OT cyber security services

The security program delivers a strategic approach to managing cyber security using well defined cyber security practices, aligned to global cyber security frameworks, international standards, regional and corporate policies.

• Developing a managed security program gives you the peace of mind that you have an effective system in place to manage cyber security risk now and in the future
  
  
  The security program elements:
  
  SPE 1 - Organisational security measures
  
  SPE 2 - Configuration management
  
  SPE 3 - Network and communications security
  
  SPE 4 - Component security
  
  SPE 5 – Protection of data
  
  SPE 6 - User access control
  
  SPE 7 - Event and incident management
  
  SPE 8 - System integrity and availability

Pre-requisite
An OT cyber security risk assessment must have been carried out

Read more above?
It is our recommendation that following the creation of your security program, we work with you and plan to deliver recommended improvement activities that match your new cyber security policies and standards, based on your key priorities

Benefits to your organisation:

• Validated incident response readiness
• Improved awareness of IACS equipment adversary capabilities
• Improved detections, actions and plans

The workshop process

An incident response and handling process detects, analyses and responds to cyber security incidents and threats

The NIST 800-61 incident handling guide is used and is internationally recognised as best practice for determining the incident response phases

The workshop will review:

• Preparation
• Detection and analysis
• Containment
• Eradication
• Recovery and post incident

Workshop output:

Post incident review of reports generated during the workshop

• Actionable improvements and recommendations in line with NIST 800-61
• Development of best practice and credibility
• Prioritisation of actions using the priority fix rating methodology
• Ensures all actions are suitable, achievable and measurable