At ControlShield, we take pride in our team of experts who possess a diverse range of skills and knowledge. Our team members have consistently delivered exceptional services to our clients, leveraging their expertise to provide innovative solutions.
Working for a client with no existing industrial cyber security management systems in place, our team developed and produced a range of policies and procedures using the IEC 62443 framework. These documents were built with OG-86 in mind for NIS assets, whilst complementing existing enterprise cyber security policies.
Our team carried out comprehensive risk assessments (high and detailed level) for the client’s six industrial sites, spending over 30 days working with asset teams to ensure completeness of assessments.
Risk assessments were carried out using a custom philosophy document, taking into consideration IEC 62443 recommendations and using the approved corporate risk matrix. The result was high quality risk reports, highlighting the most critical systems with risk reduction improvement recommendations.
In 2023 the Department for Energy Security and Net Zero (DESNZ) requested that all Operators of Essential Services (OES) carry out a comprehensive review of cyber security measures against the OG-86 basic profile. We worked with the company to compile several CAF reports in a short timescale. These reports were commended by DESNZ assessors as being some of the best received from a UK OES.
Our team were tasked with identifying, prioritising and planning upgrades for critical industrial systems across several of the client’s assets. The scope included a full survey of industrial systems to ensure that asset inventories were brought up to date, prioritising critical systems by security level and business continuity importance, and finally developing time-bound plans to ensure modifications were completed on time and on budget.
As part of OG-86 requirements, our client required an industrial cyber security training plan and material to be developed for on-site and in-office personnel.
A RASCI matrix and training procedure was developed to identify roles and responsibilities for industrial cyber security; this was used to identify gaps in training. We then worked alongside a computer-based training provider to develop two high quality training courses, which were delivered to staff.
Get in touch to discuss your requirements or to book your free OT Cyber Security Appraisal.