OT/ICS Security
Asset inventory, zones and conduits, supplier remote access, hardening
Complete asset visibility, segmentation and controlled remote access on plant networks, without stopping production.
Learn more about OT/ICS Security
OT security for plants that cannot stop.
We design, integrate and operate the security of industrial networks: from the IEC 62443 assessment to segmentation into zones and conduits, through to the 24/7 SOC that understands field protocols.
A company of the Security Trust Group
Enterprise zoneSL-T 1
L4–5Enterprise ERP, email, cloud services
IT/OT conduit: perimeter firewall
Industrial DMZSL-T 2
L3.5DMZ Replica historian, patching, privileged remote access
DMZ/OT conduit: industrial firewall
Operations zoneSL-T 2
L3Operations MES, SCADA server, historian
L2Supervision HMI, engineering workstation
Cell conduit: IPS with protocol inspection
Cell zoneSL-T 3
L1Control PLC, RTU, DCS over S7comm, Modbus TCP, PROFINET
L0Process Sensors, actuators, drives
In industrial process security since 2017. We work on:
IEC 62443
NIS2 (Italian Legislative Decree 138/2024)
Cyber Resilience Act
Machinery Regulation (EU) 2023/1230
What we do
Six service lines and a single point of contact, from risk assessment to the ongoing management of the plant.
IEC 62443
Risk assessment 3-2, requirements 3-3, integrators 2-4, manufacturers 4-1 and 4-2
Risk assessment by zone, definition of target security levels and system requirements. For machinery manufacturers, support for the secure development lifecycle.
Learn more about IEC 62443
NIS2
Gap analysis, security measures, incident management, supply chain
From gap analysis to the measures required by Italian Legislative Decree 138/2024, with the OT perimeter included from day one rather than added at the end.
Learn more about NIS2
CRA and Machinery Regulation
Cyber Resilience Act, Regulation (EU) 2023/1230, IEC 62443-4-1 and 4-2
For manufacturers of machinery and of products with digital elements: analysis of cybersecurity requirements, risk assessment, technical documentation and secure development lifecycle, through to vulnerability management after placing on the market.
Learn more about the CRA and the Machinery Regulation
SOC and managed services
24/7 SOC and NOC, FortiSIEM, EDR/XDR, vulnerability management
Continuous monitoring of IT and OT networks, detection on industrial protocols and incident response with agreed service levels.
Learn more about SOC and managed services
Vulnerability Assessment and Penetration Testing
Passive analysis, active tests in agreed windows, prioritised reports
Tests calibrated to plant constraints: passive traffic analysis first, then active checks during maintenance windows.
Learn more about VA and PT
How we work
A single cycle from the first analysis to continuous operation. Each phase closes with a verifiable deliverable.
- 01
Assess
Asset inventory, traffic analysis and risk assessment by zone.
Risk and SL-T report
- 02
Design
Zones and conduits architecture, Secure by Design, remediation plan.
Detailed design
- 03
Implement
Supply, configuration and commissioning of switches, firewalls and access in rugged environments.
Acceptance testing and as-built documentation
- 04
Operate
24/7 SOC and NOC, vulnerability management, maintenance and continuous improvement.
SLAs and periodic reports
About us
People who know industrial plants
Since 2017 we have worked in the cyber security of industrial processes, where operational continuity and the safety of people come first. We design, integrate and manage IT, OT and network infrastructures as a System Integrator and Managed Service Provider.
Cquri is the OT and cyber company of the Security Trust Group, an integrator of physical, IT and industrial security systems.
- 2017
- year OT security began
- +80
- plants monitored
- 24/7
- SOC and NOC
Technologies and partners
We choose technology to fit the process, not the other way round. Certified expertise across the entire OT portfolio of our partners.
Fortinet
FortiGate Rugged, FortiSwitch, FortiSIEM, FortiNAC, FortiPAM, FortiEDR
Cisco
Cyber Vision, Catalyst IE, Identity Services Engine, Catalyst Center
TXOne Networks
EdgeIPS and EdgeFire for the industrial network, Stellar for OT endpoints, including legacy ones, Portable Inspector for scanning without installation
15 May 2024
MITRE ATT&CK Framework in the ICS world
The growing digitalisation of industrial control systems (ICS) has led to a significant increase in cybersecurity risks in critical sectors such as energy, manufacturing,…
25 September 2019
The IEC 62443/ISA 99 standard
It is a fact that industrial plants are increasingly targeted by cyber attacks that are ever more specific and ever more dangerous. After Trisis/Triton , let alone…
5 April 2019
The dark side of remote access to ICS/SCADA systems
You too have probably experienced the convenience of connecting to industrial systems while comfortably seated in your armchair at home. Some may think that using software such as…
Let’s talk about your plant.
Tell us about your network, constraints and regulatory deadlines.
Call 800 035 430