In OT and Critical
Infrastructure,
Cybersecurity becomes
a Safety Function.

IEC 62443 integrated with ISO/IEC 27001: a combined management system and Statement of Applicability, practical OT procedures, and readiness for ISO/IEC 27001 and ISASecure ACSSA.

Site and entity scoping, a group baseline mapped to national regimes, supervisor-ready evidence and incident reporting. Support includes, for example, Belgian CyFun® and the UK NCSC CAF. We adapt to your jurisdiction.

A functional safety and cybersecurity management plan aligned with IEC 62443 and IEC 61511, including project gates, EPC handover, acceptance criteria, management of change and KPIs.

Guidance from ML1 to ML3: eligibility, scoping, zone partition, gap assessment, mock evaluation and support through certification.

IEC 62443-2-4 requirements in tenders and contracts, vendor assessments, third-party registers and CRA conformity requirements for purchased products.

Support for manufacturers and integrators: product classification, conformity route, risk assessment, secure development, vulnerability handling and technical documentation.

ISO 31000, IEC 62443 and ISO/IEC 27005 brought together on your HSE risk matrix. Deliverables include risk criteria, methodology, a risk register and treatment workflow.

System under consideration, zones and conduits, high-level and detailed risk assessments, target security levels and a Cybersecurity Requirements Specification.

Assess cyber threats to SIS and safety functions, guided by IEC 61511 and ISA TR84.00.09. Feed findings into HAZOP, LOPA, BPCS/SIS interface decisions and the SRS.

Measure your position against IEC 62443, ISO/IEC 27001, NIS2, UK NIS, CRA or ACSSA criteria, with maturity scoring and a roadmap planned around your turnarounds.

IEC 62443-3-3 requirements translated into technical specifications for segmentation, remote access and recovery, governing EPC and vendor delivery.

A named lead for your OT cybersecurity function: objectives, project steering, tool selection, terms of reference, audit readiness and on-call advice.

Segmentation, the IT/OT secure interface, remote access, hardening, accounts, backup and monitoring. From scope and vendor selection to oversight and closure evidence.

Security level verification, cyber FAT and SAT, OT assessments, penetration testing and audits, conducted with live plant conditions in mind. Test protocols, witnessed reports and a findings register.

Architecture, remote access, accounts, backups, removable media and daily practice. Receive a score per IEC 62443-2-1 SPE and IEC 62443-3-3 FR, top risks and a 90-day action plan.

Response plans, scenario playbooks, escalation matrices and tabletop exercises, aligned with plant safety emergency response and regulatory reporting duties.

OT business impact analysis, recovery time and recovery point objectives, restore procedures and tests, combining IEC 62443 availability requirements with continuity practice.

Define monitoring requirements, select providers and manage performance independently of any SOC vendor. Deliverables include a scope of work and KPI framework.

ISA/IEC 62443 courses IC32, IC33, IC34, IC37 and IC49, plus PECB NIS2, ISO/IEC 27001 and ISO 31000 courses. Delivered through our authorised training provider by our ISA Qualified Instructor and PECB Certified Trainer.

Tailored sessions for operators, technicians, engineers, contractors and management boards, including NIS2 management-body training.

We build and run the management system that keeps your SIS safe throughout its life, on an operating site or within a capital project: ready for assessment, with a clear handover into operation.

Independent FSAs at every lifecycle stage, from hazard and risk analysis and the SRS to commissioning, operation and modification, plus audits that check your procedures are followed.

We write or review the SRS for each safety instrumented function: safe state, trip points, response times, SIL target, bypass and reset rules, and proof test requirements.

PFD, hardware fault tolerance, architectural constraints and systematic capability checked against each SIL target: an independent calculation you can defend in an assessment.

Proof test procedures and interval optimisation, demand and failure tracking, bypass management, and review of SIS modifications once the SIS is running.

We guide you in choosing the certification body and through the whole process. We have led an FSMS to exida certification, so we know the route first-hand.

Awareness sessions, tailored IEC 61511 training and coaching on your own projects, from the control room to the board.