Clear Cut Cyber | Engineering and Industrial

Engineering and Industrial

The cyber threat to industrial operations is real and growing. Technology is increasingly being used to improve industrial processes, reduce maintenance costs, and provide greater business insight. These technologies also introduce cyber risks to operations which need to be carefully managed.

We help organisations understand the cyber risks to their Operational Technology and Industrial Control Systems. We help develop strategies that can drive security improvements over the full lifecycle of industrial systems. We conduct risk assessments and threat modelling to give engineers and risk owners a clear picture of the cyber threat to their operations and the safety of their personnel. We conduct training to give engineers and operators the knowledge they need to develop and maintain secure industrial facilities.

Find out more here.

Experienced

We understand how Operational Technology enables industry across multiple sectors

Threat focused

We understand the real threats that critical industrial infrastructure faces

Training and support

We work with your teams to improve security and keep operations running

Why is cyber security an issue for industrial systems?

Industrial processes have long used technology such as Industrial Controllers to automate processes to deliver consistent products in a safe and cost effective manner. Increasingly there are valid business drivers to connect these systems to other networks. This is typically either to connect to the enterprise network to allow for data transfer and better visibility of production, or through remote connectivity added to sub-systems to allow for remote diagnostics and maintenance.

These changes, and the broader convergence of Information Technology (IT) and Operational Technology (OT), requires a more secure approach to industrial system design and operation.

Our engineering partner handles this - why do we need to do it?

Cyber security controls and measures can be delegated to suppliers but, in most situations, risk cannot be delegated and remains with the facility operator. It is therefore critical that assurance can be provided about the cyber security of the supplier provided systems and the networks they may connect to.

Our engineering systems are air gapped - why do we need to worry about security?

Network level attacks are not the only ways that systems can be compromised. Common threat models for industrial systems consider the threat from maintenance laptops or USB devices being plugged into the isolated systems. Also, upgrades to sub-systems often include their own network connectivity via 4/5G networks to enable fault finding and diagnostics. These can bridge the air gap and expose the facility to a wider range of cyber threats.

Book your free cyber security health check today

The cyber security health check is a simple process consisting of an initial online questionnaire completed by you, followed by a discussion with one of our expert consultants.