ICS / SCADA security
We assess industrial control networks, remote access and device connections, choosing methods around production processes and agreed operational constraints.
01 / ASSESSMENT
Begin industrial assessments with passive observation, documentation and configuration review. Examine IT/OT separation, remote access and controllers. Active tests require explicit agreement and must respect operational process constraints.
PRACTICAL SCENARIOS / TTP
TTPs are an adversary’s tactics, techniques and procedures. We analyse these approaches and select scenarios for your environment and the scope agreed in writing, connecting each assessment result to practical defensive guidance.
First understand PLC controllers, HMI operator panels and engineering workstations. Map connections using existing network records and configurations. Scanning and active tests that may affect production require separate authorisation.
Assess paths from office networks to control systems, supplier identities and remote services. Review permissions, control points and sign-in records. Identify connections to restrict, accounts to govern and gaps in monitoring.
Use MITRE ATT&CK for ICS to frame industrial scenarios. Assess unauthorised control access or loss of operator visibility through lab or tabletop exercises. Establish responsibilities for process safety, isolation and restoration.
02 / OUTCOMES
Work proceeds under the system owner’s written authorisation, a contract and a confidentiality agreement. Assets, methods, timing, stop conditions and data handling are defined before work begins.
Send your requirements through CyberTrust. We will clarify asset count, assessment depth and expected outcomes with you, then set out timing and pricing in the proposal.