What we do
Services for owners, operators, EPCs and integrators of critical infrastructure. Each has a fixed scope, clear deliverables and evidence behind every finding.
Project Lifecycle Cybersecurity Support & Inspections
OT cybersecurity support and inspection at every project stage: scope of work, bid, design, FAT, SAT, TOC and FAC.
For: Asset owners who need an OT cybersecurity inspector; EPC contractors, system integrators and vendors who must clear the cybersecurity scope with the owner.
Scope and deliverables →Integrator & EPC Compliance Support for Project Delivery
We work on your side to deliver a project that meets IEC 62443, the owner's specification and national standards.
For: System integrators, panel builders and EPC contractors across the Middle East and India without in-house OT cybersecurity specialists.
Scope and deliverables →OT Cybersecurity Audit, Gap Assessment & National Standards Compliance
Assess your control systems against IEC 62443 and the national critical-infrastructure rules of each country where you operate.
For: Utilities, plant owners and operators; EPCs and integrators that must prove compliance before handover; audit firms that need OT specialists.
Scope and deliverables →Substation Control System Security Review
Security review of substation control systems, their link to the control centre and every external and remote connection.
For: Electricity utilities and transmission and distribution operators; EPCs and integrators delivering substation projects.
Scope and deliverables →Remote Access Security Review & Policy
Find every remote and vendor access path, check the security in place and set a clear remote access policy.
For: Owners and operators of plants, substations and utilities; EPCs that must deliver a remote access design or procedure.
Scope and deliverables →OT Asset Inventory Services
Set up your OT asset inventory, clean it up after a monitoring tool is installed, or check it at project handover.
For: Owners and operators with incomplete or messy asset information; EPCs and integrators that must hand over a verified asset inventory.
Scope and deliverables →OT Risk Register Set-up & Streamlining
We set up a working OT cybersecurity risk register, or fix one that isn't managed properly, and hand it over to your team.
For: Operators and owners with no OT risk register, or one that is incomplete, outdated or disconnected from real assets and decisions.
Scope and deliverables →OT Cybersecurity Engineering Documents
IEC 62443 project documentation: security philosophy, zone and conduit design, risk assessment and compliance matrices.
For: EPC contractors, system integrators and OEMs that need specialist cybersecurity deliverables.
Scope and deliverables →OT Cybersecurity Policies & Procedures
Practical OT cybersecurity policies and procedures your engineers can follow and your auditors will accept.
For: Operators, utilities and plant owners preparing for audits or regulation, or replacing IT policies that don't fit the plant.
Scope and deliverables →OT Backup & Restore Readiness Audit
Verify that your control systems have proper, scheduled and complete backups, and that restore is ready.
For: Owners and operators; EPCs and owners at project handover (TOC and FAC).
Scope and deliverables →OT Specialist Support for Consulting & Audit Firms
An experienced OT cybersecurity specialist for your audit and assessment teams.
For: Consulting firms, audit firms and CERT-In-empanelled auditors with cybersecurity contracts that include control systems.
Scope and deliverables →Resident & Part-time OT Cybersecurity Lead
An experienced OT cybersecurity lead for a set number of days per month, or for a fixed period.
For: Smaller utilities, plants and industrial companies, and EPCs with repeat projects, that need OT cybersecurity leadership without a full-time hire.
Scope and deliverables →OT Cybersecurity Review & Advisory
Targeted reviews, supplier assessments, incident response plans and exercises for OT teams.
For: Operators, utilities and plant owners building or maturing their OT cybersecurity programme.
Scope and deliverables →