Cybersecurity in OT environments is now a key factor for the continuity, integrity and safety of any industrial operation. We meet the most demanding standards (IEC 62443, NIS2).
We assess, design and implement protection measures for control and automation networks, from DCS, PLC, SCADA, sensors and actuators to the connection with IT systems. We apply the principles of IEC 62443 —layered architecture (defence in depth), network segmentation, access control and active monitoring— and adapt our services to the NIS2 directive for critical infrastructure and essential entities.
We do not just audit: we design secure industrial control systems (ICS) from the outset and install them ourselves, from sizing servers and storage to the redundant architecture and commissioning.
What we offer
- Design and installation of secure, redundant ICS architectures
- OT cybersecurity audits and risk assessment
- Network segmentation and review of industrial firewalls
- Secure management of remote access and maintenance
- Backup and recovery policies
- Early threat detection in industrial systems
- Patch management for PCs and PLCs
- Vulnerability audits and penetration testing
- Integration with IT security solutions while respecting OT operations
We design and size the ICS infrastructure
Beyond protecting the network, we design the complete platform the control system runs on: servers, storage, backups and virtual machines, sized according to the control system manufacturer’s recommendations and with room to grow.
Servers and virtualisation
- Cluster of redundant servers
- Sizing of cores and memory per virtual machine
- Operator, engineering, domain, antivirus and patching stations
Storage and backup
- Shared storage (SAN) with redundant controllers
- Dedicated NAS for backups
- Backup and replication of virtual machines
Built-in security
- NAC, MFA, network monitoring and IDS servers
- Jump Server for remote access
- Capacity validated and documented for audit
Real case: desalination plant in Taiwan
At a reverse osmosis desalination plant in Taiwan we designed and implemented the complete Siemens PCS 7 control architecture (around 4,000 I/O signals) and OT cybersecurity: segmentation with Stormshield firewalls, remote access via VPN and Jump Server, SINEC NMS and Security Monitor, IDS, MFA, NAC and OT backup.
See the complete project architecture →
Cybersecurity deliverables
Engineering does not end with implementation. We document everything needed to operate and audit the system:
- Network and security architectures
- Hardening procedures
- Access and user management
- Monitoring plans
- Backup and recovery procedures
- Technical evidence for audits
What sets us apart
We live OT technology from the inside: for decades we have been designing, maintaining and commissioning real industrial systems. We know first-hand the risks, constraints and requirements of operating environments, and how to apply cybersecurity measures without compromising process continuity or productivity.
To that foundation we add an IT team specialised in industrial cybersecurity, forming our own multidisciplinary department able to design tailored solutions aligned with IEC 62443 and NIS2.