Consulting
We can help guide you through the legislative requirements of NIS/OG86 or provide advice regarding most aspects of IACS cyber security, including incident response and training.
Read more about Consulting
Industrial Cyber Security Experts
OT and industrial cyber security for energy, utilities and manufacturing
Practical support with OT cyber security compliance and risk, from architectural design through to commissioning, maintenance and improvement of IACS and OT equipment.
- IEC 62443
- NCSC CAF
- OG86
Current and emerging requirements
Helping you navigate OT cyber security compliance
Our specialists offer practical services to help your business navigate the evolving world of industrial and OT cyber security compliance.
With experience applying IEC 62443, NCSC CAF and OG86 across the energy, utilities and manufacturing sectors, ControlShield is well placed to support organisations with current and emerging cyber security requirements, including UK NIS, NIS2 and the Cyber Security and Resilience Bill, where applicable.
Free OT Cyber Security Appraisal
Know your obligations
Not sure which OT cyber security regulations, standards or legislation apply to your business? We can help.
ControlShield offers a complimentary OT Cyber Security Appraisal to review your business, understand your operational technology environment, and identify which regulatory or legislative requirements may apply.
Following the appraisal, we will provide a practical action plan outlining the key steps needed to improve compliance, reduce cyber risk, and strengthen operational resilience.
What we do
Our services
A selection of the services ControlShield offers. Choose one to find out more, or contact us to discuss your requirements.
Cyber Risk Assessment
Facilitating industrial cyber security risk assessments, including the production of high quality reports, procedures and supporting documentation.
Read more about Cyber Risk AssessmentDesign
Assistance in the design of secure systems architecture, zone and conduit diagrams, asset inventories and cyber security countermeasures.
Read more about DesignAssurance and Testing
Audits of brownfield systems, recommendations and assurance for Cyber FAT/SAT testing.
Read more about Assurance and Testing
Featured work
Recent projects
Examples of the work our team has delivered for clients across industrial sites and NIS assets.
DESNZ CAF Assessments
Compiled several CAF reports against the OG-86 basic profile in a short timescale. The reports were commended by DESNZ assessors as being some of the best received from a UK OES.
Industrial Cyber Security Management System
Developed policies and procedures using the IEC 62443 framework, built with OG-86 in mind for NIS assets, and risk assessed six industrial sites.
Obsolescence Management
Identified, prioritised and planned upgrades for critical industrial systems, with up-to-date asset inventories and time-bound plans.
Blog
OT cyber security, explained
Plain-English answers to common questions about protecting industrial control systems.
How much does OT cybersecurity cost?
The cost of OT cyber security depends on your site size, system complexity, regulatory obligations, current maturity and risk appetite. A single-site review will cost far less than a multi-site transformation programme, but both should begin with the same principle: understand the risk before spending money on controls.Some organisations assume OT cyber security requires expensive technology from day one. In reality, many improvements begin with good governance, documentation, asset inventory, a
What should be in my OT cybersecurity incident response plan?
An OT cyber security incident response plan should explain how your organisation will detect, assess, contain, communicate and recover from cyber incidents affecting industrial systems. It must recognise that OT incidents can have safety, environmental and production consequences.A generic IT incident response plan is not enough. OT response requires involvement from operations, engineering, safety, IT, cyber security, suppliers, communications and leadership.Key contentsYour plan should include
How do I secure IoT devices connected to my critical systems?
IoT and industrial IoT devices can provide valuable data, remote monitoring and efficiency improvements. However, when they connect to critical systems, they must be managed as part of the OT security architecture.Risks include weak default credentials, insecure cloud connections, unpatched firmware, unclear ownership, poor logging, hidden communication paths and devices installed without proper approval.Start with asset ownershipEvery connected device should have an owner, purpose, approved con
Contact
Get in touch
Tell us about your site, systems or compliance question and we’ll get back to you. You can also ask for your free OT Cyber Security Appraisal.
- Email
Email us directly or use the form - AddressControlShield Ltd
Winter Lodge, Methlick, Ellon, Aberdeenshire, AB41 7EP
Send us a message
Fields marked with an asterisk are required.