Safety is the starting point
IEC 62443 meets IEC 61511 and ISA TR84.00.09. Cyber threats to your safety functions belong in the same conversation as process risk.
OT/ICS cybersecurity · Functional safetyBELGIUM / EUROPE / MIDDLE EAST
In OT and Critical
Infrastructure,
Cybersecurity becomes
a Safety Function.
Protecting what keeps your plant running.
People, process and technology, from the first drawing to the last shift.
Grounded in industrial standardsIEC 62443IEC 61511ISO/IEC 27001ISASecure ACSSA
News
ISA webinarWhere safety meets securityWe explore how functional safety and OT cybersecurity work together.
e-BO webinarTurning Policy into PracticePractical OT cybersecurity: secure access, day-to-day operations and audit-ready evidence.Enroll
ISA blogFunctional Safety and OT Cybersecurity Aren’t Analogous. They Meet Inside the Same ControllerWe explore how functional safety and OT cybersecurity can share one lifecycle.
01 / Why OT-Knight
Cybersecurity and safety.
Joined up, on the ground.
Your plant should run with safety, security, reliability and productivity. We bring OT cybersecurity and functional safety together, with programmes that fit a control room, a turnaround schedule and a safety case.
Governance that works in OT
IEC 62443 and ISO/IEC 27001 in one management system, built around the people who operate and maintain your assets.
Experience behind the advice
Certified competence and real plant-floor experience, with a seat on the ISASecure ACSSA Technical Committee.
80+
years of combined
OT experience in the field
6
lifecycle stages,
from FEED to renewal
5
service families,
one accountable partner
ML1–3
guidance along the
ACSSA certification roadmap
02 / Our services
From obligation
to secure operation.
Start with the challenge in front of you. Our five service families connect strategy, engineering and day-to-day operation.
A / Governance & compliance
One management system.
Every site, every obligation.
Unify IT and OT governance and build a compliance approach around the jurisdictions in which you operate.
A1 Unified Security Management System
IEC 62443 integrated with ISO/IEC 27001: a combined management system and Statement of Applicability, practical OT procedures, and readiness for ISO/IEC 27001 and ISASecure ACSSA.
A2 NIS2 and UK NIS / CSRB
Site and entity scoping, a group baseline mapped to national regimes, supervisor-ready evidence and incident reporting. Support includes Belgian CyFun® and the UK NCSC CAF.
A3 Security lifecycle programme
A functional safety and cybersecurity management plan aligned with IEC 62443 and IEC 61511, including project gates, EPC handover, acceptance criteria, management of change and KPIs.
A4 ISASecure ACSSA certification
Guidance from ML1 to ML3: eligibility, scoping, zone partition, gap assessment, mock evaluation and support through certification.
A5 Supply-chain security
IEC 62443-2-4 requirements in tenders and contracts, vendor assessments, third-party registers and CRA conformity requirements for purchased products.
A6 EU Cyber Resilience Act
Support for manufacturers and integrators: product classification, conformity route, risk assessment, secure development, vulnerability handling and technical documentation.
B / Risk & priorities
One risk language.
From the board to the control room.
Make investment decisions with a clear view of consequence, maturity and the controls your plant needs.
B1 Risk management framework
ISO 31000, IEC 62443 and ISO/IEC 27005 brought together on your HSE risk matrix. Deliverables include risk criteria, methodology, a risk register and treatment workflow.
B2 IEC 62443-3-2 risk assessments
System under consideration, zones and conduits, high-level and detailed risk assessments, target security levels and a Cybersecurity Requirements Specification.
B3 Cyber–safety alignment
Assess cyber threats to SIS and safety functions, guided by IEC 61511 and ISA TR84.00.09. Feed findings into HAZOP, LOPA, BPCS/SIS interface decisions and the SRS.
B4 Gap assessments
Measure your position against IEC 62443, ISO/IEC 27001, NIS2, UK NIS, CRA or ACSSA criteria, with maturity scoring and a roadmap planned around your turnarounds.
C / Engineering & assurance
Requirements made real.
Security made verifiable.
Turn your target security level into a design basis, manage delivery and collect the evidence that it works.
C1 Requirements & specifications
IEC 62443-3-3 requirements translated into technical specifications for segmentation, remote access and recovery, governing EPC and vendor delivery.
C2 OT Cybersecurity Management as a Service
A named lead for your OT cybersecurity function: objectives, project steering, tool selection, terms of reference, audit readiness and on-call advice.
C3 Gap-closing projects
Segmentation, the IT/OT secure interface, remote access, hardening, accounts, backup and monitoring. From scope and vendor selection to oversight and closure evidence.
C4 Assurance & verification
Security level verification, cyber FAT and SAT, OT assessments, penetration testing and audits, conducted with live plant conditions in mind. Test protocols, witnessed reports and a findings register.
D / Operational resilience
Secure every day.
Prepared for the difficult one.
Look beyond the documents to the way your site runs, responds and recovers.
D1 Operational posture assessment
Architecture, remote access, accounts, backups, removable media and daily practice. Receive a score per IEC 62443-2-1 SPE and IEC 62443-3-3 FR, top risks and a 90-day action plan.
D2 OT incident response
Response plans, scenario playbooks, escalation matrices and tabletop exercises, aligned with plant safety emergency response and regulatory reporting duties.
D3 Continuity & disaster recovery
OT business impact analysis, recovery time and recovery point objectives, restore procedures and tests, combining IEC 62443 availability requirements with continuity practice.
D4 OT monitoring, NDR, EDR & SOC
Define monitoring requirements, select providers and manage performance independently of any SOC vendor. Deliverables include a scope of work and KPI framework.
