OT cyber security
Asset discovery, segmentation, monitoring and incident response for operational technology, built around the plant's safety case.
Plant networks used to be protected mostly by being separate. That is no longer true. Remote support, cloud reporting and vendor access have connected operational technology to the outside world, and regulation such as the NIS2 directive now holds plant operators responsible for securing it.
Our OT security practice is run by control engineers who also hold security qualifications. The difference matters: a measure that would be routine in corporate IT, like patching on a Tuesday, can trip a plant.
Services
- Assessment. A site assessment against IEC 62443 that starts with what is actually on the network. Most plants we assess have 20 to 30 percent more connected devices than their asset list says.
- Segmentation. Zones and conduits designed around the process and the safety case, so the office network and the plant network only meet at points you monitor.
- Vendor access control. Time-limited, logged, per-session approval for every vendor, Halden included.
- Monitoring. Passive monitoring of plant traffic that flags new devices, new conversations and known attack patterns without touching the control system.
- Incident response. A plan agreed with the plant: who shuts what down, in what order, and how the plant runs manually for a shift. Rehearsed annually.
Regulation
| Framework | How we help |
|---|---|
| IEC 62443 | Assessments, zone and conduit design, secure development of our own products |
| NIS2 (EU) | Gap analysis, risk management measures, incident reporting readiness |
| National utility regulations | Country-specific teams hold the relevant certifications |
Start with the list
If you do one thing this quarter, read OT cyber security: what changed this year and work through the four-item list at the end. Then talk to sales about an assessment.