Cybersecurity services
The growth of the automation industry
Since the early 1980s, the automation industry has expanded greatly, deploying industrial automation and control systems (IACS) across a variety of sectors. The rapid advances in technology have resulted in a legacy of industrial control and safety systems that frequently run on proprietary networks using legacy equipment and running on old and unsupported operating systems.
The expansion in interconnected industrial networks and systems has resulted in greater migration to commercial off-the-shelf technologies such as Ethernet, TCP/IP and Windows. In addition to providing remote access, the migration has exposed IACS to a range of problems typically associated with IT systems that use similar architectures, protocols and devices. Such systems are typically used in a variety of applications, including machinery control, SCADA, process and batch control, fire and gas and emergency and process shutdown systems.
We are experienced in assessing and developing cybersecurity solutions in the oil and gas, utility, chemical, food and other industries that rely heavily on IACS.
Understanding your cybersecurity risks
Working with clients, we assess and understand the business risks presented by their operational technology (OT) systems.
Basic health check
An assessment of the key business areas to identify any risks and to aid management awareness and understanding of any associated risks.
Detailed assessments
A review of current network and security architectures, policies, procedures and documentation to inform a detailed review of the information security status of the organisation, including
- system design and architecture
- system access and privileges
- documentation of policies and procedures
- training of personnel including staff and contractors
- management and monitoring of system security
Results are benchmarked against key operational guidance and industry best practice and will include action plans to enable clients to manage improvements.
Application support
We undertake risk assessments and developing management systems to improve the cybersecurity profile of our clients, including
- risk assessments that comply with IEC 62443, NIS2 European Union’s updated cybersecurity framework (Directive (EU) 2022/2555) and the Health and Safety Executive (HSE) requirements by identifying potential internal and external vulnerabilities and threats to IACS assets
- development of management policies and procedures
- identification of IACS asset device types and locations within the network infrastructure
- understanding of and mapping the application and functional requirements of the IACS assets, including 24×7 operations, communication patterns, topology, required resiliency and traffic types.
Development of new and replacement systems
The upgrades and development of control and safety systems follow company engineering and the IEC 62443 standards. Any design documentation includes a detailed review of the cybersecurity aspects, such as hardware, software and network design.
- Define
- Lifecycle
- Design and execute
This design process recognises that no single product, technology or methodology can fully secure the IACS and that any approach to security must address internal and external security threats.
We use multiple layers of defence (physical, procedural and electronic) at different levels by applying designs, policies and procedures to these different types of threats, and that could include multiple layers of network security to protect networked assets.
We identify and assess cybersecurity threats and resolve associated risks
We are a systems integrator with a track record in developing high-integrity, industrial-grade control and safety systems based on hardware and software principally from Siemens and Rockwell Automation with resources to support Mitsubishi, GE, Schneider, OMRON, etc. Our staff are advanced in developing industrial automation control system, safety and/or cybersecurity design, implementation and assessments.
We bring a depth of experience, skill and expertise working with complex and critical industry sectors. As every industry and business is different, we work with you to determine the best combination of services and assessments to suit your requirements.
Your Systems. Safe, secure and under control
Supporting you with sustainable, secure and cost-effective solutions.
Get in touch