What the service includes
In a plant, availability and physical safety come first. That is why cyber security measures must be chosen and introduced with the same care as a process change.
- Asset inventory and visibility. Passive detection of devices, protocols and communications on the industrial network, without interfering with the process.
- Zones and conduits. Network segmentation based on the Purdue model and the IEC 62443 concepts of zones and conduits.
- Vendor remote access. Authorised maintenance sessions, time-limited and recorded.
- Hardening. Securing configurations, services and accounts on control systems, within the manufacturer’s constraints.
- Anomaly detection. Monitoring of industrial protocols to identify unusual behaviour.
How we work
The same four-phase method we apply to every project, adapted to this area.
01
Assess
Passive mapping of assets and flows, and identification of risks in relation to the production process.
02
Design
Zones and conduits architecture with target security levels, compatible with downtime windows.
03
Implement
Installation of industrial sensors and appliances, and phased activation.
04
Operate
Continuous monitoring from the OT SOC and periodic review of the architecture.
Technologies and references
- Cisco Cyber Vision for industrial asset visibility
- TXOne Networks: EdgeIPS, EdgeFire, Stellar and Portable Inspector
- Fortinet for segmentation and remote access
- IEC 62443
Want to see what is really on your OT network?
Tell us about your situation: we will reply with a concrete proposal. You can also call us on 800 035 430.