Vulnerability Assessment and Penetration Testing
Tests calibrated to plant constraints: passive traffic analysis first, then active checks during maintenance windows.
What the service includes
On industrial systems an aggressive scan can stop a process. That is why every check starts with observation and proceeds gradually, in agreement with those who operate the plant.
- Passive analysis. Observation of traffic to identify assets, versions and known vulnerabilities, without sending packets to the process.
- Controlled active testing. Targeted checks during agreed maintenance windows, preferably on test environments or redundant systems.
- Penetration Test. Simulation of an attack from the most likely entry points, such as remote access, the IT network and suppliers, taking care not to impact the process.
- Prioritised report. Vulnerabilities classified by real risk and by whether they can be fixed, because in OT it is not always possible to update immediately.
- Compensating mitigations. When patching is not possible: segmentation, filtering rules, dedicated monitoring.
How we work
The same four-phase method we apply to every project, adapted to this area.
01
Assess
Definition of scope, rules of engagement and operational risks with plant managers.
02
Design
Planning of passive analysis and active testing, with a rollback plan in case of anomalies.
03
Implement
Execution of the activities and delivery of the report with evidence and priorities.
04
Operate
Support for remediation, retesting and ongoing vulnerability management with the SOC.
Technologies and references
- Cisco Cyber Vision and TXOne Networks for passive analysis and inspection
- TXOne Portable Inspector for checking devices and removable media
- IEC 62443 and MITRE ATT&CK for ICS
Want to test the security of your plant?
Tell us about your situation: we will reply with a concrete proposal. You can also call us on 800 035 430.