Consulting
We can help guide you through the legislative requirements of NIS/OG86 or provide advice regarding most aspects of IACS cyber security, including incident response and training.
Read more about Consulting
Industrial Cyber Security Experts
OT and industrial cyber security for energy, utilities and manufacturing
Practical support with OT cyber security compliance and risk, from architectural design through to commissioning, maintenance and improvement of IACS and OT equipment.
- IEC 62443
- NCSC CAF
- OG86
Current and emerging requirements
Helping you navigate OT cyber security compliance
Our specialists offer practical services to help your business navigate the evolving world of industrial and OT cyber security compliance.
With experience applying IEC 62443, NCSC CAF and OG86 across the energy, utilities and manufacturing sectors, ControlShield is well placed to support organisations with current and emerging cyber security requirements, including UK NIS, NIS2 and the Cyber Security and Resilience Bill, where applicable.
Free OT Cyber Security Appraisal
Know your obligations
Not sure which OT cyber security regulations, standards or legislation apply to your business? We can help.
ControlShield offers a complimentary OT Cyber Security Appraisal to review your business, understand your operational technology environment, and identify which regulatory or legislative requirements may apply.
Following the appraisal, we will provide a practical action plan outlining the key steps needed to improve compliance, reduce cyber risk, and strengthen operational resilience.
What we do
Our services
A selection of the services ControlShield offers. Choose one to find out more, or contact us to discuss your requirements.
Cyber Risk Assessment
Facilitating industrial cyber security risk assessments, including the production of high quality reports, procedures and supporting documentation.
Read more about Cyber Risk AssessmentDesign
Assistance in the design of secure systems architecture, zone and conduit diagrams, asset inventories and cyber security countermeasures.
Read more about DesignAssurance and Testing
Audits of brownfield systems, recommendations and assurance for Cyber FAT/SAT testing.
Read more about Assurance and Testing
Featured work
Recent projects
Examples of the work our team has delivered for clients across industrial sites and NIS assets.
DESNZ CAF Assessments
Compiled several CAF reports against the OG-86 basic profile in a short timescale. The reports were commended by DESNZ assessors as being some of the best received from a UK OES.
Industrial Cyber Security Management System
Developed policies and procedures using the IEC 62443 framework, built with OG-86 in mind for NIS assets, and risk assessed six industrial sites.
Obsolescence Management
Identified, prioritised and planned upgrades for critical industrial systems, with up-to-date asset inventories and time-bound plans.
Blog
OT cyber security, explained
Plain-English answers to common questions about protecting industrial control systems.
AI and IEC 62443 security levels: what changes and what doesn't
By Ross O'Brien, ChCSP, Director, ControlShield Ltd I keep being asked the same question in different forms. Does AI break IEC 62443? Are security levels (SLs) obsolete? Should every zone now be SL 3? My short answer is no, no, and not automatically. The security level model is a way of reasoning about threats and capability. AI doesn't replace that reasoning; it changes the inputs. If you set your target security levels a few years ago and haven't looked since, it's worth another look. I...
What to Ask Suppliers For: IEC 62443 in Procurement
Under IEC 62443, you ask suppliers to meet requirements you have already set, not to be "62443 compliant" in general. Give them your target security levels and your cyber security requirements specification. Then ask product suppliers for evidence of secure development and component capability, and ask integrators and maintainers for evidence of their security processes and how mature those processes are. Which part answers which question IEC 62443 splits the work by role. An IACS (industrial...
IEC 62443 Security Levels: What SL-T, SL-C and SL-A Mean
In IEC 62443, SL-T is the target security level that a risk assessment sets for a zone or conduit. SL-C is the capability security level that a system or component can provide when properly configured. SL-A is the achieved security level actually measured in the design or the built system. All three are expressed per foundational requirement, and the aim is for SL-A to meet SL-T in every zone and conduit. What a security level is IEC 62443-3-2 defines a security level (SL) as a measure of...
Contact
Get in touch
Tell us about your site, systems or compliance question and we’ll get back to you. You can also ask for your free OT Cyber Security Appraisal.
- Email
Email us directly or use the form - AddressControlShield Ltd
Winter Lodge, Methlick, Ellon, Aberdeenshire, AB41 7EP
Send us a message
Fields marked with an asterisk are required.