E / Training & competence
Build the competence
behind every control.
Practical learning for operators, engineers, contractors and management boards, grounded in real plant-floor experience.
E1 Certified ISA and PECB training
ISA/IEC 62443 courses IC32, IC33, IC34, IC37 and IC49, plus PECB NIS2, ISO/IEC 27001 and ISO 31000 courses. Delivered through our authorised training provider by our ISA Qualified Instructor and PECB Certified Trainer.
E2 Awareness & competence
Tailored sessions for operators, technicians, engineers, contractors and management boards, including NIS2 management-body training.
One partner / The whole lifecycle
OT Cybersecurity
Management as a Service
From the first drawing
to the last shift.
With you all along the lifecycle. We accompany you as your OT cybersecurity function, from objectives and projects to audits.
- 01Concept
& FEED - 02Detailed
design - 03Build,
FAT & SAT - 04Commissioning
- 05Operations
& maintenance - 06Change
& renewal
Your dedicated OT cybersecurity function
Alongside your team.
Accountable at every stage.
- A named OT cybersecurity lead at your side
- Core security objectives identified and tracked
- Cybersecurity projects defined and steered
- Gap-closing projects managed to closure
- OT security tools selected with you
- Terms of reference and tender specifications
- Internal and external audits prepared
- On-call answers to ad-hoc questions
Your OT cybersecurity function, alongside your team.Project steering · Tool selection · Gap closure · Audit readiness · On-call advice
Let’s discuss MaaS03 / Training & competence
Knowledge that travels
back to the plant.
Eight specialist programmes, adapted to your team, assets and maturity. Onsite workshops, multi-day courses and executive briefings in English, French or Spanish.
8 programmes
T1Safe & Secure by DesignOperationalising Functional Safety & OT Cybersecurity3 days 1-day option
Bring IEC 61511 and IEC 62443 together: SIS security risk assessment, safety requirements, SIS/BPCS independence and a combined governance structure. Build a combined safety/security case for a process unit.
T2IEC 62443 FoundationsThe Language of Industrial Cybersecurity1 day
Understand the structure of IEC 62443, responsibilities, Security Program elements, zones and conduits, security levels and Foundational Requirements. Explore the relationship with ISO/IEC 27001, NIST CSF and ISASecure schemes.
T3Building Your IEC 62443 Security ProgramFor asset owners and operators3 days
Implement IEC 62443-2-1 across its eight Security Program Elements. Develop gap assessments, maturity roadmaps, practical policies, service-provider management, KPIs and continuous improvement.
T4Cyber Risk That Means SomethingOT Cyber Risk Management3 days
Connect ISO 31000, ISO/IEC 27005 and IEC 62443-3-2. Work through system scoping, initial and detailed risk assessment, zones and conduits, target security levels and a Cybersecurity Requirements Specification, with a hands-on case study.
T5One ISMS, Two WorldsUnifying IEC 62443 and ISO/IEC 270012 days
Extend an ISMS from IT to OT, map Annex A controls to IEC 62443 requirements, and build scope, a Statement of Applicability and risk treatment for OT assets. Create one audit programme covering both certifications.
T6Secure from Spec to SiteThe OT Cybersecurity Lifecycle for Automation Solutions3 days
For EPCs, integrators, vendors and asset-owner project teams. Cover IEC 62443-2-4 capabilities, project phases from FEED to operations, secure development practices and the cybersecurity deliverables that belong in contracts.
T7Trust, but VerifyOT Cybersecurity Assurance from Risk Assessment to Decommissioning2–3 days
Plan assurance across the lifecycle. Audit security programmes, verify achieved security levels, scope safe FAT/SAT and plant testing, and write evidence and findings. Include secure decommissioning, data sanitisation and credential retirement.
T8Hands-On Hardening & TestingFor ICS Environments · Co-delivered with an expert OT penetration tester2 days Hands-on labs
Practise hardening Windows HMIs and servers, Linux, networks and PLCs. Build scripts and system policies, then verify the results using security tools in scenario-based labs. Designed for novice to intermediate participants.
No programmes match your search. Try another keyword or choose “All programmes”.
Certified learning pathways
Authorised ISA & PECB training
Delivered through our authorised training provider, in-house or in open sessions, by our ISA Qualified Instructor and PECB Certified Trainer.
ISA IC32ISA IC33ISA IC34ISA IC37ISA IC49PECB NIS2ISO/IEC 27001ISO 31000Find your certification pathway
Durations are indicative. Content, depth and exercises can be tailored to your team and regulatory context.
“Functional safety and cybersecurity aren’t analogous:
they literally meet inside the same controller.”
04 / Working with us
A clear path.
A practical next step.
A programme built around your plant and your priorities, with defined deliverables at every stage.
- 01
Discover
Your plant, obligations and priorities.
- 02
Assess
Risks, gaps and maturity, checked on site.
- 03
Plan
A prioritised roadmap that fits your turnarounds.
- 04
Implement
Specify, manage and close the gaps.
- 05
Verify & sustain
Test, audit, train and keep improving.
Built for critical operations
Critical infrastructureOil & gasPetrochemicalsRenewablesBESSPower generationTransmissionDistribution
Our team’s certified competence
Member of the ISASecure ACSSA Technical Committee
05 / Take a closer look
The detail, to take with you.
Explore our full offering in the OT-Knight brochures.
Let’s get started
Let’s secure
your plant together.
Tell us about your plant, your obligations and your next project. We’ll come back with a clear scope and a practical first step.
information@ot-knight.comBelgium · Europe & the Middle EastEnglish · Français · Español
Start a conversation