What we do
Services for owners, operators, EPCs and integrators of critical infrastructure. Each has a fixed scope, clear deliverables and evidence behind every finding.
Project Lifecycle Cybersecurity Support & Inspections
Each project has its own cybersecurity part that must be cleared. For owners, we act as the independent OT security inspector at each milestone. For vendors, EPCs and integrators, we prepare the procedures, checklists and compliance statements and support them until the owner accepts. On any one project we work for one side only.
For: Asset owners who need an OT security inspector; EPC contractors, system integrators and vendors who must clear the cybersecurity scope with the owner.
Scope and deliverables →Per project stage, or a monthly fee on longer projectsIntegrator & EPC Compliance Support for Project Delivery
When you deliver a project where the owner requires IEC 62443 (3-3, 2-4), its own cybersecurity specification or national standards, we join your team as the OT security specialist. We explain what is required, guide the network, communication and security design, prepare the compliance documents and answer the owner's comments until the cybersecurity scope is accepted. Your team builds and configures the system.
For: System integrators, panel builders and EPC contractors across the Middle East and India without in-house OT security specialists.
Scope and deliverables →3–5 weeks per site, depending on scopeOT Cybersecurity Audit, Gap Assessment & National Standards Compliance
Every country has its own critical-infrastructure security rules. We assess where you stand against them and IEC 62443, including the process side (policies, roles, records and evidence), and show what to fix first. Assessment is by interviews, document review and site walk-downs, without touching live systems.
For: Utilities, plant owners and operators; EPCs and integrators that must prove compliance before handover; audit firms that need OT specialists.
Scope and deliverables →Per substation design, test event or in-service substation; lower price for repeat designsSubstation Control System Security Review
Substations depend on control systems, protection relays and communication links that were rarely designed with today's threats in mind. Our substation engineers review the security posture of your substation control systems (SCS), their communication with the control centre, and all external connectivity: what is lacking, what is outdated and what needs to be improved. The review uses drawings, documents, records and interviews; we don't change anything on live systems.
For: Electricity utilities and transmission and distribution operators; EPCs and integrators delivering substation projects.
Scope and deliverables →Review, policy pack, or both; optional yearly checkRemote Access Security Review & Policy
Remote and vendor access is one of the most common ways into control systems. We map how remote access really works today, check whether the right security is in place, review how access is logged and checked, and write the policy and baseline your team and vendors must follow.
For: Owners and operators of plants, substations and utilities; EPCs that must deliver a remote access design or procedure.
Scope and deliverables →Fixed price per package: set-up, clean-up and prioritisation, or project asset checkOT Asset Inventory Services
An accurate OT asset inventory is the base of OT security. We set it up with your C&I team, make sense of what a monitoring tool discovers, and check project inventories before handover. Your team maintains it; we hand over the template, the data and the process.
For: Owners and operators with incomplete or messy asset information; EPCs and integrators that must hand over a verified asset inventory.
Scope and deliverables →Fixed-scope project, optional periodic review supportOT Risk Register Set-up & Streamlining
A good OT risk register connects threats, assets and real-world consequences, and drives decisions. We set one up, or streamline the one you have, so your risk owners can keep it alive.
For: Operators and owners with no OT risk register, or one that is incomplete, outdated or disconnected from real assets and decisions.
Scope and deliverables →3–4 weeks per unit or system, depending on scopeOT Security Engineering Documents
Clear, audit-ready cybersecurity documents written by OT engineers, to your project's templates, review cycles and standards.
For: EPC contractors, system integrators and OEMs that need specialist cybersecurity deliverables.
Scope and deliverables →2–6 weeks for a full set; single policies from a few daysOT Security Policies & Procedures
Regulators and auditors ask for written policies first. We write OT-specific policies and procedures that match how your plant actually runs, aligned to IEC 62443-2-1, NIST SP 800-82 and the national rules that apply to you.
For: Operators, utilities and plant owners preparing for audits or regulation, or replacing IT policies that don't fit the plant.
Scope and deliverables →One-off audit, handover check, or every six months on a yearly contractOT Backup & Restore Readiness Audit
When a control system fails or is attacked, recovery depends on backups. We audit whether your backups are in place, scheduled, complete and stored safely, check your team's restore evidence, and review the backup and restore part of your continuity plan. Your engineers do all backup and restore work; we verify and report.
For: Owners and operators; EPCs and owners at project handover (TOC and FAC).
Scope and deliverables →Day rate under a framework agreement, or fixed price per work packageOT Specialist Support for Consulting & Audit Firms
Many cybersecurity contracts include control rooms, substations, SCADA and DCS, but audit teams are mostly IT specialists. We join your team as the OT subject expert, so the OT part is assessed properly and nothing unsafe is recommended for a running plant.
For: Consulting firms, audit firms and CERT-In-empanelled auditors with cybersecurity contracts that include control systems.
Scope and deliverables →Monthly fee for set days per month, 6 to 12 month contractResident & Part-time OT Security Lead
We provide an OT security lead who guides your programme, reviews projects and vendor proposals from a security view, and makes sure findings get closed by your team. Advice and oversight only, no hands-on work on live systems.
For: Smaller utilities, plants and industrial companies, and EPCs with repeat projects, that need OT security leadership without a full-time hire.
Scope and deliverables →From a few days to an ongoing retainerOT Cybersecurity Review & Advisory
Focused help where you need it: an independent look at a specific risk, the policies and procedures your regulator expects, or a team that's ready when something goes wrong.
For: Operators, utilities and plant owners building or maturing their OT security programme.
Scope and deliverables →