Four services, one expert
The same engineer who draws the control network signs the defense plan and the risk report.
- Control-system design Large, smart control systems: thousands of I/O points, many sites, communications infrastructure, the control network, and energy savings designed in.
- OT cyber-security architecture Defense architecture and security controls for OT/ICS: separation, monitoring, layered defenses, to NIST SP 800-82, NERC CIP and ISA/IEC 62443.
- Risk assessments A complete inventory of the network's assets, its vulnerabilities and attack scenarios, and a report for the regulator, using tools I built for the job.
- Business consulting Growth, operational efficiency and the adoption of AI, for companies and their managers.
- Training The Critical Infrastructure Protection course, in one-, two- and three-week versions, with labs on real controllers.
Business consulting, three tracks
- Growth. A growth plan with measurable goals, new market and product opportunities, entry into new markets, and the resources to get there.
- Efficiency. Leaner processes and costs, performance indicators, automation, better productivity and margins.
- AI adoption. Finding the processes where AI pays, choosing tools, running a pilot, and rolling out with security and data governance in place.
For US operators
OT security for US critical infrastructure: which of NERC CIP, the TSA pipeline directives, AWIA and IEC 62443 applies to you, and how the four services map to it.
Insights
Articles on OT security: IEC 62443 zones and conduits, NIS2 for operators of control systems, and why attacks send valid HMI commands.