Industrial cybersecurity addresses operational technology — OT — risks while considering availability and process function. The assessment connects assets, connections and access practices to inform protection priorities.
Control and supervisory systems have their own continuity requirements and life cycles. Measures must be evaluated in this context and coordinated with operations, maintenance and the functions responsible for security.
The scope may include an assessment, architecture review or improvement planning. Activities on live systems require access and change conditions to be agreed in advance.
The scope is defined according to asset condition, project stage and available information.
Inventory, architecture and access practices are reviewed using methods agreed with the facility's responsible personnel. The analysis identifies dependencies and information needs.
The review identifies dependencies between networks, systems and operational functions. Recommendations consider segmentation, authorised access and vendor support in line with availability requirements.
Continuity requires an understanding of backups, configurations and recovery responsibilities. Improvements are planned around agreed tests and maintenance windows, avoiding changes whose effects on the process have not been assessed.
Deliverables are agreed when the service is defined. The bases used, results and outstanding checks are documented so that the information can carry through to the next stage.
An initial review confirms what information is available and what needs to be completed. To prepare for that discussion, it is useful to have:
Explore the services that complement this scope.
